SonarQube

What is SonarQube?

SonarQube is an open-source platform developed by SonarSource for continuous inspection of code quality to perform automatic reviews with static analysis of code to detect bugs and code smells on 29 programming languages. SonarQube offers reports on duplicated code, coding standards, unit tests, code coverage, code complexity, comments, bugs, and security recommendations.

 

The entire lifecycle of SonarQube

The following figure shows you the visualised product life cycle of SonarQube. You can see all releases with the latest patch version, the long-term support characteristics (orange flag in the green circle, the periods for version provision, maintenance and support.

Figure: Release, patch and end-of-life cycle of product SonarQube (SonarSource)

 

What is the SonarQube release strategy?

Active versions are defined as the following: * Latest version of SonarQube * Latest - 1 version of SonarQube * Long-term Active (LTA) version * Long-term Active (LTA) - 1; up to 6 months after the new LTA is released.

Facts and figures about SonarQube

 

 

Keywords

SonarQube

 

SonarSource

 

Application

 

Release

 

Version

 

Major

 

Minor

 

Patch

 

End-of-life

 

EOL

 

Support

 

End-of-support

 

EOS

 

Maintenance

 

End-of-maintenance

 

EOM

 

Security

 

Long-term support

 

LTS

 

Vulnerabilities

 

Common vulnerabilities & exposures

 

CVE

 

Security