SonarQube logo

SonarQube

Self-hosted server for continuous code quality and security inspection

Open Source Alternative to
Repository activity
  • Stars10.7k
  • Forks2.2k
  • Open Issues1
sonarsource-sonarqube health score - Linux Foundation Insights
License

LGPL-3.0

Languages
  • Java
  • Shell
  • Ruby
Get it:GitHub
SonarQube screenshot

About SonarQube

SonarQube is a self-hosted server for continuous inspection of code quality and security. Through its web dashboard it reports the overall health of a project and, crucially, separates problems newly introduced in recent changes from existing ones, so teams can hold the line on new code without drowning in legacy debt.

A Quality Gate defines the pass/fail bar a project must clear, encoding the Clean Code standards a team agrees to. The server analyzes many programming languages and surfaces bugs, code smells, and security issues with drill-down detail in the browser.

SonarQube is authored by SonarSource and licensed under the GNU Lesser General Public License v3.0. The server runs on Linux, macOS, or Windows from the published distributions, and the web UI is maintained in a separate companion repository.

Key features

  • Web dashboard reporting overall project health
  • Separates newly introduced issues from old ones
  • Quality Gates enforce a pass/fail bar on new code
  • Multi-language bug, smell, and security analysis

Details

First released
2011
License
LGPL-3.0
Platforms
Web · Windows · macOS · Linux
Deployment
self-hostable
Runtime
Java 17
Origins
SonarSource