SonarQube does this because it builds upon PMD, Findbugs and Checkstyle. It also includes other open source plugins -- such as Cobertura -- along with a good deal of custom code, to provide a static ...

Jack Wallen shows you how to deploy the continuous code inspection tool SonarQube using Docker on Ubuntu Server 22.04.

Looking for a way to analyze your code to find issues and vulnerabilities? If so, Jack Wallen thinks SonarQube is exactly what you need. Learn how to install this tool.

SonareQube 9.9 Long-Term Support helps organizations clean code with accelerated pull request analysis, support for building and deploying secure cloud-native applications, and more.

Sonar, the leader in Clean Code solutions, today announced that SonarQube is now available on Google Cloud Marketplace, enabling organizations to acce ...

It's always a good idea to employ a few static code analysis tools as part of your software development routine. There are a number of great tools that perform static analysis of Java code, such as ...

The Federal Bureau of Investigation has sent out a security alert warning that threat actors are abusing misconfigured SonarQube applications to access and steal source code repositories from US ...