Securing Java Pipelines with OWASP ZAP, SonarQube & Security Gates

Security is no longer something we “bolt on” at the end of development. In a modern DevSecOps culture, we embed…

Read More »

Test Coverage Reports For Maven Projects In SonarQube 8.3.x

Some years ago I write a blog post about how to generate test reports in SonarQube separate in test report…

Read More »

Is your codebase smelly? Find out with the help of SonarQube and the Smells plugin!

In the project which I recently joined, I discovered a set of annotations, (part of the code) that eventually did…

Read More »

3 Steps For Analyzing a Gradle Project With SonarQube Using Docker

How hard can it be to get up and running with a Gradle project and getting it analyzed with SonarQube…

Read More »

Unit And Integration Test Reports For Maven Projects In SonarQube

Since SonarQube 4.2. the test report isn’t generated by the Sonar Maven Plugin during a Maven build (see SonarQube’s blog…

Read More »

What SonarQube Is NOT

The age when SonarQube was not very popular has passed a lot time ago. Nowadays is considered the de-facto tool…

Read More »

SonarQube As An Education Platform

I’ve been using SonarQube [1] platform for more than four years. I remember the time when it was making its first baby…

Read More »

Creating Sonarqube Projects

Sonarqube (nee Sonar) is da bomb. It’s not something you have to check daily but if you’re serious about quality…

Read More »

To SonarQube or not to SonarQube?

This is the first question that a team leader, s/w director, customer, developer, architect, tester or whatever role exists in…

Read More »