BestHub
Sign in
Tagged articles

SonarQube

71 articles · Page 1 of 1
Raymond Ops
Raymond Ops
Jun 30, 2026 · Operations

How to Use SonarQube for Code‑Quality Scanning and Eliminate Bugs

This article explains why code‑quality issues are a major source of technical debt, introduces SonarQube’s multi‑language static analysis, describes its core features such as multi‑dimensional analysis, incremental scans and Quality Gates, and provides step‑by‑step deployment, configuration, CI/CD integration, best‑practice recommendations, troubleshooting tips and monitoring scripts to ensure reliable, secure and scalable code‑quality management in production environments.

CI/CDQuality GateSonarQube
0 likes · 34 min read
How to Use SonarQube for Code‑Quality Scanning and Eliminate Bugs
FunTester
FunTester
Jan 3, 2026 · Fundamentals

How to Make Testing a Daily Habit: Practical Tools, Layouts, and Metrics

This article explains why testing is essential, outlines its concrete benefits, compares static analysis tools like PMD and SonarQube, provides actionable test‑layout guidelines, suggests a phased adoption path, and defines key metrics for continuous test‑quality improvement.

SonarQubebest practicespmd
0 likes · 11 min read
How to Make Testing a Daily Habit: Practical Tools, Layouts, and Metrics
转转QA
转转QA
Nov 18, 2025 · Operations

How to Seamlessly Upgrade SonarQube from V7 to V10.7 for JDK8‑JDK21 Support

This guide details a step‑by‑step, incremental upgrade of SonarQube from V7.9.6 LTS to V10.7 LTS, covering project background, upgrade value, challenges, strategy, technical implementation, JDK compatibility, plugin migration, multi‑JDK handling, authentication changes, reference‑branch feature, and post‑upgrade results with lessons learned.

JDK CompatibilityPlugin migrationReference Branch
0 likes · 20 min read
How to Seamlessly Upgrade SonarQube from V7 to V10.7 for JDK8‑JDK21 Support
Sohu Tech Products
Sohu Tech Products
Jul 9, 2025 · Mobile Development

Choosing the Right Static Analyzer for iOS: SonarQube vs Infer vs Clang

This article compares popular static‑code analysis tools for iOS—including SonarQube, Infer, and Clang Static Analyzer—detailing their language support, features, pros and cons, integration methods, and practical usage tips, helping developers select the most suitable solution for their projects.

InferSonarQubeclang
0 likes · 30 min read
Choosing the Right Static Analyzer for iOS: SonarQube vs Infer vs Clang
Raymond Ops
Raymond Ops
Jun 12, 2025 · Information Security

Build an Automated Security Code Scanning Platform with SonarQube, Jenkins, and SVN

This guide walks you through setting up a fully automated security code detection platform—covering environment preparation, installing JDK, MySQL, SVN, Maven, Tomcat, SonarQube, and Jenkins, configuring each component, integrating them via Jenkins pipelines, and running sample scans to generate actionable security reports.

AutomationJenkinsSonarQube
0 likes · 20 min read
Build an Automated Security Code Scanning Platform with SonarQube, Jenkins, and SVN
Sohu Tech Products
Sohu Tech Products
Apr 2, 2025 · Mobile Development

Static Code Analysis Tools for iOS Development – Comparison, Pros, Cons, and Usage

The article reviews open‑source static analysis options for iOS, then compares SonarQube, Infer, and Clang Static Analyzer, outlining each tool’s language support, advantages, drawbacks, CI/CD integration, and practical usage to help teams choose the best solution based on project size, language mix, and reporting needs.

CI/CDClang AnalyzerInfer
0 likes · 27 min read
Static Code Analysis Tools for iOS Development – Comparison, Pros, Cons, and Usage
DevOps Cloud Academy
DevOps Cloud Academy
Mar 20, 2025 · Operations

Key Tools and Practices in DevOps Engineering: Jira, GitLab, Jenkins, Build Tools, Unit Testing, and SonarQube

This article provides a comprehensive overview of essential DevOps engineering tools and practices—including Jira release management, GitLab Gitflow workflow, Jenkins CI/CD pipelines, Maven/Gradle/MSBuild build tools, unit testing frameworks, and SonarQube quality analysis—illustrated with enterprise‑level case studies to demonstrate their real‑world impact.

Build ToolsCI/CDGitLab
0 likes · 15 min read
Key Tools and Practices in DevOps Engineering: Jira, GitLab, Jenkins, Build Tools, Unit Testing, and SonarQube
转转QA
转转QA
Oct 21, 2024 · Information Security

Implementation of Static Code Scanning in Zhuanzhuan's DevOps Platform

This article details Zhuanzhuan's practical implementation of static code scanning within its self‑built DevOps platform, covering its significance, architecture, incremental analysis methods, permission management, rule selection, promotion process, and challenges encountered, illustrating how it became a low‑cost, repeatable security safeguard in their CI/CD workflow.

CI/CDSonarQubecode quality
0 likes · 10 min read
Implementation of Static Code Scanning in Zhuanzhuan's DevOps Platform
phodal
phodal
Aug 22, 2024 · Artificial Intelligence

What’s New in Shire 0.5? AI Coding Agent Gains SonarQube, Git, and Data‑Guarding Features

Shire 0.5 introduces SonarQube issue support, Git‑enabled ShireQL queries, a reranking function for RAG, and new data‑guarding capabilities like the redact function and customizable secret‑pattern YAML, enabling developers to securely build AI‑powered coding agents that leverage IDE assets while protecting sensitive information.

AI codingGit queriesIDE integration
0 likes · 8 min read
What’s New in Shire 0.5? AI Coding Agent Gains SonarQube, Git, and Data‑Guarding Features
DevOps Cloud Academy
DevOps Cloud Academy
Jun 17, 2024 · Cloud Native

Comprehensive Guide to Setting Up a CI/CD Pipeline with Jenkins, Docker, SonarQube, and ArgoCD on AWS and Kubernetes

This step‑by‑step tutorial explains how to configure a full CI/CD pipeline using Jenkins, Maven, Docker, SonarQube, Helm, and ArgoCD on an AWS EC2 instance with Kubernetes, covering version‑control setup, instance provisioning, credential management, pipeline scripting, and automated deployment.

AWSArgoCDCI/CD
0 likes · 20 min read
Comprehensive Guide to Setting Up a CI/CD Pipeline with Jenkins, Docker, SonarQube, and ArgoCD on AWS and Kubernetes
Huolala Tech
Huolala Tech
Oct 24, 2023 · Operations

How Huolala Built a Scalable Unit Testing Platform with Tekton, SonarQube, and GitLab

This article describes Huolala's journey from a legacy PHP codebase to a Java‑centric microservice architecture, the common misconceptions and difficulties of unit testing, and the design of an automated CI/CD pipeline that integrates Tekton, SonarQube, GitLab Runner, JUnit5, and Mockito to enforce coverage gates and improve code quality.

AutomationCI/CDGitLab
0 likes · 15 min read
How Huolala Built a Scalable Unit Testing Platform with Tekton, SonarQube, and GitLab
Ant R&D Efficiency
Ant R&D Efficiency
Oct 17, 2023 · Fundamentals

Analysis of Code Defects and Their Repair Rates in Projects A and B

The report analyzes SonarQube‑detected defects in Projects A and B, classifying them by type and severity, revealing that code smells dominate while null‑pointer bugs are unexpectedly frequent, and discusses why some defects are quickly fixed versus others remaining unresolved, emphasizing early detection, design rigor, and robust testing.

SonarQubebug fixingcode quality
0 likes · 16 min read
Analysis of Code Defects and Their Repair Rates in Projects A and B
TAL Education Technology
TAL Education Technology
Jul 13, 2023 · Fundamentals

Understanding Cyclomatic Complexity and Code Quality Metrics

This article explains cyclomatic complexity, its calculation formulas, practical examples, and how to measure and improve code quality using tools like SonarQube, ESLint, and codeMetrics, while also presenting refactoring techniques such as single‑responsibility, open‑closed, polymorphism, early returns, and functional programming to reduce complexity.

JavaScriptSonarQubecode metrics
0 likes · 13 min read
Understanding Cyclomatic Complexity and Code Quality Metrics
FunTester
FunTester
Jan 3, 2023 · Fundamentals

Static Testing, Code Review, and Using SonarQube for Software Quality Assurance

The article explains static testing concepts, the role of code inspection and reviews, the advantages and limitations of automated code scanning tools, and provides a practical guide for integrating SonarQube into a development workflow to improve code quality and enforce testing standards.

SonarQubecode inspectioncode review
0 likes · 6 min read
Static Testing, Code Review, and Using SonarQube for Software Quality Assurance
政采云技术
政采云技术
Nov 22, 2022 · Operations

How to Automate Code Quality with GitLab CI/CD and SonarQube

This guide explains how to integrate GitLab CI/CD with SonarQube, configure runners, set up SonarQube projects, define quality gates, and embed the pipeline into the development workflow to enforce code‑quality standards automatically.

AutomationCI/CDGitLab CI
0 likes · 11 min read
How to Automate Code Quality with GitLab CI/CD and SonarQube
Qunhe Technology Quality Tech
Qunhe Technology Quality Tech
Aug 25, 2022 · Operations

How We Scaled Litmus CI: From 100 to 2,000 Daily Tasks

This article details how the Litmus code‑quality platform was integrated into a CI pipeline, the performance bottlenecks encountered with Jenkins and Sonar, the systematic optimizations applied—including server redesign, script refactoring, parallel testing, and JVM tuning—and the resulting dramatic reduction in task duration and increase in throughput.

CIJenkinsPerformance Optimization
0 likes · 9 min read
How We Scaled Litmus CI: From 100 to 2,000 Daily Tasks
Software Development Quality
Software Development Quality
Jul 9, 2022 · R&D Management

How to Minimize Technical Debt and Boost Delivery Efficiency

This guide defines technical debt, outlines its classification into vulnerabilities, bugs, and code smells, and presents clear objectives, principles, standards, evaluation rules, recommended practices, and metrics to visualize, assess, and systematically reduce debt, thereby improving project delivery efficiency.

AgileSonarQubecode review
0 likes · 5 min read
How to Minimize Technical Debt and Boost Delivery Efficiency
Rare Earth Juejin Tech Community
Rare Earth Juejin Tech Community
Jan 26, 2022 · Information Security

No Vue Vulnerabilities: SonarQube Issue Is a Backend API Auth Flaw, Not a Front‑end Problem

Recent rumors claimed that foreign hacker groups were exploiting SonarQube and Vue.js to attack government and enterprise systems, but investigation shows the SonarQube flaw is a pure backend API authentication issue unrelated to Vue, and Vue itself has no known security vulnerabilities when standard front‑end safety practices are followed.

API authenticationSonarQubeVue.js
0 likes · 6 min read
No Vue Vulnerabilities: SonarQube Issue Is a Backend API Auth Flaw, Not a Front‑end Problem
DevOps Cloud Academy
DevOps Cloud Academy
Nov 1, 2021 · Operations

Integrating SonarQube Code Scanning with GitLab Commit Status

This guide explains how to set up SonarQube and Sonar‑scanner for static code analysis, run the scanner with project parameters, install the Sonar‑GitLab plugin, configure commit‑status integration, and use the resulting GitLab commit status to enforce merge‑request policies based on pipeline outcomes.

CI/CDCode ScanningGitLab
0 likes · 3 min read
Integrating SonarQube Code Scanning with GitLab Commit Status
Selected Java Interview Questions
Selected Java Interview Questions
Oct 10, 2021 · Fundamentals

Using SonarLint and SonarQube for Java Code Quality Analysis

This guide introduces SonarLint and SonarQube, explains how to install and configure them for Java projects, demonstrates scanning with Maven, and provides additional resources such as Alibaba Java coding conventions and documentation links, helping developers improve code quality and maintainability.

JavaSonarQubecode quality
0 likes · 5 min read
Using SonarLint and SonarQube for Java Code Quality Analysis
DevOps Cloud Academy
DevOps Cloud Academy
Sep 3, 2021 · Information Security

Understanding SonarQube: Quantifying Software Quality, Rule Types, Severity Levels, and Metrics

This article explains how SonarQube uses static analysis to measure software reliability, maintainability, security, complexity, test coverage and duplication, describes its rule categories, severity levels, issue states, and metric rating scales, and shows why high‑quality code reduces costs and improves safety.

SonarQubecode qualitysoftware metrics
0 likes · 7 min read
Understanding SonarQube: Quantifying Software Quality, Rule Types, Severity Levels, and Metrics
DevOps Cloud Academy
DevOps Cloud Academy
Jun 15, 2021 · Information Security

Understanding SonarQube: Quantifying Software Quality, Rule Types, Severities, and Metrics

This article explains how SonarQube uses static analysis to measure software reliability, maintainability, security, complexity, test coverage and duplication, describes its rule categories, severity levels, issue states, and quality metrics, and highlights the cost and productivity benefits of high‑quality code.

SonarQubecode qualitysoftware metrics
0 likes · 6 min read
Understanding SonarQube: Quantifying Software Quality, Rule Types, Severities, and Metrics
Java Architect Essentials
Java Architect Essentials
May 17, 2021 · Fundamentals

Using SonarLint, SonarQube, and Alibaba Code Guidelines for Comprehensive Code Quality Analysis

This article introduces SonarLint and SonarQube, explains how to install and configure them, demonstrates code analysis and rule customization, shows integration with Maven via the sonar‑maven‑plugin, and highlights Alibaba's coding standards as a practical example of improving software quality.

Alibaba Code GuidelinesSonarQubemaven
0 likes · 5 min read
Using SonarLint, SonarQube, and Alibaba Code Guidelines for Comprehensive Code Quality Analysis
Programmer DD
Programmer DD
Apr 22, 2021 · Operations

Boost Code Quality with SonarLint, SonarQube, and Alibaba Code Style Plugin

This guide walks you through installing and using SonarLint for on‑the‑fly code smell detection, setting up SonarQube as a centralized quality platform, integrating it with Maven via the sonar‑maven‑plugin, and applying Alibaba's coding standards to achieve measurable improvements in code health.

JavaSonarQubecode quality
0 likes · 5 min read
Boost Code Quality with SonarLint, SonarQube, and Alibaba Code Style Plugin
DevOps Cloud Academy
DevOps Cloud Academy
Feb 24, 2021 · Operations

Integrating SonarQube Code Scanning with GitLab Commit Status

This guide explains how to install SonarQube and Sonar‑scanner, configure scanning parameters, add the Sonar‑GitLab plugin, and use additional properties to link scan results to GitLab commit statuses, enabling pipeline‑based merge request control.

CI/CDCode ScanningGitLab
0 likes · 4 min read
Integrating SonarQube Code Scanning with GitLab Commit Status
DevOps Cloud Academy
DevOps Cloud Academy
Jan 12, 2021 · Operations

Resolving Common SonarQube Issues: Data Instability, Rule Configuration, and Project Authorization

This guide explains how to address three frequent SonarQube challenges—unstable data across branches, difficulty assigning custom rule sets to new projects, and project permission management—by creating per‑branch projects, using REST APIs for quality profiles, and applying permission templates via Jenkins integration.

AutomationCI/CDJenkins
0 likes · 7 min read
Resolving Common SonarQube Issues: Data Instability, Rule Configuration, and Project Authorization
DevOps Cloud Academy
DevOps Cloud Academy
Apr 21, 2020 · Operations

Resolving Common SonarQube Issues: Data Instability, Rule Configuration, and Project Authorization

This article discusses common challenges encountered when using SonarQube at scale—including data instability across branches, rule configuration for new projects, and project permission management—and presents practical solutions such as branch-specific project naming, Jenkins-driven API automation, and recommendations for purchasing commercial editions.

AutomationCI/CDJenkins
0 likes · 6 min read
Resolving Common SonarQube Issues: Data Instability, Rule Configuration, and Project Authorization
Youzan Coder
Youzan Coder
Mar 20, 2020 · Backend Development

Exploring Go Unit Test Coverage, Static Analysis, and Incremental Coverage Integration

The article details how a Go middleware QA team generates unit‑test coverage with go test and gocov, runs static analysis via golangci‑lint, integrates results into SonarQube, captures integration‑test coverage in Kubernetes, and applies diff‑cover for incremental coverage checks, all visualized through Jenkins.

CI/CDGoSonarQube
0 likes · 16 min read
Exploring Go Unit Test Coverage, Static Analysis, and Incremental Coverage Integration
FunTester
FunTester
Nov 20, 2019 · Operations

Setting Up Java 8 CI with Ant, Jenkins, SonarQube, and JaCoCo

This tutorial explains how to install and configure Java 8, Ant, JUnit 4, JaCoCo, Jenkins, and SonarQube on Windows or Linux to create a fully functional CI server with code‑coverage and quality analysis for a modular Java project.

AntCIJaCoCo
0 likes · 13 min read
Setting Up Java 8 CI with Ant, Jenkins, SonarQube, and JaCoCo
Youzan Coder
Youzan Coder
Nov 6, 2019 · Cloud Native

How to Transform Jenkins Master‑Slave CI into a Scalable Kubernetes‑Based Architecture

This article explains the drawbacks of a traditional Jenkins master‑slave setup, outlines a Kubernetes‑driven CI/CD solution that dynamically provisions Jenkins slaves as pods, details the deployment of custom Jenkins and SonarQube Docker images, and covers related Kubernetes resources, web‑terminal integration, and tuning tips.

CI/CDDockerIngress
0 likes · 12 min read
How to Transform Jenkins Master‑Slave CI into a Scalable Kubernetes‑Based Architecture
DevOps Cloud Academy
DevOps Cloud Academy
Oct 19, 2019 · Operations

Resolving Common SonarQube Platform Issues: Data Instability, Rule Configuration, and Project Authorization

This article explains how to address three common SonarQube challenges—data instability across branches, difficulty assigning quality profiles, and project permission management—by creating per‑branch projects, using Jenkins pipeline scripts with Sonar REST APIs, and applying permission templates to streamline large‑scale code‑quality scanning.

AutomationCI/CDJenkins
0 likes · 7 min read
Resolving Common SonarQube Platform Issues: Data Instability, Rule Configuration, and Project Authorization
360 Quality & Efficiency
360 Quality & Efficiency
Aug 23, 2019 · Fundamentals

Introduction to SonarQube: Background, Installation, Configuration, and Usage

This article introduces SonarQube, an open‑source platform for code quality management, explains its seven quality dimensions, provides step‑by‑step installation and configuration instructions (including JDK, MySQL, and scanner setup), demonstrates scanning a project, and summarizes its advantages for developers.

SonarQubecode qualitysoftware testing
0 likes · 5 min read
Introduction to SonarQube: Background, Installation, Configuration, and Usage
DevOps Cloud Academy
DevOps Cloud Academy
Jun 19, 2019 · Backend Development

Researching Web APIs and Translating SonarQube Rules with Python

This article demonstrates how to query SonarQube web APIs for Java rule data, retrieve quality profile information, and use a Python script that leverages execjs to translate rule descriptions via Google Translate, providing examples of both API responses and translation code.

APICode TranslationJava
0 likes · 13 min read
Researching Web APIs and Translating SonarQube Rules with Python
DevOps Cloud Academy
DevOps Cloud Academy
Jun 7, 2019 · Operations

SonarQube Architecture and Integration Overview

This article explains SonarQube’s architecture, detailing its server, database, plugin library, and scanner components, and describes the typical development workflow from IDE integration and code commit through CI‑triggered analysis, result submission, and code review, including deployment considerations for machines and network placement.

CI/CDSonarQubearchitecture
0 likes · 3 min read
SonarQube Architecture and Integration Overview
DevOps Cloud Academy
DevOps Cloud Academy
Dec 25, 2018 · Operations

SonarQube Architecture and Workflow Overview

This article explains SonarQube's main components—including server processes, database, plugins, and scanners—and describes the end‑to‑end workflow that integrates code analysis into development, CI/CD pipelines, reporting, and operational monitoring.

CI/CDSonarQubecode analysis
0 likes · 2 min read
SonarQube Architecture and Workflow Overview
DevOps
DevOps
Nov 19, 2017 · Operations

Implementing Application Insights, Self‑Managed Build Agents, and Automated Quality Checks in a TFS‑Based DevOps Workflow

This article describes how a development team introduced Azure Application Insights for runtime monitoring, built and maintained their own TFS build agents, integrated SonarQube for automated code quality, and established unit and integration testing pipelines to create a data‑driven, scalable DevOps process.

Application InsightsBuild AgentCI/CD
0 likes · 16 min read
Implementing Application Insights, Self‑Managed Build Agents, and Automated Quality Checks in a TFS‑Based DevOps Workflow
Dada Group Technology
Dada Group Technology
Aug 3, 2017 · Operations

How JD Daojia Built a Robust Continuous Integration Pipeline

This article explains the concept of continuous integration, its benefits, and details JD Daojia's end‑to‑end CI implementation—including Git commits, static code analysis, unit testing, automated packaging, deployment, UI/JSF/APP testing, code coverage, and future automation plans—illustrated with architecture diagrams and configuration snippets.

Continuous IntegrationJD DaojiaJenkins
0 likes · 12 min read
How JD Daojia Built a Robust Continuous Integration Pipeline
Baidu Intelligent Testing
Baidu Intelligent Testing
May 25, 2016 · Mobile Development

Using SonarQube for Code Quality Management in Android Projects

SonarQube, an open‑source code quality platform, offers extensive static analysis for Android (Java) projects through plugins that assess complexity, duplication, test coverage, coding standards, comments, potential bugs, and architectural design, and integrates with IDEs and CI tools such as Jenkins to visualize and reduce technical debt.

AndroidCISonarQube
0 likes · 4 min read
Using SonarQube for Code Quality Management in Android Projects