Dheeraj Prakash S·1d agoYour Code Has Bugs You Haven’t Met Yet: A Friendly Deep Dive into SAST with SonarQubeHow a machine reads your pull request, spots the vulnerability a human missed, and blocks it before the merge button is clicked
Khushi Verma·Oct 2397 Tests, 96.7% Coverage, and the Lessons SonarQube Taught MeHow a static code analyzer reviewed my first backend project, and what I learned from it.
Paul·Oct 19Running a code quality tool locally for a new repositorySonarQube, the tool in this article, does not guarantee code quality. It measures maintainability issues, duplication, and test coverage…
Sunilcns·Oct 15DevSecOps: Securing a CI/CD Pipeline with Gitleaks, SonarQube, Checkov and GuardDutySecurity checks in a pipeline are easy to name and easy to confuse. The trick is to know what each tool looks at: secrets, application code…
Cleo Excellen Iskandar·Oct 10Kenapa Masih Pakai SonarQube?Saat mengembangkan fitur dalam sebuah aplikasi, memastikan fitur berjalan sesuai kebutuhan adalah langkah penting. Namun, apakah fitur yang…
Dragonsoft DevSecOps·Oct 9SonarQube Hunter Agent is now GA: Catch broken access control and business logic flawsSonarQube has officially released Hunter Agent, a new AI security agent that elevates code security from traditional “syntax and data flow”…
Vaishnav Tayal·Oct 6The Sprint We Hit 92% Coverage and Shipped More Bugs Than EverA story about Goodhart’s Law, a green SonarQube dashboard, and the uncomfortable gap between the two.
Ajay Pokharel·Sep 30Building a Maven CI/CD Pipeline with Jenkins and Nexus RepositoryA Beginner-Friendly DevOps Project: GitHub → Jenkins → Maven → NexusA response icon1A response icon1
Cem Topkaya·Sep 30SonarQube Yükseltme Notlarımv9.6.1 (Community Edition) → v26.8.0.126808 (Community Build)
