How can we do the security analysis using SonarQube?
How can we do the Security Analysys using SonarQube?
For Security Analysy purposes, a source code security analyzer
– examines source code to
– detect and report weaknesses that can lead to security vulnerabilities.
SonarQube Upgrade, Backup and Restore Process | SonarQube Tutorial
SonarQube Upgrade, Backup and Restore Process
Today I will share the steps to upgrade from the SonarQube version 5.X to SonarQube version 6.X. We have upgrade guide which can be found http://docs.sonarqube.org/display/SONAR/Upgrading but its not complete guide thus I am sharing the steps as follows which can be followed for the production server as well. As practice shared on the oficial guide that before upgrading to the next major release, you must upgrade to know LTS e.g
What is SonarQube and What is not?
What is SonarQube?
It’s a code quality management platform that allows developer teams to manage, track and eventually improve the quality of the source code. It’s a web based application that keeps historical data of a variety of metrics and gives trends of leading and lagging indicators for all seven deadly sins of developers.
Sonar is an open source platform used by development teams to manage source code quality. Sonar has been developed with a main objective in mind: make code quality management accessible to everyone with minimal effort.
As such, Sonar provides code analyzers, reporting tools, defects hunting modules and TimeMachine as core functionality. But it also embarks a plugin mechanism enabling the community to extend the functionality (more than 35 plugins available), making Sonar the one-stop-shop for source code quality by addressing not only developers but also managers needs.