Understanding issues in SonarQube

(music) Pulse Hello! In this video we'll look at issues in SonarQube. Understanding the issues detected by SonarQube is the first step to establishing code security and maintainability. By the end of this course, you'll be able to: Define the concept of issues in SonarQube, list the ways to view issues in SonarQube, and summarize the info found within an issue card. Issues are problems within your code. If your code breaks a rule set by your quality profile, SonarQube raises an issue. An issue can affect one or more software qualities with a varied impact level, called severity. One example is SQL injection. It is a security flaw, so it has a high impact on security. But it can also hurt maintainability, so it may appear as a low impact maintainability issue too. You can view issues in a few different ways in SonarQube- A project's Issues page will show all issues detected within that project. You can also visit your project's Summary page and select the issue count on the New Code or Overall Code cards. If issue assignment is used in your company, or if auto issue assignment is configured, you can also see the issues assigned to you. Issues can be filtered a few different ways- you can see which Software quality it affects, the issue severity, the code attribute, type, and more. When examining an issue, the Issue Card will show you a handful of issue details: The project name, the name of the rule that triggered the issue, the impacted software quality and severity level, the status of the issue, assignee, the issue date, or when it was introduced in the code, tags, and other issues attributes that you may discover from the numerous issues filters in the left pane of the issue page. To navigate to an issue, click on the issue card, (or select the issue card in the search results and press the Right arrow key or select its name). A detailed view of the issue opens in the right section, and the left sidebar shows the search results. To start a new search, press the Left arrow key or navigate one step back in your browser. Understanding the issues detected by SonarQube is the first step to establishing code security and maintainability. Visit the Sonar Learning Center to see our upcoming courses on reviewing and managing issues and issues best practices. Thanks for watching!