SonarQube

About SonarQube

SonarQube Cloud is a code analysis service that scans projects for bugs and vulnerabilities to help teams maintain code quality. It integrates with GitHub, Bitbucket, Azure DevOps, and GitLab, automatically analyzing branches and decorating pull requests with results.

It supports a wide range of languages and formats, including Java, JavaScript, TypeScript, C#, Python, C++, Go, Kotlin, Ruby, Swift, PHP, COBOL, and others, along with configuration formats such as Docker, Kubernetes, Terraform, and CloudFormation. It is intended for development teams that want automated code quality and security checks integrated into their existing source control and CI workflows.

Key features

• Detects bugs and vulnerabilities in code
• Analyzes projects hosted on GitHub, Bitbucket, Azure DevOps and GitLab
• Automatically analyzes branches and decorates pull requests
• Supports many languages including Java, JavaScript, TypeScript, C#, Python, C++, Go, Kotlin, Ruby and Swift
• Supports infrastructure-as-code formats like Docker, Kubernetes, Terraform and CloudFormation

Frequently asked questions