SonarQube overview
SHIP-HATS offers SonarQube as a managed code quality and security analysis tool that helps teams detect bugs, vulnerabilities, and code smells in their applications.
SonarQube automatically analyses source code and provides insights into code quality, maintainability, and security risks throughout the development lifecycle.
Key features and benefits
| Feature | Description |
|---|---|
| Automated code analysis | Automatically scans source code to detect bugs, vulnerabilities, and code quality issues. |
| Security vulnerability detection | Identifies security weaknesses early in the development lifecycle. |
| Code quality monitoring | Tracks technical debt and code quality trends across projects. |
| CI/CD integration | Integrates with CI/CD pipelines to run code analysis automatically during builds. |
| Quality gates | Enforces defined quality standards before code changes are accepted. |
| Multi-language support | Supports multiple programming languages commonly used in application development. |
Use cases
SonarQube in SHIP-HATS can be used to:
- Detect bugs and vulnerabilities during development.
- Enforce coding standards across development teams.
- Prevent code quality regressions during CI/CD pipelines.
- Monitor long-term code quality and technical debt.
Available editions
SHIP-HATS supports two editions of SonarQube:
- SonarQube Community Edition
- SonarQube Enterprise Edition
For a detailed comparison of features between the two editions, see
SonarQube editions comparison.
Note:
The SonarQube Community Edition processes scans sequentially. Only one scan can run at a time across all agencies, which may result in slower processing during peak periods.
Pricing
SonarQube Enterprise Edition usage in SHIP-HATS is billed based on the Lines of Code (LOC) analysed.
Public officers can view the pricing for SonarQube at
SHIP-HATS pricing using their non-SE GSIB or COMET device.
For details on subscription units, LOC limits, and billing behaviour, see
SonarQube Enterprise Edition usage and billing policy.
