Dockerized SonarQube – Code Quality and Code Security

SonarQube Communication Edition is an open-source code quality and security tool that analyzes your code and provides you with code quality and security reports.

If you’re building a SAAS application, then using tools like SonarQube is essential as it can be used to detected bugs, vulnerabilities, bad programming practises maintainability scores and much more.

If your using continuous development, then you can also use SonarQube as a Quality Gate in your pipelines. For example, you can use it to prevent code from being merged to your master branch if certain coverage, or ratings are below a certain threshold.

In this tutorial, were going to learn how to build and run SonarQube using Docker Compose. Once we have SonarQube up and running locally, we will also learn how to set up for your project.

Github Repo: https://github.com/emad-zaamout/Sonar...