BestHub
Sign in
Tag

SonarQube

0 views collected around this technical thread.

Raymond Ops
Raymond Ops
Jun 12, 2025 · Information Security

Build an Automated Security Code Scanning Platform with SonarQube, Jenkins, and SVN

This guide walks you through setting up a fully automated security code detection platform—covering environment preparation, installing JDK, MySQL, SVN, Maven, Tomcat, SonarQube, and Jenkins, configuring each component, integrating them via Jenkins pipelines, and running sample scans to generate actionable security reports.

AutomationDevOpsJenkins
0 likes · 20 min read
Build an Automated Security Code Scanning Platform with SonarQube, Jenkins, and SVN
Sohu Tech Products
Sohu Tech Products
Apr 2, 2025 · Mobile Development

Static Code Analysis Tools for iOS Development – Comparison, Pros, Cons, and Usage

The article reviews open‑source static analysis options for iOS, then compares SonarQube, Infer, and Clang Static Analyzer, outlining each tool’s language support, advantages, drawbacks, CI/CD integration, and practical usage to help teams choose the best solution based on project size, language mix, and reporting needs.

Clang AnalyzerSonarQubeStatic Analysis
0 likes · 27 min read
Static Code Analysis Tools for iOS Development – Comparison, Pros, Cons, and Usage
DevOps Cloud Academy
DevOps Cloud Academy
Mar 20, 2025 · Operations

Key Tools and Practices in DevOps Engineering: Jira, GitLab, Jenkins, Build Tools, Unit Testing, and SonarQube

This article provides a comprehensive overview of essential DevOps engineering tools and practices—including Jira release management, GitLab Gitflow workflow, Jenkins CI/CD pipelines, Maven/Gradle/MSBuild build tools, unit testing frameworks, and SonarQube quality analysis—illustrated with enterprise‑level case studies to demonstrate their real‑world impact.

Build ToolsDevOpsGitLab
0 likes · 15 min read
Key Tools and Practices in DevOps Engineering: Jira, GitLab, Jenkins, Build Tools, Unit Testing, and SonarQube
转转QA
转转QA
Oct 21, 2024 · Information Security

Implementation of Static Code Scanning in Zhuanzhuan's DevOps Platform

This article details Zhuanzhuan's practical implementation of static code scanning within its self‑built DevOps platform, covering its significance, architecture, incremental analysis methods, permission management, rule selection, promotion process, and challenges encountered, illustrating how it became a low‑cost, repeatable security safeguard in their CI/CD workflow.

DevOpsSecuritySonarQube
0 likes · 10 min read
Implementation of Static Code Scanning in Zhuanzhuan's DevOps Platform
37 Interactive Technology Team
37 Interactive Technology Team
Aug 19, 2024 · Artificial Intelligence

Nova: An AI‑Powered Code Review System Integrated with CI/CD Pipelines

Nova is an AI-powered code review system integrated with GitLab CI and SonarQube, offering full-project context, multi-language support, extensibility for models and search methods, easy Docker deployment, safety filters, and aims to improve review precision and provide customizable audit prompts.

AI code reviewContext RetrievalDeployment
0 likes · 3 min read
Nova: An AI‑Powered Code Review System Integrated with CI/CD Pipelines
DevOps Cloud Academy
DevOps Cloud Academy
Jun 17, 2024 · Cloud Native

Comprehensive Guide to Setting Up a CI/CD Pipeline with Jenkins, Docker, SonarQube, and ArgoCD on AWS and Kubernetes

This step‑by‑step tutorial explains how to configure a full CI/CD pipeline using Jenkins, Maven, Docker, SonarQube, Helm, and ArgoCD on an AWS EC2 instance with Kubernetes, covering version‑control setup, instance provisioning, credential management, pipeline scripting, and automated deployment.

AWSArgoCDDocker
0 likes · 20 min read
Comprehensive Guide to Setting Up a CI/CD Pipeline with Jenkins, Docker, SonarQube, and ArgoCD on AWS and Kubernetes
Ant R&D Efficiency
Ant R&D Efficiency
Oct 17, 2023 · Fundamentals

Analysis of Code Defects and Their Repair Rates in Projects A and B

The report analyzes SonarQube‑detected defects in Projects A and B, classifying them by type and severity, revealing that code smells dominate while null‑pointer bugs are unexpectedly frequent, and discusses why some defects are quickly fixed versus others remaining unresolved, emphasizing early detection, design rigor, and robust testing.

Defect ManagementSonarQubeStatic Analysis
0 likes · 16 min read
Analysis of Code Defects and Their Repair Rates in Projects A and B
TAL Education Technology
TAL Education Technology
Jul 13, 2023 · Fundamentals

Understanding Cyclomatic Complexity and Code Quality Metrics

This article explains cyclomatic complexity, its calculation formulas, practical examples, and how to measure and improve code quality using tools like SonarQube, ESLint, and codeMetrics, while also presenting refactoring techniques such as single‑responsibility, open‑closed, polymorphism, early returns, and functional programming to reduce complexity.

JavaScriptSonarQubeStatic Analysis
0 likes · 13 min read
Understanding Cyclomatic Complexity and Code Quality Metrics
FunTester
FunTester
Jan 3, 2023 · Fundamentals

Static Testing, Code Review, and Using SonarQube for Software Quality Assurance

The article explains static testing concepts, the role of code inspection and reviews, the advantages and limitations of automated code scanning tools, and provides a practical guide for integrating SonarQube into a development workflow to improve code quality and enforce testing standards.

Code InspectionCode ReviewSonarQube
0 likes · 6 min read
Static Testing, Code Review, and Using SonarQube for Software Quality Assurance
Rare Earth Juejin Tech Community
Rare Earth Juejin Tech Community
Jan 26, 2022 · Information Security

No Vue Vulnerabilities: SonarQube Issue Is a Backend API Auth Flaw, Not a Front‑end Problem

Recent rumors claimed that foreign hacker groups were exploiting SonarQube and Vue.js to attack government and enterprise systems, but investigation shows the SonarQube flaw is a pure backend API authentication issue unrelated to Vue, and Vue itself has no known security vulnerabilities when standard front‑end safety practices are followed.

API authenticationSecuritySonarQube
0 likes · 6 min read
No Vue Vulnerabilities: SonarQube Issue Is a Backend API Auth Flaw, Not a Front‑end Problem
DevOps Cloud Academy
DevOps Cloud Academy
Nov 1, 2021 · Operations

Integrating SonarQube Code Scanning with GitLab Commit Status

This guide explains how to set up SonarQube and Sonar‑scanner for static code analysis, run the scanner with project parameters, install the Sonar‑GitLab plugin, configure commit‑status integration, and use the resulting GitLab commit status to enforce merge‑request policies based on pipeline outcomes.

Code ScanningDevOpsGitLab
0 likes · 3 min read
Integrating SonarQube Code Scanning with GitLab Commit Status
Selected Java Interview Questions
Selected Java Interview Questions
Oct 10, 2021 · Fundamentals

Using SonarLint and SonarQube for Java Code Quality Analysis

This guide introduces SonarLint and SonarQube, explains how to install and configure them for Java projects, demonstrates scanning with Maven, and provides additional resources such as Alibaba Java coding conventions and documentation links, helping developers improve code quality and maintainability.

JavaMavenSonarLint
0 likes · 5 min read
Using SonarLint and SonarQube for Java Code Quality Analysis
DevOps Cloud Academy
DevOps Cloud Academy
Sep 3, 2021 · Information Security

Understanding SonarQube: Quantifying Software Quality, Rule Types, Severity Levels, and Metrics

This article explains how SonarQube uses static analysis to measure software reliability, maintainability, security, complexity, test coverage and duplication, describes its rule categories, severity levels, issue states, and metric rating scales, and shows why high‑quality code reduces costs and improves safety.

SecuritySoftware MetricsSonarQube
0 likes · 7 min read
Understanding SonarQube: Quantifying Software Quality, Rule Types, Severity Levels, and Metrics
DevOps Cloud Academy
DevOps Cloud Academy
Jun 15, 2021 · Information Security

Understanding SonarQube: Quantifying Software Quality, Rule Types, Severities, and Metrics

This article explains how SonarQube uses static analysis to measure software reliability, maintainability, security, complexity, test coverage and duplication, describes its rule categories, severity levels, issue states, and quality metrics, and highlights the cost and productivity benefits of high‑quality code.

SecuritySoftware MetricsSonarQube
0 likes · 6 min read
Understanding SonarQube: Quantifying Software Quality, Rule Types, Severities, and Metrics
Java Architect Essentials
Java Architect Essentials
May 17, 2021 · Fundamentals

Using SonarLint, SonarQube, and Alibaba Code Guidelines for Comprehensive Code Quality Analysis

This article introduces SonarLint and SonarQube, explains how to install and configure them, demonstrates code analysis and rule customization, shows integration with Maven via the sonar‑maven‑plugin, and highlights Alibaba's coding standards as a practical example of improving software quality.

Alibaba Code GuidelinesMavenSonarLint
0 likes · 5 min read
Using SonarLint, SonarQube, and Alibaba Code Guidelines for Comprehensive Code Quality Analysis
DevOps Cloud Academy
DevOps Cloud Academy
Apr 21, 2021 · Information Security

Integrating SonarQube Sonar Secrets Plugin into a CI/CD Pipeline for Secure Development

This article explains how to integrate the SonarQube Sonar Secrets plugin into a CI/CD pipeline to provide early security feedback, detect hard‑coded credentials, build and install the plugin, configure SonarQube, and enable secret scanning for Java and JavaScript projects.

DevOpsSecrets DetectionSecurity Scanning
0 likes · 4 min read
Integrating SonarQube Sonar Secrets Plugin into a CI/CD Pipeline for Secure Development
DevOps Cloud Academy
DevOps Cloud Academy
Feb 24, 2021 · Operations

Integrating SonarQube Code Scanning with GitLab Commit Status

This guide explains how to install SonarQube and Sonar‑scanner, configure scanning parameters, add the Sonar‑GitLab plugin, and use additional properties to link scan results to GitLab commit statuses, enabling pipeline‑based merge request control.

Code ScanningDevOpsGitLab
0 likes · 4 min read
Integrating SonarQube Code Scanning with GitLab Commit Status