
Static code analysis that finds bugs, vulnerabilities and code smells in CI
Do you work on SonarQube?
This listing is unclaimed. Claim it for free to edit the details, add screenshots and reply to reviews.
SonarQube is a code quality and security tool that development teams run on every pull request to catch problems before they ship. It inspects source code for bugs, vulnerabilities, code smells and security hotspots, covers dozens of languages and enforces quality gates in CI/CD pipelines. The community edition is open source and self-managed, with paid tiers for larger teams. Developers also see feedback inside their IDE.
From people who have used it. One review per person, checked by a human.
No reviews yet. Be the first to say something useful.