G2

Enguerran M.

Développeur Full Stack

Sporting Goods

Enterprise (> 1000 emp.)

11/4/2026

"SonarQube’s Fast, Intuitive Scans with Seamless GitHub and CI/CD Integration"

5/5

What do you like best about SonarQube?

What I like most about SonarQube is its clean, easy-to-navigate UI/UX dashboard and its seamless integrations with GitHub pull requests and CI/CD pipelines. Onboarding engineering teams is quick and straightforward, thanks to automated scanning profiles and clear documentation, and it delivers immediate ROI by helping us catch technical debt early. The analysis runs fast even on large repositories, and its AI/intelligence capabilities—such as automated remediation advice and contextual explanations for code smells—help our developers address security hotspots directly within their existing workflow. Review collected by and hosted on G2.com.

What do you dislike about SonarQube?

While the web UI/UX is very detailed, the initial onboarding and the fine-tuning of custom Quality Gate rules across large, multi-language monorepos can take a fair amount of administrative time. Additionally, pricing and tier ROI can scale up significantly as lines of code grow, and running very dense static scans on heavier pull requests can occasionally introduce slight wait times in our CI performance pipeline. Review collected by and hosted on G2.com.

What problems is SonarQube solving and how is that benefiting you?

SonarQube helps prevent faulty code and security vulnerabilities from reaching production by acting as an automated gatekeeper on our GitHub pull requests. With its native CI/CD integrations, it continuously enforces code coverage, bug detection, and security standards throughout the development workflow. By leveraging its fast scanning performance and AI/intelligence recommendations, we’ve significantly improved codebase maintainability, reduced manual code review overhead, and achieved strong development ROI. Review collected by and hosted on G2.com.