SonarSource provides a static code analyzer for Apex. Based on our own Apex analyzer, it can find bugs, security vulnerabilities and code smells. As for any product we develop at SonarSource, it was built on the following principles: depth, accuracy and speed.

SonarApex has a great coverage of well-established quality standards. The SonarApex capability is available throughout the development chain for automated code review with self-hosted SonarQube or on-line SonarCloud.

Samples of Issues Detected
Duplicated condition Duplicated condition Duplicated condition
Identical sub-expressions Identical sub-expressions Identical sub-expressions
Missing 'else' clause Missing 'else' clause Missing 'else' clause

SonarApex supports all the standard metrics implemented by SonarQube including Cognitive Complexity.

Use in enterprise edition

See all editions

Issue Tracker