Skip to content
EntityQ541691· pop 12· linked from 29 articles

Also known as Sonar

SonarQube is an open-core static code analysis platform developed by Sonar. It provides continuous inspection of code quality to perform automatic reviews to detect bugs, vulnerabilities, security hotspots, and code smells on over 35 programming languages as well as frameworks and infrastructure technologies. SonarQube offers reports on duplicated code, coding standards, unit tests, code coverage, technical debt, code complexity, comments, bugs, software bill of materials (SBOMs), and security recommendations.

Key facts

Software.name
SonarQube
Software.logo
SonarQube_Logo_2025.png
Software.screenshot
SonarQube Screenshot 2025.png
Software.caption
A SonarQube project homepage
Software.developer
Sonar
Software.latest release version
SonarQube Server Release 2025.1
Software.latest release date
Jan 2025
Software.released
2006–2007
Software.programming language
Java
Software.operating system
Cross-platform
Software.genre
Static code analysis
Software.license
GNU Lesser General Public License
Software.website
Official website

via Wikipedia infobox

Source code

SonarQube provides the capability to not only show the health of an application but also to highlight issues newly introduced. With a Quality Gate in place, you can achieve Clean Code and therefore improve code quality systematically. Links Website Download Documentation Webapp source code X SonarSource, author of SonarQube Issue tracking, read-only. Only SonarSourcers can create tickets. Responsible Disclosure Next instance of the next SonarQube version For support questions ("How do I?", "I got this error, why?", ...), please first read the documentation and then head to the SonarSource Community. The answer to your question has likely already been answered! 🤓 Please be aware that we are not actively looking for feature contributions. The truth is that it's extremely difficult for someone outside SonarSource to comply with our roadmap and expectations. Therefore, we typically only accept minor cosmetic changes and typo fixes. With that in mind, if you would like to submit a code contribution, please create a pull request for this repository. Please explain your motives to contribute this change: what problem you are trying to fix, what improvement you are trying to make. Make sure that you follow our code style and all tests are passing (Travis build is executed for each pull request). Willing to contribute to SonarSource products? We are looking for smart, passionate, and skilled people to help us build world-class code-quality solutions. Have a look at our current job offers here! dependencies list dependencies spotlessApply fix source headers by applying HEADER wrapper --gradle-version 5.2.1 upgrade wrapper When building the sonarqube repository, the webapp is automatically downloaded from Maven Central as a dependency, it makes it easy for you to contribute backend changes without having to care about the webapp. But if your contribution also contains UI changes, you must clone the sonarqube-webapp repository, do your changes there, build it locally and then build the sonarqube repository using the WEBAPP BUILD PATH environment variable to target your custom build of the UI. You can also target a specific version of the webapp by updating the webappVersion property in the ./gradle.properties file and then building the sonarqube repository normally. Historically our translations were stored in sonar-core/src/main/resources/org/sonar/l10n/core.properties , but this file is now deprecated and not updated anymore. Default translations (in English) are now defined in the webapp repository, here: The format has changed but you can still have it as a .properties file format by running the following command: Note that contributing extensions for translations into other languages still work the same way as before. It's just the source of truth for the default translations that changed.

Excerpt from the source-code README · 6,964 chars · not written by Vinony

Wikidata facts

Official website
www.sonarsource.com
Image
SonarQube Project page.png
Show 5 more facts
software version identifier
25.12.0
inception
2007-12-14
social media followers
11786
source code repository URL
github.com/SonarQubeCommunity
Commons category
SonarQube
Sources (6)

via Wikidata · CC0

~6 min read

Article

13 sections
Contents
  • Overview
  • SonarQube Server (formerly SonarQube)
  • SonarQube Cloud (formerly SonarCloud)
  • SonarQube Advanced Security
  • Features
  • Advanced Static Application Security Testing (SAST)
  • Software Composition Analysis (SCA)
  • AI Code Assurance
  • AI CodeFix
  • Secrets Detection
  • See also
  • References
  • External links

SonarQube is an open-core static code analysis platform developed by Sonar. It provides continuous inspection of code quality to perform automatic reviews to detect bugs, vulnerabilities, security hotspots, and code smells on over 35 programming languages as well as frameworks and infrastructure technologies. SonarQube offers reports on duplicated code, coding standards, unit tests, code coverage, technical debt, code complexity, comments, bugs, software bill of materials (SBOMs), and security recommendations.

==Overview== The SonarQube offerings (SonarQube Server, SonarQube Cloud, SonarQube for IDE) analyzes all code—first-party, generative AI, and third-party open source code, to help produce secure, reliable, and maintainable software. It integrates with DevOp platforms, including GitHub, Bitbucket, Azure, and GitLab. The commercial offerings of SonarQube supports programming languages such as Java (including Android), C#, C, C++, JavaScript, TypeScript, Python, Go, Swift, COBOL, Apex, PHP, Kotlin, Ruby, Scala, HTML, CSS, ABAP, Flex, Objective-C, PL/I, PL/SQL, RPG, T-SQL, VB.NET, VB6, and XML.

Connections

Categories