August 2017
Intermediate to advanced
332 pages
9h 16m
English
SonarQube is the most widespread source code quality management tool. It supports multiple programming languages and can be treated as an alternative to the code coverage and static code analysis steps we looked at. Actually, it is a separate server that aggregates different code analysis frameworks, such as Checkstyle, FindBugs, and JaCoCo. It has its own dashboards and integrates well with Jenkins.
Instead of adding code quality steps to the pipeline, we can install SonarQube, add plugins there, and add a "sonar" stage to the pipeline. The advantage of this solution is that SonarQube provides a user-friendly web interface to configure rules and show code vulnerabilities.
Read now
Unlock full access