This document discusses SonarQube, a tool for continuous code inspection. It begins with an overview of static code analysis and its benefits for organizations. It then covers quality gates and rules for inspection, integration with CI/CD pipelines, and IDE plugins. Static code analysis examines source code to find patterns that could impact security, reliability or maintainability. Quality gates help highlight critical areas for improvement and gauge technical debt over time. SonarQube allows for continuous inspection across multiple languages and frameworks.

1. SonarQube
Continuous Code Inspection

2. Agenda
•Static Code Analysis
•Organizational Benefits
•Quality Gates and Rules
•CI/CD integration
•IDE Code Inspection

3. Static Code Analysis

4. Static Code Analysis
The analysis of source code files looking for
commonly occurring patterns that can be
considered harmful to the security, reliability,
and maintainability of programs.

5. Static Code Analysis
Dynamic Code Analysis occurs during the
running of an application.
•CPU and Memory Profiling
•Network Profiling

6. Static Code Analysis
SonarSource
SonarQube
SonarLint
SonarCloud

7. Static Code Analysis
Continuous Inspection
Quality Gates
Multiple Languages
Plug-Ins

8. Organizational Benefits

9. Organizational Benefits
Gain Confidence in Your Product
Cost of Technical Debt
Highlight Critical Areas for Improvement

10. Organizational Benefits
Quality GateOrganization / Project
Issue Types Test
Coverage
Duplicate
Blocks
Lines of
Code
Languages

12. Organizational Benefits
Cost of Technical Debt
Debt Days * 8 Hours * Hourly Rate

13. Organizational Benefits
Cost of Technical Debt
31 Days * 8 Hours * Hourly Rate of $50
$12,400

14. Organizational Benefits
Cost of Technical Debt
768 Days * 8 Hours * Hourly Rate of $100
$614,400

15. Organizational Benefits

16. Organizational Benefits

17. Quality Gates and Rules

18. Quality Gates and Rules
SQALE Method

19. Quality Gates and Rules
SQALE Method
Software Quality Assurance based on Lifecycle
Expectations

20. Quality Gates and Rules
Characteristics Levels
Testability
Reliability
Changeability
Efficiency
Usability
Security
Maintainability
Portability
Reusability

21. Quality Gates and Rules

22. Quality Gates and Rules

25. CI/CD Integration
Build Systems
Maven
Ant
Gradle
MakeFile
MSBuild

26. CI/CD Integration
CI Engines
Bamboo
Jenkins
Travis CI
Azure DevOps
AppVeyor
TeamCity

27. IDE Code Inspection
Eclipse IDE
JetBrains IDE (IntelliJ, Resharper Plug-In)
Microsoft Visual Studio
NetBeans IDE (with Plug-Ins)
SonarSource SonarLint Plug-In
More…

28. Michael Jesse
THANK YOU
Email: michael.jesse@improving.com
Twitter: @michaeljesse73
LinkedIn: www.linkedin.com/in/michaeljesse