Tech Talk #5 : Code Analysis SonarQube - Lương Trọng Nghĩa

Jul 27, 20162 likes1,048 views

Sonar is a software quality management platform that enables developers to access and track code analysis data ranging from styling errors and potential bugs to code defects, duplications, lack of test coverage, and excess complexity. It supports over 20 programming languages. Some key features include over 600 coding rules, standard software metrics, the ability to drill down to source code details, a time machine feature to analyze technical debt and code smells over time, security measures, an extensible plugin system, and integrations with tools like Jenkins. Sonar also covers 7 axes of code quality and has an architecture that allows for analysis of code in a continuous integration workflow.

Outline
1. What is Sonar? (demo)
2. Features
3. Covering 7 Axes of Code Quality
4. Architecture
5. Community and Ecosystem
6. Q&A

1. What is Sonar?
● Is a software quality management platform → Java.
● Enabling developers to access and track code analysis data ranging
○ styling errors
○ potential bugs
○ code defects
○ code duplications
○ lack of test coverage
○ excess complexity
● Support more than 20 languages.

2. Features
● Overview of all projects (demo)
● Coding rules:
○ 600+ rules are incorporated, can be fully
parameterized.
○ implement your own.
● Standard software metrics: Lines of code, Documented
API, Cyclomatic complexity, Test coverage, Duplicated
code.

2. Features
● Drill down to source code
● Time Machine (Technical Debt, Code
Smell … -> SQALE), Motion Chart.
Motion Chart
Technical Debt

2. Features
● Security measures
● Extensible plugin system
○ Additional languages.
○ Additional metrics: Useless code,
Build stability ...
○ Visualization/Reporting:
■ PDF Report.
■ Timeline: Google Timeline
Chart.
○ Integration:
■ Jenkins and Bamboo.
○ IDE: Eclipse

3. Covering 7 Axes of Code Quality
Aka Developers' Seven Deadly Sins

5. Architecture
Sonar with CI Architecture

6. Community and Ecosytem
● Issues: http://jira.codehaus.org/browse/SONAR
● Open Source: https://github.com/SonarSource/sonarqube
● Contribute: http://www.sonarqube.org/development/

This document discusses SonarQube, a tool for continuous code inspection. It begins with an overview of static code analysis and its benefits for organizations. It then covers quality gates and rules for inspection, integration with CI/CD pipelines, and IDE plugins. Static code analysis examines source code to find patterns that could impact security, reliability or maintainability. Quality gates help highlight critical areas for improvement and gauge technical debt over time. SonarQube allows for continuous inspection across multiple languages and frameworks.

SonarqubeKalkey

SonarQube is an open source tool that analyzes source code and stores the results in a database. It makes this analysis data available through a dynamic website. SonarQube performs static code analysis to automatically find potential errors or poor coding practices by analyzing source code. The analysis focuses on detecting errors, recommending code formatting improvements, and computing code metrics.

Continuous Inspection of Code Quality: SonarQubeEmre Dündar

SonarQube is an open source platform for continuous inspection of code quality. It uses static code analysis to generate software metrics and detect issues like bugs, vulnerabilities, and code smells. These issues are tracked over time to help developers fix problems early when they are cheap to address. SonarQube integrates with development tools and pipelines to perform analysis on commits and reject code that does not meet quality standards. This provides continuous feedback on code quality and helps enforce good development practices across teams.

SonarqubePeerapat Asoktummarungsri

This document discusses code quality and continuous inspection. It introduces SonarQube, an open source tool for managing code quality. SonarQube can analyze code for potential bugs, complexity, duplicated code, test coverage, and other metrics. It supports many programming languages. The document emphasizes that SonarQube is a tool to help improve quality, but quality ultimately depends on human effort.

Track code quality with SonarQubeDmytro Patserkovskyi

It is not to complicated to keep new project with good code quality for half year. Maybe, for one year. But what if team works on some project for years? Or even ”better”: you need to support and grow large project after another team. Presentation describes Continuous Inspection, main measures of code quality that will make your life better, continuous inspection and how to cook it with SonarQube.

Track code quality with SonarQube - short versionDmytro Patserkovskyi

SonarQube is an open source platform for continuously monitoring code quality. It detects bugs, vulnerabilities, and code smells based on configured quality rules and profiles. Projects can define quality gates that check thresholds for metrics like issues, coverage, and duplications to flag the quality status as passed, warning, or failed. SonarQube allows comparing metrics across versions to track quality over time and supports code processes like nightly and pull request analysis. A community provides support through rule and profile updates, new plugins, and biweekly meetings to discuss quality concerns.

Mohamed youssfi support architectures logicielles distribuées basées sue les ...ENSET, Université Hassan II Casablanca

Introduction to GraphQLSangeeta Ashrit

This document provides an introduction to GraphQL, including its history and key concepts. It discusses how GraphQL works with queries and mutations, schemas and types, validations and executions. Comparisons are made between GraphQL and REST. Examples of GraphQL queries and schemas are shown. Benefits of GraphQL include minimal code changes, no need for versioning, and handling client-specific data with one endpoint. Disadvantages include lack of "select *" and potential for large argument objects. Major companies using GraphQL are cited.

SonarQube OverviewAhmed M. Gomaa

SonarQube - Should I Stay or Should I Go ? Geeks Anonymes

SonarQube - The leading platform for Continuous Code QualityLarry Nung

SonarQube is a leading platform for continuous code quality that allows developers to write clean code, detect bugs across 20+ programming languages, and integrate with DevOps tools like Jenkins. The document discusses getting started with SonarQube by setting up the Windows service, MySQL database, security, plugins, rules, quality profiles, and quality gates. It also covers project management, remote access, using the SonarQube scanner for MSBuild, and integrating SonarQube with Jenkins for continuous code quality.

SonarQubeGnanaseelan Jeb

This document discusses SonarQube and the seven deadly sins of software development it helps identify. It begins by introducing SonarQube and its role in separating developers from code quality issues. It then details the seven sins: 1) Violation of architecture layers, 2) Creating dependency cycles, 3) High cyclomatic complexity, 4) Lack of proper unit tests, 5) Undocumented source code, 6) Duplicate source code, and 7) Coding standard breaches. For each sin, it provides examples of how SonarQube detects and reports the issue. It concludes by categorizing the different issue types SonarQube identifies in terms of bugs, potential bugs, inefficiencies, and coding styles.

Sonar ReviewKate Semizhon

SonarQube is an open source tool that helps manage code quality. It covers 7 axes of code quality and allows for continuous inspection of code bases through its plugins. It provides benefits like reducing bugs and technical debt by detecting issues early. Key metrics reported include potential bugs, duplicates, and test coverage. The tool integrates with development workflows and provides visual dashboards and reports to track quality over time.

Managing code quality with SonarQubeRadu Vunvulea

The document discusses various aspects of quality assurance and code analysis for software projects such as testing, code coverage, complexity metrics, and potential bugs. It also provides information on configuration properties for the SonarQube code analysis tool and lists languages and frameworks that can be analyzed. Resources are referenced for SonarQube and plugin documentation to help with code analysis and quality reporting.

Code Quality Lightning TalkJonathan Gregory

SonarQube is an open source tool that can be used to automate code quality metrics through continuous inspection of codebases to identify issues, aggregate metrics across projects, and provide dashboards and reports. It supports multiple languages including C# and JavaScript, and can be integrated into continuous integration pipelines through plugins. Using SonarQube allows teams to focus QA efforts by prioritizing the most important issues, track improvements over time, and gain insights into code quality trends across an organization.

The story of SonarQube told to a DevOps EngineerManu Pk

Sonar qubepenetration Tester

SonarQube is an open-source platform that performs automatic code reviews through static analysis to detect bugs, vulnerabilities, and code smells in over 20 programming languages. It provides reports on code quality metrics like duplicated code, code coverage, complexity, and potential issues. SonarQube requires Java and supports analyzing code written in languages like Java, C#, JavaScript, and Python. The SonarScanner is used to analyze source code and generate reports in SonarQube. Quality Gates in SonarQube define thresholds for metrics that projects must meet, such as having no new blocker issues or code coverage above 80%.

Java Source Code Analysis using SonarQubeAngelin R

This document discusses how to set up and use SonarQube to analyze code quality for both Maven and non-Maven projects. It describes installing the SonarQube server and runner, configuring the server, and setting up projects for analysis by adding a sonar-project.properties file. It then explains how to generate a SonarQube report by running the sonar-runner on a project and view results on the SonarQube server dashboard.

SonarQube Presentation.pptxSatwik Bhupathi Raju

Code QualityFrançois Camus

The document discusses the importance of code quality and maintaining clean code. It provides principles for writing clean code such as the Boy Scout Rule, DRY principle, and Single Responsibility Principle. Pair programming and code reviews are recommended practices for ensuring code quality. Unit testing using a test-driven development approach helps avoid bugs and allows flexibility. Measuring metrics like test coverage and implementing a coding standard can improve code quality.

Tracking and improving software quality with SonarQubePatroklos Papapetrou (Pat)

This document discusses code quality and the software analysis tool SonarQube. It begins with an introduction to the author and an overview of topics to be covered, including code quality principles, measuring quality, and technical debt. It then demonstrates how SonarQube can help development teams continuously measure and improve their code quality across seven key dimensions. The document concludes by emphasizing the importance of ongoing code quality management.

Sonarlintpenetration Tester

SonarLint is a free, open source plugin for Visual Studio, PyCharm, Eclipse and IntelliJ IDEA that helps developers fix code quality issues. It provides instant feedback as developers write code, identifying existing issues and new issues introduced. SonarLint detects issues on-the-fly as code is written and provides rich documentation on issues to help developers understand coding best practices and how to resolve problems.

Sonar Tool - JAVA code analysisPrashant Gupta

SonarQube.pptxYASHWANTHGANESH1

SonarQube is a tool that enables continuous inspection of code quality. It analyzes code for bugs, vulnerabilities, and code smells based on configured rules. The analysis is integrated into development pipelines so that quality feedback is immediately available. SonarQube provides metrics on key aspects of quality like technical debt, bugs, code coverage, and duplications to help teams improve their code. It supports over 25 programming languages and has extensible plugin architecture.

Jenkins with SonarQubeSomkiat Puisungnoen

The document discusses how to integrate the SonarQube code quality analysis tool with projects. It covers downloading and installing SonarQube, configuring it to work with various databases and web servers, and integrating it with build tools like Maven and Jenkins to analyze code on pull requests and during regular builds. The document also provides an overview of the metrics and reports that SonarQube can generate, such as lines of code, rule violations, code coverage, complexity, and comparing metrics over time.

Code reviewAbhishek Sur

Agile Testing - presentation for Agile User Groupsuwalki24.pl

The document discusses agile testing principles and processes. It compares agile testing to waterfall testing and outlines some key differences. It also addresses topics like continuous integration, test automation, managing test cases and issues, and transitioning from waterfall to agile. Pseudo-agile projects are described as those that claim to use agile but lack key elements like automation, continuous integration, or involvement of testers throughout the process.

Final Automation Testingpriya_trivedi

Automation testing involves automating manual testing processes using software tools to execute test scripts and compare expected and actual results. There are different types of automation frameworks including data-driven, keyword-driven, modular, and hybrid frameworks. Implementing an automation framework involves 10 steps: identifying the testing scope and needs, evaluating tools, designing the framework, developing and populating test data, and configuring schedulers.

Maven overviewYukti Kaura

This document provides an overview of Maven and how it is used with AMPer. It begins by defining Maven as a project management tool that provides build capabilities and additional features like running reports and generating websites. It then discusses key Maven concepts like the project lifecycle, plugins, dependencies, and the standard directory layout. The document also examines the Maven settings file, which contains configuration settings, and the project object model (POM) file, which describes the project. It provides details on how these files configure repositories, profiles, and other settings.

Build Automation using Maven Ankit Gubrani

Maven is an open source build automation tool used primarily for Java projects to manage builds, documentation, dependencies, and reports. It uses a project object model (POM) file to manage build configuration and dependencies. Maven has defined build lifecycles consisting of phases that execute plugin goals. It provides standard project layout and dependency management. Maven searches dependencies in local, central, and remote repositories. Build profiles allow customizing builds for different environments. Plugins are used to perform tasks like compiling, testing, packaging, and generating documentation.

More Related Content

What's hot (20)

SonarQube OverviewAhmed M. Gomaa

SonarQube - Should I Stay or Should I Go ? Geeks Anonymes

SonarQube - The leading platform for Continuous Code QualityLarry Nung

SonarQubeGnanaseelan Jeb

Sonar ReviewKate Semizhon

Managing code quality with SonarQubeRadu Vunvulea

Code Quality Lightning TalkJonathan Gregory

The story of SonarQube told to a DevOps EngineerManu Pk

Sonar qubepenetration Tester

Java Source Code Analysis using SonarQubeAngelin R

SonarQube Presentation.pptxSatwik Bhupathi Raju

Code QualityFrançois Camus

Tracking and improving software quality with SonarQubePatroklos Papapetrou (Pat)

Sonarlintpenetration Tester

Sonar Tool - JAVA code analysisPrashant Gupta

SonarQube.pptxYASHWANTHGANESH1

Jenkins with SonarQubeSomkiat Puisungnoen

Code reviewAbhishek Sur

Agile Testing - presentation for Agile User Groupsuwalki24.pl

Final Automation Testingpriya_trivedi

SonarQube OverviewAhmed M. Gomaa

SonarQube - Should I Stay or Should I Go ? Geeks Anonymes

SonarQube - The leading platform for Continuous Code QualityLarry Nung

SonarQubeGnanaseelan Jeb

Sonar ReviewKate Semizhon

Managing code quality with SonarQubeRadu Vunvulea

Code Quality Lightning TalkJonathan Gregory

The story of SonarQube told to a DevOps EngineerManu Pk

Sonar qubepenetration Tester

Java Source Code Analysis using SonarQubeAngelin R

SonarQube Presentation.pptxSatwik Bhupathi Raju

Code QualityFrançois Camus

Tracking and improving software quality with SonarQubePatroklos Papapetrou (Pat)

Sonarlintpenetration Tester

Sonar Tool - JAVA code analysisPrashant Gupta

SonarQube.pptxYASHWANTHGANESH1

Jenkins with SonarQubeSomkiat Puisungnoen

Code reviewAbhishek Sur

Agile Testing - presentation for Agile User Groupsuwalki24.pl

Final Automation Testingpriya_trivedi

Viewers also liked (6)

Maven overviewYukti Kaura

Build Automation using Maven Ankit Gubrani

Selenium Test AutomationBabuDevanandam

This document summarizes a white paper on a Selenium test automation framework integrated with HP Quality Center. The framework provides an overview of its architecture, components, script flow, and benefits. A case study demonstrates how the framework automates train route booking, with steps for login, request creation, form filling, and logout. The framework reduces script development/maintenance efforts and offers benefits like cost savings and integration with third-party tools.

Maven IntroductionSandeep Chawla

Maven is a build tool that can manage a project's build process, dependencies, documentation and reporting. It uses a Project Object Model (POM) file to store build configuration and metadata. Maven has advantages over Ant like built-in functionality for common tasks, cross-project reuse, and support for conditional logic. It works by defining the project with a POM file then running goals bound to default phases like compile, test, package to build the project.

Continuous integration and delivery for java based web applicationsSunil Dalal

This document discusses continuous integration and delivery for Java web applications using Jenkins, Gradle, and Artifactory. It defines continuous integration and delivery and explains why they are important. It outlines the workflow and steps involved, including using source control, building and testing with Jenkins and Gradle, storing artifacts in Artifactory, running code analysis with tools like SonarQube, and deploying to test and production. Finally, it addresses some common questions around plugins, versioning, rollbacks, and build frequency.

DevOps and Continuous Delivery Reference Architectures (including Nexus and o...Sonatype

Maven overviewYukti Kaura

Build Automation using Maven Ankit Gubrani

Selenium Test AutomationBabuDevanandam

Maven IntroductionSandeep Chawla

Continuous integration and delivery for java based web applicationsSunil Dalal

DevOps and Continuous Delivery Reference Architectures (including Nexus and o...Sonatype

Similar to Tech Talk #5 : Code Analysis SonarQube - Lương Trọng Nghĩa (20)

How to improve code quality for iOS apps?Kate Semizhon

Code Review with SonarMax Kleiner

Using Automated Code Reviews to Achieve Continuous Quality (ASQF Agile Night ...Peter Kofler

Programming for non tech entrepreneursRodrigo Gil

The document provides an introduction to programming for non-technical entrepreneurs, including a definition of programming languages, a brief history of programming, common programming roles and processes, popular programming languages and tools, basic programming concepts, and considerations for creating websites and mobile apps. It aims to give non-technical founders an overview of the programming landscape to help them communicate effectively with technical teams.

Security in CI/CD Pipelines: Tips for DevOps EngineersDevOps.com

While DevOps is becoming a new norm for most of the companies, security is typically still behind. The new architectures create a number of new process considerations and technical issues. In this practical talk, we will present an overview of the practical issues that go into making security a part of DevOps processes. Will cover incorporating security into existing CI/CD pipelines and tools DevOps professionals need to know to implement the automation and adhere to secure coding practices. Join Stepan Ilyin, Chief Product Officer at Wallarm for an engaging conversation where you’ll learn: Methodologies and tooling for dynamic and static security testing Composite and OSS license analysis benefits Secrets and analysis and secrets management approaches in distributed applications Security automation and integration in CI/CD Apps, APIs and workloads protection in cloud-native K8s enabled environments

Aliaksei Skobeleu "Taking Control Over Code Metrics"LogeekNightUkraine

This presentation discusses code metrics and quality. It defines metrics as non-negative real numbers used to measure aspects of code. Examples of common metrics are lines of code, warnings, bugs, unit test coverage, and complexity measures. Tools discussed for calculating metrics include Visual Studio tools, standalone analyzers, and integrated solutions. The presentation emphasizes defining rules and processes, setting targets, and monitoring trends over time to improve code quality.

AdaCore Paris Tech Day 2016: Jose Ruiz - QGen Tech Updatejamieayre

- QGen is a code generator that can generate code from Simulink models. It supports Processor-in-the-Loop testing, has multiple user interfaces, and is the basis for ongoing research focused on system and software integrity. - It allows for customization at the block and arithmetic levels to reuse pre-certified code libraries. This is done through configuration files that specify functions or libraries to use. - QGen has achieved a TQL-1 qualification which provides benefits like not needing to review generated code or create low-level tests. This qualification puts requirements on QGen development. - A QGen debugger provides synchronized views of models, code, and assembly to help with model-level debugging.

Using protocol analyzer on mikrotikAchmad Mardiansyah

Code Quality Control in a PHP project. GeekTalks, Cherkassy 2020Andrew Yatsenko

When one experienced and 5 junior developers are working on the project, the team leader can monitor the quality of the code manually, using the help of simple static analyzers like phpmd and phpcs. In this report, we will consider what to do next, with the growth of the team, when there are too many people for manual control, the teams already consist of strong developers. Approaches, methods of automation tools that we use on the open-source B2B eCommerce platform to control the quality of the code.

Legacy code development and maintenanceDenis Kondratenko

Joomla Code Quality Control and Automation TestingShyam Sunder Verma

The document discusses code quality control for Joomla projects using automated tools for testing, analysis, and integration. It covers unit testing with PHPUnit, static analysis with PHP Code Sniffer and PHP Mess Detector, code coverage with PHPUnit, profiling with Xdebug, documentation with PHPDocumentor, and continuous integration with Phing and CruiseControl. Automating these processes improves code quality by detecting issues early.

Software maintenance PyConUK 2016Cesar Cardenas Desales

This document discusses strategies for maintaining a legacy Python codebase. It presents a three part "maintenance framework": 1) Understand the system through documentation, debugging, profiling and testing; 2) Establish a safety net using automated tests, continuous integration, monitoring and automation; 3) Improve the code through linting, complexity analysis and code reviews, and improve development practices through test-driven development. The document argues that software maintenance is a major cost and recommends these strategies to help understand an existing codebase and establish processes to prevent issues and improve quality over time.

Resume M_Shams_qureshi M Shams Qureshi

This document provides a summary of Mohd Shams Qureshi's professional experience and qualifications. Qureshi has over 7 years of experience as a C/C++ software developer working on projects related to telecommunications including LTE and 5G networks. He has worked for Tata Consultancy Services and Process Precision Instruments on various embedded systems and software development projects involving technologies like Linux, C/C++, Python, and databases. Qureshi's education includes a B.E. in Electronics and Telecommunication and a post-graduate diploma in embedded systems design. He is currently working as an assistant consultant at Tata Consultancy Services in Mumbai, India.

Srikanth_PILLI_CV_latestSrikanth Pilli

Srikanth Pilli has over 6 years of experience in embedded software development. He has expertise in C/C++, Python, Linux kernel driver development, video streaming, and networking. He has worked on projects involving home automation, surveillance systems, and embedded device development. His skills include embedded Linux systems, microcontroller programming, real-time protocols, and tools like Git. He holds an M.Tech in embedded systems and postgraduate diplomas in embedded systems and electronics.

Software maintenance PyConPL 2016Cesar Cardenas Desales

This document discusses strategies for maintaining legacy Python codebases. It begins with background on the presenter and an introduction to the topic. The bulk of the document outlines a three-part "maintenance framework": 1) Understand the system through documentation, debugging, profiling and testing; 2) Establish a safety net with automated tests, continuous integration, monitoring and automation; and 3) Improve the code and development practices through code quality tools, test-driven development, and code reviews. Emphasis is placed on understanding context, architecture and behavior before refactoring code and establishing collaborative processes to raise quality and knowledge sharing.

Summit 16: NetIDE: Integrating and Orchestrating SDN ControllersOPNFV

NetIDE is a EU-funded project that is known to the OpenDaylight community, because we have contributed a component to the Beryllium release. However, the full NetIDE ecosystem is much more. It is an extended SDN controller framework that allows users to cherry-pick the best of breed both for the network facing controller and the SDN framework for applications. In addition it provides an application composition engine that allows network operators to introduce software development concepts like code reusability in their production cycle. In this talk, I will introduce the whole Network Engine as well as the NetIDE Eclipse plugin that allows us to create SDN applications, test them and run them on the NetIDE engine and reflect on why we contributed what we contributed to OpenDaylight.

Scaling MagentoCopious

This document summarizes strategies for scaling a Magento installation. It discusses code management techniques like using good IDE tools and avoiding modifying core files. It outlines hardware profiles including networks, databases, caches and utility servers. It describes the team structure with 16 committers across 5 departments and 31 vendors. Effective communication practices and documentation are emphasized. Release processes, deployments, community participation and collaboration texts are also summarized.

Building a Distributed & Automated Open Source Program at NetflixAll Things Open

Netflix Open Source: Building a Distributed and Automated Open Source Programaspyker

Netflix has been using and contributing to open source for several years. Over the years, Netflix has released over one hundred Netflix Open Source (aka NetflixOSS) libraries, servers, and technologies. Netflix engineers benefit by accepting contributions and gathering feedback with key collaborators around the world. Users of NetflixOSS from many industries benefit from our solutions including Big Data, Build and Delivery Tools, Runtime Services and Libraries, Data Persistence, Insight, Reliability and Performance, Security and User Interface. With such a large and mature open source program, Netflix has worked on approaches and tools that help manage and improve the NetflixOSS source offerings and communities. Netflix has taken a different approach to building support for open source as compared to other Internet scale companies. Come to this session to learn about the unique approaches Netflix has taken to both distribute and automate the responsibilities of building a world-class open source program.

Technical debt management strategiesRaquel Pau

Raquel Pau discusses strategies for managing technical debt. She defines technical debt as code that is easy to implement in the short run but not the best overall solution. While some technical debt is inevitable when pursuing a minimum viable product strategy, it is important to measure all debt, control increases with quality gates and code reviews, and prioritize reducing existing debt through a "merciless" cleanup approach. Different types of technical debt include architectural, testing, code standards, infrastructure, and knowledge debt. Metrics, consequences, and solutions are proposed for managing each type of debt.

How to improve code quality for iOS apps?Kate Semizhon

Code Review with SonarMax Kleiner

Using Automated Code Reviews to Achieve Continuous Quality (ASQF Agile Night ...Peter Kofler

Programming for non tech entrepreneursRodrigo Gil

Security in CI/CD Pipelines: Tips for DevOps EngineersDevOps.com

Aliaksei Skobeleu "Taking Control Over Code Metrics"LogeekNightUkraine

AdaCore Paris Tech Day 2016: Jose Ruiz - QGen Tech Updatejamieayre

Using protocol analyzer on mikrotikAchmad Mardiansyah

Code Quality Control in a PHP project. GeekTalks, Cherkassy 2020Andrew Yatsenko

Legacy code development and maintenanceDenis Kondratenko

Joomla Code Quality Control and Automation TestingShyam Sunder Verma

Software maintenance PyConUK 2016Cesar Cardenas Desales

Resume M_Shams_qureshi M Shams Qureshi

Srikanth_PILLI_CV_latestSrikanth Pilli

Software maintenance PyConPL 2016Cesar Cardenas Desales

Summit 16: NetIDE: Integrating and Orchestrating SDN ControllersOPNFV

Scaling MagentoCopious

Building a Distributed & Automated Open Source Program at NetflixAll Things Open

Netflix Open Source: Building a Distributed and Automated Open Source Programaspyker

Technical debt management strategiesRaquel Pau

More from Nexus FrontierTech (20)

[Executive Lounge Talk] Digital Transformation JourneyNexus FrontierTech

[AI series Talk #2] From PoC to Production - A Case StudyNexus FrontierTech

[AI Series Talk #2] Moving AI from PoC Stage to ProductionNexus FrontierTech

[VFS 2019] Introduction to GANs - Pixta VietnamNexus FrontierTech

[VFS 2019] Enabling Young Generation for Future - AWS Vietnam User GroupNexus FrontierTech

The document outlines the agenda and future plans of the AWS Vietnam User Group community. It discusses introducing the user group, upcoming events, startup programs, and future community plans centered around four core missions. It also mentions that 30 organizers across Vietnam support over 100 startups and that organizers from the user group mentored at a SheCodes Hackathon to help attendees complete challenges in 24 hours while supporting women and girls in technology.

[VFS 2019] Building chatbot with RASANexus FrontierTech

[VFS 2019] Vietnamese Speech-to-Text: Applications and ProductNexus FrontierTech

[VFS 2019] How AI Will Innovate RecruitmentNexus FrontierTech

[VFS 2019] AI in FinanceNexus FrontierTech

[VFS 2019] Preventive Approach to Designing and Selling Healthy AI System Nexus FrontierTech

From Tokyo, Hajime Hotta is a serial entrepreneur who's had several successful ventures in Japan. He invented and led the core product at Cirius Technologies, which was acquired by Yahoo Japan, and also led the series A funding at Naked Tech, which was sold to Mixi Japan. He has a PhD in Artificial Intelligence and a strong background in AI and AI-web application. His presentation at Vietnam Frontier Summit will be insightful enough about building and selling healthy AI systems.

[VFS 2019] Phương pháp phát hiện bất thường bằng học máyNexus FrontierTech

[VFS 2019] OCR Techniques for Digital Transformation EvolutionNexus FrontierTech

[VFS 2019] Human Activity Recognition Approaches Nexus FrontierTech

This document provides an overview of approaches for human activity recognition (HAR). It discusses vision-based approaches including using hand-crafted motion features, depth information methods, and deep learning techniques. Deep learning methods covered include two-stream inflated 3D networks, deep bidirectional LSTM with CNN features, and skeleton-based spatial temporal graph convolutional networks. The document also discusses potential future directions for HAR, which may involve using 3D features, unsupervised learning, skeleton-based methods for privacy, and optimization/quantization. HAR applications in the future could leverage the power of modern AI and embedded abilities while meeting requirements like real-time performance, privacy, and ease of deployment.

[VFS 2019] Aimesoft SolutionsNexus FrontierTech

[VFS 2019] Datamart Introduction (brief)Nexus FrontierTech

[VFS 2019] Data Strategy for Vietnamese Businesses to Levarage AINexus FrontierTech

[VFS 2019] AI for BanksNexus FrontierTech

[VFS 2019] Digital Solution for Enterprises: 24/7 A.I English Speaking CoachNexus FrontierTech

[VFS 2019] Project Management for AI-based Product - A Better ApproachNexus FrontierTech

[VFS 2019] AI Ecosystem transition from zero to hero - case study by rubikAINexus FrontierTech

[Executive Lounge Talk] Digital Transformation JourneyNexus FrontierTech

[AI series Talk #2] From PoC to Production - A Case StudyNexus FrontierTech

[AI Series Talk #2] Moving AI from PoC Stage to ProductionNexus FrontierTech

[VFS 2019] Introduction to GANs - Pixta VietnamNexus FrontierTech

[VFS 2019] Enabling Young Generation for Future - AWS Vietnam User GroupNexus FrontierTech

[VFS 2019] Building chatbot with RASANexus FrontierTech

[VFS 2019] Vietnamese Speech-to-Text: Applications and ProductNexus FrontierTech

[VFS 2019] How AI Will Innovate RecruitmentNexus FrontierTech

[VFS 2019] AI in FinanceNexus FrontierTech

[VFS 2019] Preventive Approach to Designing and Selling Healthy AI System Nexus FrontierTech

[VFS 2019] Phương pháp phát hiện bất thường bằng học máyNexus FrontierTech

[VFS 2019] OCR Techniques for Digital Transformation EvolutionNexus FrontierTech

[VFS 2019] Human Activity Recognition Approaches Nexus FrontierTech

[VFS 2019] Aimesoft SolutionsNexus FrontierTech

[VFS 2019] Datamart Introduction (brief)Nexus FrontierTech

[VFS 2019] Data Strategy for Vietnamese Businesses to Levarage AINexus FrontierTech

[VFS 2019] AI for BanksNexus FrontierTech

[VFS 2019] Digital Solution for Enterprises: 24/7 A.I English Speaking CoachNexus FrontierTech

[VFS 2019] Project Management for AI-based Product - A Better ApproachNexus FrontierTech

[VFS 2019] AI Ecosystem transition from zero to hero - case study by rubikAINexus FrontierTech

Tech Talk #5 : Code Analysis SonarQube - Lương Trọng Nghĩa

1. TechTalk #5: Nghia Luong

2. Outline 1. What is Sonar? (demo) 2. Features 3. Covering 7 Axes of Code Quality 4. Architecture 5. Community and Ecosystem 6. Q&A

3. 1. What is Sonar? ● Is a software quality management platform → Java. ● Enabling developers to access and track code analysis data ranging ○ styling errors ○ potential bugs ○ code defects ○ code duplications ○ lack of test coverage ○ excess complexity ● Support more than 20 languages.

4. 2. Features ● Overview of all projects (demo) ● Coding rules: ○ 600+ rules are incorporated, can be fully parameterized. ○ implement your own. ● Standard software metrics: Lines of code, Documented API, Cyclomatic complexity, Test coverage, Duplicated code.

5. 2. Features ● Drill down to source code ● Time Machine (Technical Debt, Code Smell … -> SQALE), Motion Chart. Motion Chart Technical Debt

6. 2. Features ● Security measures ● Extensible plugin system ○ Additional languages. ○ Additional metrics: Useless code, Build stability ... ○ Visualization/Reporting: ■ PDF Report. ■ Timeline: Google Timeline Chart. ○ Integration: ■ Jenkins and Bamboo. ○ IDE: Eclipse

7. 3. Covering 7 Axes of Code Quality Aka Developers' Seven Deadly Sins

8. 4. Architecture Sonar Architecture

9. 5. Architecture Sonar with CI Architecture

10. 6. Community and Ecosytem ● Issues: http://jira.codehaus.org/browse/SONAR ● Open Source: https://github.com/SonarSource/sonarqube ● Contribute: http://www.sonarqube.org/development/

11. Q&A

Tech Talk #5 : Code Analysis SonarQube - Lương Trọng Nghĩa

Recommended

More Related Content

What's hot (20)

Viewers also liked (6)

Similar to Tech Talk #5 : Code Analysis SonarQube - Lương Trọng Nghĩa (20)

More from Nexus FrontierTech (20)

Tech Talk #5 : Code Analysis SonarQube - Lương Trọng Nghĩa