I went with the community edition, by the way. You can look at it on the download SonarQube page. There are many licencing options available on the tool’s website. But first, let’s see how we can install it. I’ll show you a few screenshots of the tool and the analysis it gives to give you a better idea.

And this makes sure your whole team is following all the best practices for your tech stack. The best part is, you can integrate it to your CI/CD pipeline. SonarQube is a tool that checks your code for code quality, best practices, bugs, security issues, duplicate code, code coverage, and much more. But if you’re still unclear, let me put it simply. That pretty much explains what SonarQube. SonarQube provides fully automated analysis and integration with Maven, Ant, Gradle, MSBuild and continuous integration tools (Atlassian Bamboo, Jenkins, Hudson, etc.). SonarQube can record metrics history and provides evolution graphs. SonarQube offers reports on duplicated code, coding standards, unit tests, code coverage, code complexity, comments, bugs, and security vulnerabilities. SonarQube is an open-source platform developed by SonarSource for continuous inspection of code quality to perform automatic reviews with static analysis of code to detect bugs, code smells, and security vulnerabilities on 20+ programming languages. I’m going to shamelessly plug the Wikipedia definition for the tool:

Sonarqube phpstorm