Explanation

SonarQube is an open-source platform designed for continuous inspection of code quality, playing a crucial role in the development lifecycle by identifying and addressing potential issues early on. It analyzes code and provides metrics on code quality. Continuously inspects code, reporting vulnerabilities, bugs, or potential issues Improves code maintainability, security, and reliability Integrates easily with CI/CD tools like GitHub and Azure DevOps for continuous code quality monitoring

SonarQube Server: Linked with a database (e.g., PostgreSQL) and contains predefined rules

SonarQube Scanner: Scans your code, performs analysis, prepares metrics, and pushes them to the SonarQube server for saving in the linked database

Running PostgreSQL Container: docker run -d --name sonarqube-db -e POSTGRES_USER=sonar -e POSTGRES_PASSWORD=sonar -e POSTGRES_DB=sonarqube postgres:alpine
Running SonarQube Server: docker run -d --name sonarqube -p 9000:9000 --link sonarqube-db:db -e SONAR_JDBC_URL=jdbc:postgresql://db:5432/sonarqube -e SONAR_JDBC_USERNAME=sonar -e SONAR_JDBC_PASSWORD=sonar sonarqube

localhost:9000. The default login is admin for both username and password

benefits improve code maintability, enhance reliablity.security assurance easy integration