Sonar static code analysis

The open-source and commercial Sonar solution – SonarLint, SonarCloud, and SonarQube – supports over 30 programming languages, frameworks, and infrastructure technologies. Trusted by more than 400,000 organizations globally to clean more than half a trillion lines of code, Sonar is integral to delivering better software. From analyzing your code in real-time as you type in your IDE all the way through to code review, pull requests, and branch analysis for production-ready code, Sonar ensures clean code at every step in your workflow.

If you’re looking for a self-managed static code analysis option, then open-source based SonarQube is a great choice. SonarQube Developer Edition and Enterprise Edition also include additional enterprise features that may be valuable to your organization’s specific use case(s). At a high level, SonarQube offers: 

• Run your instance your way, as a virtual machine, on Docker, or with Kubernetes with vertical and horizontal scaling support
• Easy project onboarding with integration to GitHub, GitLab, Azure and Bitbucket; in-cloud and on-premises
• Commerical features include executive-level reporting capabilities, security reports including coverage for OWASP Top 10 and CWE Top 25 and more, portfolios support, multiple DevOps platform support and more
• Advanced security analysis with deeper SAST

SonarLint in your IDE is your first line of defense for keeping the code you write today clean and secure. Issues are raised in-line with clear rule descriptions and guidance.

With SonarLint, the impact is immediate and no configuration is required. You learn from the real-time feedback provided and quickly resolve issue with contextual guidance and automatic Quick Fixes!

SonarLint is available from your IDE marketplace:
Visual Studio | VS Code | JetBrains | Eclipse