SonarQube (formally called Sonar)

• is an automatic code review tool to detect bugs, vulnerabilities, and code smells in your code
• it can integrate with your existing workflow to enable continuous code inspection across your project branches and pull requests

1 - Installation & Setup

• https://docs.sonarqube.org/latest/setup/get-started-2-minutes/

2 - Setup Scanner

• https://docs.sonarqube.org/latest/analysis/scan/sonarscanner-for-maven/

examples:

• Maven - sonar

Subpages

• Sonar - Exclusions

Resources

• https://docs.sonarqube.org/