Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/SonarSource/sonarqube
Continuous Inspection
https://github.com/SonarSource/sonarqube
code-quality sonarqube static-analysis
Last synced: about 2 months ago
JSON representation
Continuous Inspection
- Host: GitHub
- URL: https://github.com/SonarSource/sonarqube
- Owner: SonarSource
- License: lgpl-3.0
- Created: 2011-01-05T11:05:17.000Z (almost 14 years ago)
- Default Branch: master
- Last Pushed: 2024-07-30T21:24:28.000Z (5 months ago)
- Last Synced: 2024-07-31T02:29:26.295Z (5 months ago)
- Topics: code-quality, sonarqube, static-analysis
- Language: Java
- Homepage: http://www.sonarqube.org
- Size: 902 MB
- Stars: 8,808
- Watchers: 330
- Forks: 1,942
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- Contributing: docs/contributing.md
- License: LICENSE.txt
- Codeowners: .github/CODEOWNERS
Awesome Lists containing this project
- awesome-homelab - SonarQube
- awesome-java - sonarqube
- FOSS-for-Dev - sonarqube - Put your technical debt under control (Code Quality)
- DevSecOps - https://github.com/SonarSource/sonarqube - the-badge) | (SAST)
- Awesome - Sonarqube - Continuous Inspection (Development / Programming)
- awesome-cloudops - SonarQube - raw/SonarSource/sonarqube" alt="Issues"><br><img align="right" src="https://img.shields.io/github/last-commit/SonarSource/sonarqube">](https://github.com/SonarSource/sonarqube) | <img align="right" src="https://img.shields.io/badge/-aws-orange" alt="AWS"><br> <img align="right" src="https://img.shields.io/badge/-azure-blue" alt="Azure"> <br> <img align="right" src="https://img.shields.io/badge/-gcp-green" alt="GCP"> <br> | Continuous Inspection, Code Quality, Code smell inspection | SonarQube provides the capability to not only show health of an application but also to highlight issues newly introduced | (Tools)
- awesome-modern-devops - SonarQube - Code Quality, security and static analysis tool. (DevSecOps)
- awesome-repositories - SonarSource/sonarqube - Continuous Inspection (Java)
- awesome-github-star - sonarqube
- awesome-open-source-systems - SonarQube - SonarQube is a Continuous Inspection that provides the capability to not only show health of an application but also to highlight issues newly introduced. With a Quality Gate in place, you can fix the leak and therefore improve code quality systematically. (Code Quality / Follow me)
- awesome-java-security - Sonarqube - SonarQube provides the capability to show the health of an application and highlight newly introduced issues. (Static Code Analysis)
- awesome-hacking-lists - SonarSource/sonarqube - Continuous Inspection (Java)
- awesome-ops - SonarSource/sonarqube - 3.0|8976|2011-01-05|2024-10-04 | SonarQube 不仅能够显示应用程序的运行状况,还能够突出显示新引入的问题。有了质量门,您就可以实现干净的代码,从而系统地提高代码质量。 | (安全扫描)
README
# SonarQube [![Build Status](https://api.cirrus-ci.com/github/SonarSource/sonarqube.svg?branch=master)](https://cirrus-ci.com/github/SonarSource/sonarqube) [![Quality Gate Status](https://next.sonarqube.com/sonarqube/api/project_badges/measure?project=sonarqube&metric=alert_status&token=d95182127dd5583f57578d769b511660601a8547)](https://next.sonarqube.com/sonarqube/dashboard?id=sonarqube) [![AI Code Assurance](https://next.sonarqube.com/sonarqube/api/project_badges/ai_code_assurance?project=org.sonarsource.sonarqube%3Asonarqube-private&token=sqb_c0e2fa9ac4ef89f9a8403c6ba235e108ceb1dce1)](https://next.sonarqube.com/sonarqube/dashboard?id=sonarqube)
## Continuous Inspection
SonarQube provides the capability to not only show the health of an application but also to highlight issues newly introduced. With a Quality Gate in place, you can [achieve Clean Code](https://www.sonarsource.com/solutions/clean-code/) and therefore improve code quality systematically.
## Links
- [Website](https://www.sonarsource.com/products/sonarqube)
- [Download](https://www.sonarsource.com/products/sonarqube/downloads)
- [Documentation](https://docs.sonarsource.com/sonarqube)
- [X](https://twitter.com/SonarQube)
- [SonarSource](https://www.sonarsource.com), author of SonarQube
- [Issue tracking](https://jira.sonarsource.com/browse/SONAR/), read-only. Only SonarSourcers can create tickets.
- [Responsible Disclosure](https://community.sonarsource.com/t/responsible-vulnerability-disclosure/9317)
- [Next](https://next.sonarqube.com/sonarqube) instance of the next SonarQube version## Have Questions or Feedback?
For support questions ("How do I?", "I got this error, why?", ...), please first read the [documentation](https://docs.sonarsource.com/sonarqube) and then head to the [SonarSource Community](https://community.sonarsource.com/c/help/sq/10). The answer to your question has likely already been answered! 🤓
Be aware that this forum is a community, so the standard pleasantries ("Hi", "Thanks", ...) are expected. And if you don't get an answer to your thread, you should sit on your hands for at least three days before bumping it. Operators are not standing by. 😄
## Contributing
If you would like to see a new feature or report a bug, please create a new thread in our [forum](https://community.sonarsource.com/c/sq/10).
Please be aware that we are not actively looking for feature contributions. The truth is that it's extremely difficult for someone outside SonarSource to comply with our roadmap and expectations. Therefore, we typically only accept minor cosmetic changes and typo fixes.
With that in mind, if you would like to submit a code contribution, please create a pull request for this repository. Please explain your motives to contribute this change: what problem you are trying to fix, what improvement you are trying to make.
Make sure that you follow our [code style](https://github.com/SonarSource/sonar-developer-toolset#code-style) and all tests are passing (Travis build is executed for each pull request).
Willing to contribute to SonarSource products? We are looking for smart, passionate, and skilled people to help us build world-class code-quality solutions. Have a look at our current [job offers here](https://www.sonarsource.com/company/jobs/)!
## Building
To build sources locally follow these instructions.
### Build and Run Unit Tests
Execute from the project base directory:
./gradlew build
The zip distribution file is generated in `sonar-application/build/distributions/`. Unzip it and start the server by executing:
# on Linux
bin/linux-x86-64/sonar.sh start
# or on MacOS
bin/macosx-universal-64/sonar.sh start
# or on Windows
bin\windows-x86-64\StartSonar.bat### Open in IDE
If the project has never been built, then build it as usual (see previous section) or use the quicker command:
./gradlew ide
Then open the root file `build.gradle` as a project in IntelliJ or Eclipse.
### Gradle Hints
| ./gradlew command | Description |
| -------------------------------- | ----------------------------------------- |
| `dependencies` | list dependencies |
| `licenseFormat --rerun-tasks` | fix source headers by applying HEADER.txt |
| `wrapper --gradle-version 5.2.1` | upgrade wrapper |## License
Copyright 2008-2024 SonarSource.
Licensed under the [GNU Lesser General Public License, Version 3.0](https://www.gnu.org/licenses/lgpl.txt)