Prior to the deployment of SonarQube, ThalesRaytheonSystems evaluated several software quality tools, but none fit the bill. Some weren’t integrated into the development environment, some presented licensing issues and still others were lacking in terms of technologies covered and features available. As a result, only a few components and projects were being analyzed, and the results weren’t being exploited. Little quality improvement was seen because of the manual, “heavy weight” nature of the process, posing a real challenge to the long-term sustainability and maintainability of ThalesRaytheonSystems’ application portfolio.
ThalesRaytheonSystems is moving to continuous integration and including software quality analysis in the process. Given the complexity of the environment, ThalesRaytheonSystems needed a solution that would integrate well with its existing infrastructure, and be flexible enough to be used across its entire software portfolio, which includes multiple technologies and a wide range of applications.
ThalesRaytheonSystems chose SonarQube and requested an administrative training session from SonarSource in order to speed up the adoption and onboarding process. Josiane Denis remembers her first impressions: “The SonarQube solution is very easy to use, and it is integrated in Jenkins to manage the jobs. It fits with ThalesRaytheonSystems needs, since we have many components, and many work packages, in different languages, and the notion of ‘views’ is essential.”
Following the initial training and demonstration, ThalesRaytheonSystems compared its previous method of using a collection of tools (both freeware, and commercial with per-user licenses) versus the combination of free and commercial SonarSource products it uses: C/C++, Portfolio Management (Views), and Technical Debt Computation (SQALE). “It showed a significant gain on both time needed to implement the solution and on cost, since the license models are more adapted to our needs,” Denis said. It quickly became clear that the SonarSource solutions provided a much-better Return-on-Investment for ThalesRaytheonSystems, given its capabilities, technology coverage and licensing model.
Denis also praised the SonarSource team’s support and responsiveness in integrating ThalesRaytheonSystems’s rules for the C/C++ language, which were applicable to the broader C++ community, into the C/C++ analyzer. Another compelling feature for ThalesRaytheonSystems was the integration of the SQALE method into SonarQube, allowing the organization to precisely track the remediation cost for its technical debt.
Now that SonarQube is fully integrated into ThalesRaytheonSystems’s environment and culture, development teams review software quality results regularly and take concrete actions to improve the level of code quality in accordance with milestones and costs. The portfolio management features allow software configuration managers to get results on global projects and the entire software portfolio.
Going forward, ThalesRaytheonSystems has further plans to improve its software quality processes. It will add controls of unit tests and integration tests to its analysis. It is also planning to deploy the SonarLint Eclipse plugin in order to enable developers to detect and correct issues locally, directly within the development environment.
Denis said she would recommend both SonarQube and SonarSource because “SonarQube is an integrated solution and easy to use at each level of the project in development. SonarSource has very good support and ThalesRaytheonSystems benefits from a good collaboration with SonarSource.”