SonarQube
Sign in to saveAlso known as Sonar
SonarQube is an open-core static code analysis platform developed by Sonar. It provides continuous inspection of code quality to perform automatic reviews to detect bugs, vulnerabilities, security hotspots, and code smells on over 35 programming languages as well as frameworks and infrastructure technologies. SonarQube offers reports on duplicated code, coding standards, unit tests, code coverage, technical debt, code complexity, comments, bugs, software bill of materials (SBOMs), and security recommendations.
Key facts
- Software.name
- SonarQube
- Software.logo
- SonarQube_Logo_2025.png
- Software.screenshot
- SonarQube Screenshot 2025.png
- Software.caption
- A SonarQube project homepage
- Software.developer
- Sonar
- Software.latest release version
- SonarQube Server Release 2025.1
- Software.latest release date
- Jan 2025
- Software.released
- 2006–2007
- Software.programming language
- Java
- Software.operating system
- Cross-platform
- Software.genre
- Static code analysis
- Software.license
- GNU Lesser General Public License
- Software.website
- Official website
via Wikipedia infobox
Source code
SonarQube provides the capability to not only show the health of an application but also to highlight issues newly introduced. With a Quality Gate in place, you can achieve Clean Code and therefore improve code quality systematically. Links Website Download Documentation Webapp source code X SonarSource, author of SonarQube Issue tracking, read-only. Only SonarSourcers can create tickets. Responsible Disclosure Next instance of the next SonarQube version For support questions ("How do I?", "I got this error, why?", ...), please first read the documentation and then head to the SonarSource Community. The answer to your question has likely already been answered! 🤓 Please be aware that we are not actively looking for feature contributions. The truth is that it's extremely difficult for someone outside SonarSource to comply with our roadmap and expectations. Therefore, we typically only accept minor cosmetic changes and typo fixes. With that in mind, if you would like to submit a code contribution, please create a pull request for this repository. Please explain your motives to contribute this change: what problem you are trying to fix, what improvement you are trying to make. Make sure that you follow our code style and all tests are passing (Travis build is executed for each pull request). Willing to contribute to SonarSource products? We are looking for smart, passionate, and skilled people to help us build world-class code-quality solutions. Have a look at our current job offers here! dependencies list dependencies spotlessApply fix source headers by applying HEADER wrapper --gradle-version 5.2.1 upgrade wrapper When building the sonarqube repository, the webapp is automatically downloaded from Maven Central as a dependency, it makes it easy for you to contribute backend changes without having to care about the webapp. But if your contribution also contains UI changes, you must clone the sonarqube-webapp repository, do your changes there, build it locally and then build the sonarqube repository using the WEBAPP BUILD PATH environment variable to target your custom build of the UI. You can also target a specific version of the webapp by updating the webappVersion property in the ./gradle.properties file and then building the sonarqube repository normally. Historically our translations were stored in sonar-core/src/main/resources/org/sonar/l10n/core.properties , but this file is now deprecated and not updated anymore. Default translations (in English) are now defined in the webapp repository, here: The format has changed but you can still have it as a .properties file format by running the following command: Note that contributing extensions for translations into other languages still work the same way as before. It's just the source of truth for the default translations that changed.
Excerpt from the source-code README · 6,964 chars · not written by Vinony
Wikidata facts
- Official website
- www.sonarsource.com
- Image
- SonarQube Project page.png
Show 5 more facts
- software version identifier
- 25.12.0
- inception
- 2007-12-14
- social media followers
- 11786
- source code repository URL
- github.com/SonarQubeCommunity
- Commons category
- SonarQube
via Wikidata · CC0
~6 min read
Article
13 sectionsContents
- Overview
- SonarQube Server (formerly SonarQube)
- SonarQube Cloud (formerly SonarCloud)
- SonarQube Advanced Security
- Features
- Advanced Static Application Security Testing (SAST)
- Software Composition Analysis (SCA)
- AI Code Assurance
- AI CodeFix
- Secrets Detection
- See also
- References
- External links
SonarQube is an open-core static code analysis platform developed by Sonar. It provides continuous inspection of code quality to perform automatic reviews to detect bugs, vulnerabilities, security hotspots, and code smells on over 35 programming languages as well as frameworks and infrastructure technologies. SonarQube offers reports on duplicated code, coding standards, unit tests, code coverage, technical debt, code complexity, comments, bugs, software bill of materials (SBOMs), and security recommendations.
==Overview== The SonarQube offerings (SonarQube Server, SonarQube Cloud, SonarQube for IDE) analyzes all code—first-party, generative AI, and third-party open source code, to help produce secure, reliable, and maintainable software. It integrates with DevOp platforms, including GitHub, Bitbucket, Azure, and GitLab. The commercial offerings of SonarQube supports programming languages such as Java (including Android), C#, C, C++, JavaScript, TypeScript, Python, Go, Swift, COBOL, Apex, PHP, Kotlin, Ruby, Scala, HTML, CSS, ABAP, Flex, Objective-C, PL/I, PL/SQL, RPG, T-SQL, VB.NET, VB6, and XML.