Sonarqube Training Notes Sept 2024

Day1

What is SonarQube?
=====================
	Quality Mgmt tool

	tool
		Save cost ---> 70% of bugs in software due to Code Quality
		Save time ---> 
		Imp Quality ----> 

	mgmt.
		RULES
		ISSUES IN CODE

	Quality 
		Code Quality ------> FOCUS
		Test Quality
===================================================================
	PLAN -> Dev -> Code A -> Build -> PACK -> Archive -> Dep > AT -> CodeCoverage

	From SonarSource
	Dev in JAVA -- PLAT IND + JRE

	Release
		Community - FREE
		Dev		- PAID
		Enterprise - PAID
	https://www.sonarsource.com/products/sonarqube/downloads/

	Release - 10.6

Code Quality?
---------------------------------------
	Peer Code Review	- HUMAN would review Human Code.
	Static Code Review	
				CODE would review Human Code.
				1 CODE would review 1 Coding Scnario
				100 CODE would review 100 Coding Scnario
				Rule would review Code
				1000 Rule would review Code
				TOOL would review Code
				SCA TOOL would review Code
				https://en.wikipedia.org/wiki/List_of_tools_for_static_code_analysis
		
How Sonarqube works?
===================	
SonarSqube Server			DONE
		Rules
		Web --- 9000
		DB - ANY RDBMS -- except MySQL (h2)

Code
		git repo clone to local
https://github.com/devopsschool-demo-labs-projects/java-sonarqube-helloworld-src

Scanner		
		jar/cmd

Java Installation Guide in Linux & Windows

Sonarqube Tutorails: Installation & Configuration