The document discusses how SonarQube can be used for continuous code quality by integrating it into development workflows. It describes how to integrate SonarQube servers into projects using Gradle plugins or the SonarQube scanner, and how features like SonarLint, quality profiles, and quality gates can help developers maintain code quality standards.

1. Continuous Code Quality
With SonarQube

2. Programmer is a highly skilled professional
Source: https://www.space.com/...

3. And he’s responsible for his work
Source: https://www.mirror.co.uk/...

4. Resolution is not enough
Source: http://bonkersworld.net/...

5. There’s always pressure
Source: https://www.pinterest.fr/...

6. So before it’s too late
Source: https://www.safaribooksonline.com/...

7. Just stop
Source: https://medium.com/...

8. Keep discipline
Source: https://cleancoders.com/...

9. Review code
Source: https://alexandrebrisebois...

10. Have the rules
Source: https://www.slideshare.net/...

11. Analyze
Source: https://www.viva64.com/...

12. There are bugs

13. And places to refactor

14. Automate
Source: https://giphy.com/...

15. Continuously
Source: https://www.sonarqube.org/

16. Architecture
Source: https://docs.sonarqube.org/...

17. Server integration - Gradle plugin
• systemProp.sonar.host.url=http://localhost:9000
• systemProp.sonar.login=54699cc9d8eccab2b4a051e5eed0f5c638109ab3
gradle.properties
• plugins { id "org.sonarqube" version "2.6" }
• tasks.whenTaskAdded { task -> if (task.name == 'assembleDebug') { task.finalizedBy 'sonarqube' }}
app/build.gradle

18. Server integration - SonarQube scanner
• -Dsonar.host.url=$SONARQUBE_URL
• -Dsonar.login=$SONARQUBE_TOKEN
• -Dsonar.projectKey=$CI_PROJECT_NAMESPACE:$CI_PROJECT_NAME
• -Dsonar.sources=myapp/app/src/main
• -Dsonar.tests=myapp/app/src/test
• -Dsonar.java.binaries=myapp/app/build/intermediates/classes/sdk19Production/debug
• -Dsonar.android.lint.report=myapp/app/build/reports/lint-results-sdk19ProductionDebug.xml
arguments
execution
• sonar-scanner-$SONAR_SCANNER_VERSION/bin/sonar-scanner
$SONAR_SCANNER_ARGS
-Dsonar.projectVersion=$CI_JOB_ID

19. SonarLint
• on the fly detection
○ doesn’t cope well with big files
• optional server integration
• issues highlighting
• built-in explanations
Standalone IDE extension

20. Quality profiles
• copy built-in profiles to enable customization
• use inheritance to combine multiple profiles

21. Good technical debt
Source: https://blog.crisp.se/...

22. Quality gates
Source: https://docs.sonarqube.org/...

23. Demo
Source: https://linpack-for-tableau.com/...

24. Contact info
Mail: petr.sabata@kiwi.com
LinkedIn: https://cz.linkedin.com/in/sabatapetr
Petr Šabata
Senior Android Developer
Kiwi.com, Brno, Czech Republic

25. THANK YOU!