SonarQube is an automated code scanning tool that can be integrated with CI/CD pipeline to detect security vulnerabilities and defects in the application code. It can integrate with your existing workflow to enable continuous code inspection across your project branches and pull requests. The single node SonarQube AMI by Kurian has pre-configured the community edition of SonarQube with PostgreSQL as the backend database. When an EC2 instance is spun up from this AMI the SonarQube service would be up and running on that machine for your immediate use.