Repolode
Enviar
SonarSource

SonarSource/sonarqube

Self-hosted code quality and security platform that scans projects for bugs, vulnerabilities and maintainability issues, with Quality Gates for CI pipelines.

Alternativa open source a:CodacyCoverity

Ver en GitHubSitio web
Estrellas
11,087
Forks
2,236
Issues abiertos
1
Último commit
anteayer

¿Qué es?

SonarQube is a static analysis platform that inspects source code to find bugs, security vulnerabilities, security hotspots and structural problems, and explains what to fix and why. Results are shown in a web dashboard and can be surfaced in the IDE, pull requests and CI pipelines.

This repository contains the source of the SonarQube Community Build, the free and open-source edition. It focuses on coverage on new code and uses Quality Gates, pass-or-fail checks, to enforce a standard on each change before it merges. The Community Build supports a subset of the languages covered by the commercial editions.

The project is written in Java and built with Gradle, requiring Java 21. The README describes building a distribution zip that is started with bundled scripts on Linux, macOS and Windows.

Funciones clave

  • 01Detects bugs, reliability issues and security vulnerabilities in source code.
  • 02Flags maintainability and structural issues that make code harder to change.
  • 03Enforces Quality Gates on new code in pull requests and pipelines.
  • 04Explains each finding and its risk, with guidance on the fix.
  • 05Runs as a self-managed server with a web dashboard.

Casos de uso

  • Adding automated code quality and security checks to a CI pipeline.
  • Tracking code quality trends across a team's repositories on a self-hosted server.
  • Reviewing new code in pull requests before it is merged.

Temas

#static-analysis#code-quality#security#linting#ci-cd#java#sonarqube

Preguntas frecuentes

¿Qué es sonarqube?
Self-hosted code quality and security platform that scans projects for bugs, vulnerabilities and maintainability issues, with Quality Gates for CI pipelines. SonarQube is a static analysis platform that inspects source code to find bugs, security vulnerabilities, security hotspots and structural problems, and explains what to fix and why. Results are shown in a web dashboard and can be surfaced in the IDE, pull requests and CI pipelines.
¿sonarqube es gratuito? ¿Qué licencia tiene?
sonarqube es open source bajo la licencia LGPL-3.0. Revisa los términos de la licencia antes de usarlo en productos comerciales.
¿sonarqube sigue mantenido?
Mantenimiento activo. El último commit de sonarqube fue el 17 oct 2026.
¿Para qué puedo usar sonarqube?
Adding automated code quality and security checks to a CI pipeline. Tracking code quality trends across a team's repositories on a self-hosted server. Reviewing new code in pull requests before it is merged.
¿Dónde consigo sonarqube?
El código fuente y las instrucciones de instalación están en GitHub: https://github.com/SonarSource/sonarqube

Resumen generado por IA a partir del README del proyecto. Las estadísticas de GitHub se actualizan a diario.

Proyectos relacionados