Tech Talk #5 : Code Analysis SonarQube - Lương Trọng Nghĩa
2 likes1,084 views
Sonar is a software quality management platform that enables developers to access and track code analysis data ranging from styling errors and potential bugs to code defects, duplications, lack of test coverage, and excess complexity. It supports over 20 programming languages. Some key features include over 600 coding rules, standard software metrics, the ability to drill down to source code details, a time machine feature to analyze technical debt and code smells over time, security measures, an extensible plugin system, and integrations with tools like Jenkins. Sonar also covers 7 axes of code quality and has an architecture that allows for analysis of code in a continuous integration workflow.
Tech Talk #5 : Code Analysis SonarQube - Lương Trọng Nghĩa
- 2. Outline 1. What is Sonar? (demo) 2. Features 3. Covering 7 Axes of Code Quality 4. Architecture 5. Community and Ecosystem 6. Q&A
- 3. 1. What is Sonar? ● Is a software quality management platform → Java. ● Enabling developers to access and track code analysis data ranging ○ styling errors ○ potential bugs ○ code defects ○ code duplications ○ lack of test coverage ○ excess complexity ● Support more than 20 languages.
- 4. 2. Features ● Overview of all projects (demo) ● Coding rules: ○ 600+ rules are incorporated, can be fully parameterized. ○ implement your own. ● Standard software metrics: Lines of code, Documented API, Cyclomatic complexity, Test coverage, Duplicated code.
- 5. 2. Features ● Drill down to source code ● Time Machine (Technical Debt, Code Smell … -> SQALE), Motion Chart. Motion Chart Technical Debt
- 6. 2. Features ● Security measures ● Extensible plugin system ○ Additional languages. ○ Additional metrics: Useless code, Build stability ... ○ Visualization/Reporting: ■ PDF Report. ■ Timeline: Google Timeline Chart. ○ Integration: ■ Jenkins and Bamboo. ○ IDE: Eclipse
- 7. 3. Covering 7 Axes of Code Quality Aka Developers' Seven Deadly Sins
- 9. 5. Architecture Sonar with CI Architecture
- 10. 6. Community and Ecosytem ● Issues: http://jira.codehaus.org/browse/SONAR ● Open Source: https://github.com/SonarSource/sonarqube ● Contribute: http://www.sonarqube.org/development/
- 11. Q&A