SonarQube editions comparison
SHIP-HATS offers two editions of SonarQube to support different development and security requirements:
- SonarQube Community Edition
- SonarQube Enterprise Edition
Each edition provides different capabilities for code analysis, security testing, and reporting.
Feature comparison
Not all features of the SonarQube Enterprise Edition are currently available in SHIP-HATS. Features are implemented progressively based on demand and feasibility.
| SonarQube Enterprise Edition | SonarQube Community Edition |
|---|---|
| SonarLint IDE integration | SonarLint IDE integration |
| Bug and vulnerability detection | Bug and vulnerability detection |
| Code quality and code smells | Code quality and code smells |
| Branch analysis | — |
| Taint analysis | — |
| Detection of advanced bugs causing runtime errors and crashes | Detection of advanced bugs causing runtime errors and crashes |
| 30+ languages (including Apex, COBOL, PL/I, RPG, and VB6) | 17 languages |
| Security engine customisation | — |
| Security reports | — |
| Project PDF reports | — |
| Regulatory reports to record release state and quality | — |
| Multiple simultaneous scans can run concurrently | Only one scan runs at a time across all agencies |
Community Edition
The SonarQube Community Edition is suitable for projects with basic code quality analysis needs.
Key characteristics:
- Free of cost
- Supports core code quality and vulnerability detection
- Ideal for experimental projects, smaller codebases, or projects where scan turnaround time is not critical
- Only one scan runs at a time across all agencies, which may result in slower processing during peak periods
Enterprise Edition
The SonarQube Enterprise Edition provides advanced analysis and reporting capabilities for larger or production systems.
Key characteristics:
- Suitable for production systems and larger codebases
- Multiple scans can run concurrently, improving analysis throughput
- Supports advanced security analysis and reporting features
- Supports multi-branch analysis
- Billed based on Lines of Code (LOC) analysed
- Subscription Admins can monitor LOC usage to manage consumption
