Sonar is a software quality management platform that enables developers to access and track code analysis data ranging from styling errors and potential bugs to code defects, duplications, lack of test coverage, and excess complexity. It supports over 20 programming languages. Some key features include over 600 coding rules, standard software metrics, the ability to drill down to source code details, a time machine feature to analyze technical debt and code smells over time, security measures, an extensible plugin system, and integrations with tools like Jenkins. Sonar also covers 7 axes of code quality and has an architecture that allows for analysis of code in a continuous integration workflow.

1. TechTalk #5:
Nghia Luong

2. Outline
1. What is Sonar? (demo)
2. Features
3. Covering 7 Axes of Code Quality
4. Architecture
5. Community and Ecosystem
6. Q&A

3. 1. What is Sonar?
● Is a software quality management platform → Java.
● Enabling developers to access and track code analysis data ranging
○ styling errors
○ potential bugs
○ code defects
○ code duplications
○ lack of test coverage
○ excess complexity
● Support more than 20 languages.

4. 2. Features
● Overview of all projects (demo)
● Coding rules:
○ 600+ rules are incorporated, can be fully
parameterized.
○ implement your own.
● Standard software metrics: Lines of code, Documented
API, Cyclomatic complexity, Test coverage, Duplicated
code.

5. 2. Features
● Drill down to source code
● Time Machine (Technical Debt, Code
Smell … -> SQALE), Motion Chart.
Motion Chart
Technical Debt

6. 2. Features
● Security measures
● Extensible plugin system
○ Additional languages.
○ Additional metrics: Useless code,
Build stability ...
○ Visualization/Reporting:
■ PDF Report.
■ Timeline: Google Timeline
Chart.
○ Integration:
■ Jenkins and Bamboo.
○ IDE: Eclipse

7. 3. Covering 7 Axes of Code Quality
Aka Developers' Seven Deadly Sins

8. 4. Architecture
Sonar Architecture

9. 5. Architecture
Sonar with CI Architecture

10. 6. Community and Ecosytem
● Issues: http://jira.codehaus.org/browse/SONAR
● Open Source: https://github.com/SonarSource/sonarqube
● Contribute: http://www.sonarqube.org/development/

11. Q&A