
What I like about SonarQube is that it helps us to catch the code issue and vulnerability in the early stage of the deployment before reaching the code on production. We can easily integrate it into our CI/CD pipeline to find the code quality. We can check the dashboard, which is very useful for tracking bugs, code smells, and security issues, making it easier to understand the overall health of the code. It performs well during the pipeline execution, providing the result really quickly. Review collected by and hosted on G2.com.
Sometimes SonarQube flags a lot of minor issues, which makes it difficult to focus on important bugs and security issues. I think it should prioritize those issues first that need immediate attention. Review collected by and hosted on G2.com.