Beyond the basics of SonarQube: improve your Java(Script) code even further
summary
Most teams treat SonarQube as a Checkstyle/PMD stand-in, but SonarQube reimplements rules and adds advanced features: JaCoCo agent attached to Tomcat measures integration coverage (report file appears on shutdown and often needs SSH to pull), branch handling and false‑positive flags don’t carry over, dashboards show leak‑period deltas and hotspots, and Pitest mutation testing exposes weak unit tests (often revealing ~10–20% surviving mutants). SonarLint gives IDE feedback, compare/measure and duplication checks work across projects, and plugins/update center extend the platform.
AI-written summary · about
chapters (19)
- 0:00Start
- 3:32SonarQube architecture
- 5:56Differential views Leak Period
- 7:26Configure dashboards
- 10:29Quality Gates
- 11:06Notifications
- 11:27Analysing data
- 12:43Measures
- 13:29Measure Filter as Bubble Chart
- 14:14Filter Motion Chart
- 24:57Unit and integration testing combined
- 25:31PMD rules for unit testing
- 31:37JavaScript
- 32:25Import unknown files
- 34:50Duplications across projects
- 37:40Background Tasks
- 38:20Update center
- 39:21Hotspots
- 40:04Planning issues
related talks
15mSonar-Powered LLM Context Augmentation for AI Coding Agents
54mJava's Hidden Gems
47mJava's Hidden Gems: Tools and Libraries
20mJava's Hidden Gems: Tools and Libraries
49mJava's Hidden Gems: Tools and Libraries
48mJava's Hidden Gems: Tools and Libraries
46mJava, Code Coverage & Their Best Friend: Bytecode
46mStrengthening Java Apps: Best Practices in Secure Coding for Java Developers