Track code quality with SonarQube

Nov 12, 2016Download as PPTX, PDF7 likes7,553 views

It is not to complicated to keep new project with good code quality for half year. Maybe, for one year. But what if team works on some project for years? Or even ”better”: you need to support and grow large project after another team. Presentation describes Continuous Inspection, main measures of code quality that will make your life better, continuous inspection and how to cook it with SonarQube.

HELLO!
I am Dmytro Patserkovskyi
Project Manager and Founder
of Dev SonarQube Community at V.I.Tech

Toyota story
Aug. 28, 2009, San Diego CA, USA
◉ Toyota reached 100 mph
◉ Phone call during event
◉ All 4 occupants killed in crash
◉ This is a trigger for Toyota investigation

Toyota story
NASA’s investigation found
7134 violations in code.
Oklahoma’s investigation found
81 514 violations in code.

Toyota story: Results
◉ Recall of 10 000 000+ cars entire the world.
◉ Lost of billions dollars.
◉ 89 death till 2010 because of bugs.

Source Code Should Be
Simple
& Readable
Extendable
Testable
& Covered with Tests
Flexible

Rules Violations
Code Style
checks if code compliant
with conventions
Vulnerabilities
search for bottlenecks
with lacks of validations,
security issues etc
Bugs
looking for bugs and
potential bugs
Performance
checks if everything
doing in the best way
100% - rules compliance

Code Coverage
Line Coverage
Branch Coverage
Overall Coverage
85% - min overall coverage

Cyclomatic Complexity
10 - max compliant complexity
50 - function unsupported

Dublications
I SHALL NOT
DUPLICATE
ANY CODE
ANY CODE ANY CODE
0% - perfect solution
1% - keep buffer

Documentation
Code tells you what is doing,
documentation should tell why and how.
JavaDocs
Block
Comments
100% - public documented API
15% - comments in code

Technical Debt
Extra development work,
that rises with not clear code.
Financial DEBT Time DEBT

An open source platform for
Continuous Inspection

20+ programming languages
50+ official plugins

Rules Plugins and Repositories
44
53
357
43
73

Quality Gates
Set of boolean conditions per project,
based on measure thresholds.
Passed
Warning
Failed

Quality Gates
Metric Operator
Open Issues Is greater than 70 100
Blocker Issues Is greater than 0
Critical Issues Is greater than 0
New Issues Is greater than 0 10
Overall Coverage Is less than 85 80
Unit Test Failures Is greater than 0

Quality of New Code
Tracking quality of code, added in current snapshot
Comparison measures for different versions
Good for long term projects

Project Dashboard
Issues Coverage Complexity
Anything you wantAnother awesome widget
Duplications Documentation Useful Info

Code Processes
PullRequest
Master branch
Nightly
Each update

Administrator
Sonar support and monitoring
Sonar upgrade (new version every 2 months)
Plugins upgrade (new version every month)

Dev Sonar Community
Working on Rules List
Updating Quality Profiles
Setting up Dashboards
Looking for new Plugins

Project Teams
Update project analysis frequently
Monitoring Quality of own project
Defining project Quality Gate
Voice and discuss all concerns with Sonar Community

Support Processes
Modifications
Monthly
Meetings
Biweekly
Feedbacks
On-demand
Discussions
On-demand
Upgrade
Monthly

Summary
◉ Start from small: perform analysis
◉ Track code quality everyday
◉ Develop your own standard, or use existing
◉ Organize support process to make SonarQube alive
◉ Transparency 24/7, even for customers

THANKS!
Resources
◉ http://sonarqube.org
◉ http://docs.sonarqube.org/display/PLUG/Plugin+Library
◉ https://analysis.apache.org/
Links
◉ https://facebook.com/dmytro.wng
◉ http://slideshare.net/DmytroPatserkovskyi

This document discusses code quality and continuous inspection. It introduces SonarQube, an open source tool for managing code quality. SonarQube can analyze code for potential bugs, complexity, duplicated code, test coverage, and other metrics. It supports many programming languages. The document emphasizes that SonarQube is a tool to help improve quality, but quality ultimately depends on human effort.

SonarQube OverviewAhmed M. Gomaa

SonarQube Presentation.pptxSatwik Bhupathi Raju

SonarQube - The leading platform for Continuous Code QualityLarry Nung

SonarQube is a leading platform for continuous code quality that allows developers to write clean code, detect bugs across 20+ programming languages, and integrate with DevOps tools like Jenkins. The document discusses getting started with SonarQube by setting up the Windows service, MySQL database, security, plugins, rules, quality profiles, and quality gates. It also covers project management, remote access, using the SonarQube scanner for MSBuild, and integrating SonarQube with Jenkins for continuous code quality.

Continuous Inspection of Code Quality: SonarQubeEmre Dündar

SonarQube is an open source platform for continuous inspection of code quality. It uses static code analysis to generate software metrics and detect issues like bugs, vulnerabilities, and code smells. These issues are tracked over time to help developers fix problems early when they are cheap to address. SonarQube integrates with development tools and pipelines to perform analysis on commits and reject code that does not meet quality standards. This provides continuous feedback on code quality and helps enforce good development practices across teams.

SonarQube: Continuous Code InspectionMichael Jesse

This document discusses SonarQube, a tool for continuous code inspection. It begins with an overview of static code analysis and its benefits for organizations. It then covers quality gates and rules for inspection, integration with CI/CD pipelines, and IDE plugins. Static code analysis examines source code to find patterns that could impact security, reliability or maintainability. Quality gates help highlight critical areas for improvement and gauge technical debt over time. SonarQube allows for continuous inspection across multiple languages and frameworks.

CICD with JenkinsVietnam Open Infrastructure User Group

This document discusses Continuous Integration/Continuous Delivery (CICD) with Jenkins. It begins with an introduction to how developing and releasing software can be complicated. It then provides an overview of CICD, including that continuous integration verifies new changes through testing, continuous delivery enables continuous deployment to production, and continuous deployment automatically deploys all passed changes. The document discusses how Jenkins is an open-source automation server that helps automate the software development process for CICD. It concludes with best practices for Jenkins, such as high availability, sizing Jenkins machines appropriately, and organizing pipelines and jobs.

Digital TwinSine19

This document discusses digital twin technology. It defines a digital twin as a virtual representation of a physical object that can accurately mimic the performance of the physical object. The document outlines the characteristics, architecture, features, advantages, and applications of digital twins. Digital twins are used across industries like manufacturing, automotive, healthcare, and smart cities to improve design, monitoring, predictive maintenance, and more. The success of digital twins depends on connectivity to real-time data from physical objects and sensors.

Track code quality with SonarQube - short versionDmytro Patserkovskyi

SonarQube is an open source platform for continuously monitoring code quality. It detects bugs, vulnerabilities, and code smells based on configured quality rules and profiles. Projects can define quality gates that check thresholds for metrics like issues, coverage, and duplications to flag the quality status as passed, warning, or failed. SonarQube allows comparing metrics across versions to track quality over time and supports code processes like nightly and pull request analysis. A community provides support through rule and profile updates, new plugins, and biweekly meetings to discuss quality concerns.

SonarQube - Should I Stay or Should I Go ? Geeks Anonymes

SonarqubeKalkey

SonarQube is an open source tool that analyzes source code and stores the results in a database. It makes this analysis data available through a dynamic website. SonarQube performs static code analysis to automatically find potential errors or poor coding practices by analyzing source code. The analysis focuses on detecting errors, recommending code formatting improvements, and computing code metrics.

SonarQubeGnanaseelan Jeb

This document discusses SonarQube and the seven deadly sins of software development it helps identify. It begins by introducing SonarQube and its role in separating developers from code quality issues. It then details the seven sins: 1) Violation of architecture layers, 2) Creating dependency cycles, 3) High cyclomatic complexity, 4) Lack of proper unit tests, 5) Undocumented source code, 6) Duplicate source code, and 7) Coding standard breaches. For each sin, it provides examples of how SonarQube detects and reports the issue. It concludes by categorizing the different issue types SonarQube identifies in terms of bugs, potential bugs, inefficiencies, and coding styles.

Tech Talk #5 : Code Analysis SonarQube - Lương Trọng NghĩaNexus FrontierTech

Sonar is a software quality management platform that enables developers to access and track code analysis data ranging from styling errors and potential bugs to code defects, duplications, lack of test coverage, and excess complexity. It supports over 20 programming languages. Some key features include over 600 coding rules, standard software metrics, the ability to drill down to source code details, a time machine feature to analyze technical debt and code smells over time, security measures, an extensible plugin system, and integrations with tools like Jenkins. Sonar also covers 7 axes of code quality and has an architecture that allows for analysis of code in a continuous integration workflow.

Code Quality Lightning TalkJonathan Gregory

SonarQube is an open source tool that can be used to automate code quality metrics through continuous inspection of codebases to identify issues, aggregate metrics across projects, and provide dashboards and reports. It supports multiple languages including C# and JavaScript, and can be integrated into continuous integration pipelines through plugins. Using SonarQube allows teams to focus QA efforts by prioritizing the most important issues, track improvements over time, and gain insights into code quality trends across an organization.

Tracking and improving software quality with SonarQubePatroklos Papapetrou (Pat)

This document discusses code quality and the software analysis tool SonarQube. It begins with an introduction to the author and an overview of topics to be covered, including code quality principles, measuring quality, and technical debt. It then demonstrates how SonarQube can help development teams continuously measure and improve their code quality across seven key dimensions. The document concludes by emphasizing the importance of ongoing code quality management.

The story of SonarQube told to a DevOps EngineerManu Pk

Managing code quality with SonarQubeRadu Vunvulea

The document discusses various aspects of quality assurance and code analysis for software projects such as testing, code coverage, complexity metrics, and potential bugs. It also provides information on configuration properties for the SonarQube code analysis tool and lists languages and frameworks that can be analyzed. Resources are referenced for SonarQube and plugin documentation to help with code analysis and quality reporting.

Java Source Code Analysis using SonarQubeAngelin R

This document discusses how to set up and use SonarQube to analyze code quality for both Maven and non-Maven projects. It describes installing the SonarQube server and runner, configuring the server, and setting up projects for analysis by adding a sonar-project.properties file. It then explains how to generate a SonarQube report by running the sonar-runner on a project and view results on the SonarQube server dashboard.

Sonar ReviewKate Semizhon

SonarQube is an open source tool that helps manage code quality. It covers 7 axes of code quality and allows for continuous inspection of code bases through its plugins. It provides benefits like reducing bugs and technical debt by detecting issues early. Key metrics reported include potential bugs, duplicates, and test coverage. The tool integrates with development workflows and provides visual dashboards and reports to track quality over time.

Sonar qubepenetration Tester

SonarQube is an open-source platform that performs automatic code reviews through static analysis to detect bugs, vulnerabilities, and code smells in over 20 programming languages. It provides reports on code quality metrics like duplicated code, code coverage, complexity, and potential issues. SonarQube requires Java and supports analyzing code written in languages like Java, C#, JavaScript, and Python. The SonarScanner is used to analyze source code and generate reports in SonarQube. Quality Gates in SonarQube define thresholds for metrics that projects must meet, such as having no new blocker issues or code coverage above 80%.

Sonarlintpenetration Tester

SonarLint is a free, open source plugin for Visual Studio, PyCharm, Eclipse and IntelliJ IDEA that helps developers fix code quality issues. It provides instant feedback as developers write code, identifying existing issues and new issues introduced. SonarLint detects issues on-the-fly as code is written and provides rich documentation on issues to help developers understand coding best practices and how to resolve problems.

Getting Started With CypressKnoldus Inc.

This session aims to shed some light on an emerging test automation tool, Cypress. Cypress resolves many of the test automation problems that a QA or a dev may face in UI Web Automation testing. And after a walkthrough, we will compare cypress with Selenium as well. Contact us: Website: https://www.knoldus.com/ Twitter: https://twitter.com/Knolspeak?ref_src... Facbook: https://www.facebook.com/KnoldusSoftw... Linkedin: https://in.linkedin.com/company/knoldus Instagram: https://www.instagram.com/knoldus_inc...

Automated testing with CypressYong Shean Chong

This document introduces Cypress, an end-to-end testing framework for web applications. It discusses why Cypress is useful for testing, how to get started by installing Cypress and writing test scripts, and provides tips for selecting elements and handling dynamic content. Key aspects covered include planning test cases, writing tests for common pages like login and article creation, and using the Cypress testing library to write robust tests.

Code reviewAbhishek Sur

Code QualityFrançois Camus

The document discusses the importance of code quality and maintaining clean code. It provides principles for writing clean code such as the Boy Scout Rule, DRY principle, and Single Responsibility Principle. Pair programming and code reviews are recommended practices for ensuring code quality. Unit testing using a test-driven development approach helps avoid bugs and allows flexibility. Measuring metrics like test coverage and implementing a coding standard can improve code quality.

"DevOps > CI+CD "Innovation Roots

This document discusses DevOps and continuous delivery. It begins by introducing the speaker and defining DevOps as applying kanban principles and focusing on reducing lead time from idea to production. It then discusses how continuous integration, continuous delivery, test automation, and breaking work into small batches can help reduce lead time. The document emphasizes that DevOps is not just about tools but also culture and processes.

SonarPeerapat Asoktummarungsri

This document discusses Sonar, an open source tool for continuously measuring code quality. It analyzes code across 7 axes: coding rules, architecture, unit test coverage, duplicated code, potential bugs, complexity, and comments. Sonar provides visual reports on metrics and enables tracking their evolution over time. It supports many programming languages and integrates with tools like FindBugs and PMD. Sonar helps manage code quality in a project by identifying hotspots, issues, and allowing review of past states through its time machine feature.

Sonar Tool - JAVA code analysisPrashant Gupta

SONARshri. ram murti smarak college of engg. & technology

The document discusses sonar, which uses sound waves to detect underwater objects. It describes how sonar works by transmitting sound pulses and measuring the reflection to determine distances. There are two main types: active sonar, which transmits pulses and listens for echoes, and passive sonar, which only listens for sounds without transmitting. The document outlines the key components of sonar systems and how they are used for applications like mapping ocean depths and detecting ships and submarines. It also notes some negative impacts on marine animals.

Sonar OverviewSamuel Langlois

This document summarizes Sonar, an open source platform for managing code quality. Sonar aggregates various tools to analyze code quality metrics like static analysis, duplicate code detection, and code coverage. It provides a web-based portal with visualizations of code quality statistics, violations, and technical debt over time. The document encourages trying out Sonar to improve code quality and discusses prioritizing areas to start like increasing test coverage or removing duplicate code.

More Related Content

What's hot (20)

Track code quality with SonarQube - short versionDmytro Patserkovskyi

SonarQube - Should I Stay or Should I Go ? Geeks Anonymes

SonarqubeKalkey

SonarQubeGnanaseelan Jeb

Tech Talk #5 : Code Analysis SonarQube - Lương Trọng NghĩaNexus FrontierTech

Code Quality Lightning TalkJonathan Gregory

Tracking and improving software quality with SonarQubePatroklos Papapetrou (Pat)

The story of SonarQube told to a DevOps EngineerManu Pk

Managing code quality with SonarQubeRadu Vunvulea

Java Source Code Analysis using SonarQubeAngelin R

Sonar ReviewKate Semizhon

Sonar qubepenetration Tester

Sonarlintpenetration Tester

Getting Started With CypressKnoldus Inc.

Automated testing with CypressYong Shean Chong

Code reviewAbhishek Sur

Code QualityFrançois Camus

"DevOps > CI+CD "Innovation Roots

SonarPeerapat Asoktummarungsri

Sonar Tool - JAVA code analysisPrashant Gupta

Track code quality with SonarQube - short versionDmytro Patserkovskyi

SonarQube - Should I Stay or Should I Go ? Geeks Anonymes

SonarqubeKalkey

SonarQubeGnanaseelan Jeb

Tech Talk #5 : Code Analysis SonarQube - Lương Trọng NghĩaNexus FrontierTech

Code Quality Lightning TalkJonathan Gregory

Tracking and improving software quality with SonarQubePatroklos Papapetrou (Pat)

The story of SonarQube told to a DevOps EngineerManu Pk

Managing code quality with SonarQubeRadu Vunvulea

Java Source Code Analysis using SonarQubeAngelin R

Sonar ReviewKate Semizhon

Sonar qubepenetration Tester

Sonarlintpenetration Tester

Getting Started With CypressKnoldus Inc.

Automated testing with CypressYong Shean Chong

Code reviewAbhishek Sur

Code QualityFrançois Camus

"DevOps > CI+CD "Innovation Roots

SonarPeerapat Asoktummarungsri

Sonar Tool - JAVA code analysisPrashant Gupta

Viewers also liked (20)

SONARshri. ram murti smarak college of engg. & technology

Sonar OverviewSamuel Langlois

DevOps – SonarQubeDelta-N

SONAR kamal6902

Sonar is a system that uses sound waves to detect and locate objects underwater. It works by transmitting sound pulses and measuring the reflection of those pulses off objects. There are two main types: active sonar, which transmits sound pulses and listens for echoes, and passive sonar, which only listens for sounds emitted by other sources. Sonar has many applications including locating underwater objects, mapping the seafloor, and detecting other vessels. However, high-intensity sonar can negatively impact marine life like whales and dolphins that rely on sound.

SONAR ppt Ks Maheta

Bats use sonar to locate prey by emitting sound pulses and listening for echoes. There are two main types of sonar: active sonar emits sound pulses and listens for reflections to determine distance and direction, while passive sonar only listens without transmitting. Applications of sonar include detecting submarines, mapping underwater features, and calculating depth. To determine ocean depth using sonar, an apparatus emits ultrasonic vibrations into the water and calculates the distance based on the time it takes for the echoes to return.

Code Quality, Standards and Best Practices, DiscussJapheth Thomson

The document discusses code quality, standards, and best practices in WordPress development. It emphasizes following WordPress coding standards and best practices, knowing when to use different WordPress features like custom post types and additional database tables, being part of the community by asking and answering questions, and not neglecting quality in order to help clients and one's own career. Key resources mentioned include the WordPress Codex and communicating effectively with clients.

SonarQube 로 Unity 프로젝트 관리EG Lim

SonarPPThelperkid

SONAR is used to determine ocean depth and locate underwater objects. There are two main types of SONAR - active and passive. Active SONAR emits sound pulses and measures their reflection to determine distance and direction. Passive SONAR listens without transmitting. SONAR is used to detect submarines, map underwater features, calculate depth, and locate sunken ships and fish. To determine ocean depth using SONAR, high frequency sound vibrations called ultrasonic vibrations are transmitted into the water. The time for the vibrations to return is used to calculate the distance of the reflecting surface below.

Sonar MetricsKeheliya Gallaba

Juc west-how to build a jenkins db the wrong way!Michael Barbine

Michael developed a technically interesting database backend, artifact repository and reporting interface for Jenkins. He was originally told that it would be impossible to create what he was proposing, and so he did it anyway :). The project that he proposed was intended to solve some DevOps scaling issues the FireEye team was experiencing. The initial purpose of the project was to extract Jenkins project/job data and store it in a relational database. The desire was to do this continuously so that the data was available in near real time. This would eventually be accomplished by several tables in a SQL database, a lot of digging into Jenkins, a few scripts and a 3,000 line SQL statement! There was certainly some secret sauce here and he'll get into that, too. The end result was a fully functional database backend that held all sorts of useful information from Michael's build pipeline. Ultimately, the data was turned into a web application with a RESTful API that facilitated automated deployment and pipeline metrics/reporting.

Los vatoslosvatoslocos

El documento lista los materiales necesarios para el dibujo técnico como mesas, reglas, escuadras, escalímetros, compases, lapiceros de dibujo, plantillas, borradores y saca puntas. Explica que el dibujo geométrico representa gráficos planos estructurados para garantizar la lectura y escritura de planos. Describe la proyección ortogonal como un sistema que permite dibujar un objeto en el espacio desde diferentes vistas como la frontal, superior, derecha, izquierda, inferior y posterior.

Jenkins Workflow - An IntroductionBen Snape

The document discusses the Jenkins Workflow Plugin which provides a unified approach to defining build workflows in code using the Groovy domain-specific language. It allows builds to be modeled as pipelines/flows with features like parallelization, input/approval, and visualization. The plugin aims to improve on previous Jenkins approaches by making the entire workflow definable in a single job and providing a global reusable codebase.

20160929 android taipei Sonatype nexus on amazon ec2 TSE-JU LIN(Louis)

Sonatype Nexus can be installed on an Amazon EC2 Ubuntu server to host software libraries for Android development projects. Nexus is downloaded and extracted, the nexus user is created, and configuration files are edited to set the home directory and user. Archives can then be uploaded to Nexus and projects can define Nexus as a repository in their build.gradle files to access dependencies from Nexus. Exoplayer is provided as an example library.

Using Jenkins XML APIAnton Weiss

Continuous Cross Platform Mobile App Development using Jenkins Build ServerAdam Paxton

Maven Nexusericndunn

Maven is a software project management and comprehension tool that helps manage a project's build process, dependencies, and documentation from a central Project Object Model (POM) file. It addresses issues in large projects with many modules by establishing common conventions for directory structure and dependencies. Maven uses a build lifecycle of phases like compile, test, package to automatically build projects. Nexus is an artifact repository manager that stores dependencies and allows sharing across projects through remote, proxy, and hosted repositories.

Continuous integration using Jenkins and SonarPascal Larocque

CONTINUOUS INTEGRATION WITH JENKINS AND GITBenjamin Lutaaya

The document discusses continuous integration using Jenkins and Git. Continuous integration involves integrating code changes frequently from developers on a project to avoid integration problems late in a project. Jenkins is a free and open source continuous integration server that can be used with version control systems like Git to automatically build code, run tests, and generate reports each time changes are committed to the repository. Setting up continuous integration involves installing Jenkins, configuring a Git repository, and configuring Jenkins to clone the repository, build the code, run tests, and generate reports on each change notification from Git.

Sonar qube to impove code qualityMani Sarkar

This document discusses using SonarQube to improve code quality. It introduces SonarQube and describes demonstrating its dashboard, showing code changes and quality metrics. The document outlines a strategy for using SonarQube to identify rule violations, improve test coverage, reduce complexity, and detect unused code. It lists additional SonarQube features and provides resources for learning more.

Build and deployment with Jenkins and Code Deploy on AWSmitesh_sharma

This document discusses using Jenkins and AWS CodeDeploy for continuous integration and deployment. It describes building code on a Jenkins machine and deploying it to AWS EC2 instances using CodeDeploy. Key steps include assigning roles and permissions, installing CodeDeploy agents, creating applications and deployment groups, uploading revisions, and monitoring deployments. The document notes issues with building and deploying from the same place and advocates decoupling build and deployment to allow deploying the same build to multiple environments.

SONARshri. ram murti smarak college of engg. & technology

Sonar OverviewSamuel Langlois

DevOps – SonarQubeDelta-N

SONAR kamal6902

SONAR ppt Ks Maheta

Code Quality, Standards and Best Practices, DiscussJapheth Thomson

SonarQube 로 Unity 프로젝트 관리EG Lim

SonarPPThelperkid

Sonar MetricsKeheliya Gallaba

Juc west-how to build a jenkins db the wrong way!Michael Barbine

Los vatoslosvatoslocos

Jenkins Workflow - An IntroductionBen Snape

20160929 android taipei Sonatype nexus on amazon ec2 TSE-JU LIN(Louis)

Using Jenkins XML APIAnton Weiss

Continuous Cross Platform Mobile App Development using Jenkins Build ServerAdam Paxton

Maven Nexusericndunn

Continuous integration using Jenkins and SonarPascal Larocque

CONTINUOUS INTEGRATION WITH JENKINS AND GITBenjamin Lutaaya

Sonar qube to impove code qualityMani Sarkar

Build and deployment with Jenkins and Code Deploy on AWSmitesh_sharma

Similar to Track code quality with SonarQube (20)

Software Quality Architecture And Code AuditXebia IT Architects

The document discusses software quality audits. It explains that a quality audit assesses the quality of outsourced code and documentation based on industry standards. It aims to identify risks, improve quality, and reduce costs. The approach involves using tools to analyze architecture, code quality, and find common issues like duplicate code, lack of tests, and complexity. Sample reports provide executive summaries and findings on metrics, maintainability, reliability and installability. Prerequisites include sponsorship, access to documentation, environments, and team members.

Enhancing Developer Productivity with Code ForensicsTechWell

Imagine an engineering system that could evaluate developer performance, recognize rushed check-ins, and use that data to speed up development. “Congratulations Jane. You know this code well. No check-in test gate for you.” Anthony Voellm shares how behavioral analysis and developer assessments can be applied to improve productivity. This approach was motivated by today's test systems, tools, and processes that are all designed around the premise that “all developers are created equal.” Studies have shown developer error rates can vary widely and have a number of root causes—the mindset of the developer at the time the code was written, experience level, amount of code in a check-in, complexity of the code, and much more. With Digital Code Forensics, a set of metrics that can evaluate developers, Anthony demonstrates how even modest applications of this approach can speed up development. Discover and use the cutting edge of engineering productivity.

Cross functional peer review preso 10-01-2013SmartBear

This document discusses how cross-functional peer review of requirements, design, code, and test plans within agile teams can improve software quality. It presents findings from a case study showing that reviewing 200-500 lines of code per hour while reviewing no more than 400 lines at a time yields the lowest defect density. Industry metrics also show that high-performing teams find fewer defects post-release by extensively testing in development. Benefits of cross-functional peer review include improved communication, faster problem identification, more readable code, and increased sharing of best practices across roles within development teams.

Keeping Your Continuous Test Automation Suites Continuously Valuable in DevOpsPerfecto by Perforce

When executing test automation at scale and continuously the value tends to decline over time, the team should follow recommended practices to keep their tests with high value. Getting the value from your test automation is fundamental for fast feedback, risk reduction and return on investment from your testing activities. Once developing the test scenarios, teams cannot stop monitoring and ensuring that their tests continuously bring value, are not flaky, and can support the latest functionalities in your web and mobile apps. Teams often “forget” about their tests once they have been developed and integrated into the CI pipeline regardless of the value they bring. This webinar will cover: -How to make smart decisions regarding which test scenarios to automate? -What are the criteria for a test to get included in the CI and continuous testing pipeline? -How to continuously maintain the tests and optimize your suite so it continues to bring value? -See a live demo of smart reporting and analytics that can serve as a monitoring and test maintenance tool.

Solving the 3 Biggest Questions in Continuous TestingPerfecto by Perforce

Software testing tools are evolving. More testing frameworks are emerging through the open source community and commercial vendors. In addition, we’re starting to see the rise of machine-learning (ML) and artificial intelligence (AI) in testing solutions. Given this evolution, it is important to map the tools that match both the practitioners’ skills and their testing types. When referring to the testing practitioners, we mainly look at three different personas: -The business tester -The software developer in test (SDET) -The software developer These practitioners are tasked with creating, maintaining, and executing unit tests, build acceptance tests, integration, regression, and other nonfunctional tests. In this webinar led by Perfecto’s Chief Evangelist, Eran Kinsbruner, you will learn the following: -How should testing types be dispersed among the three personas and throughout the DevOps pipeline? -What tools should each of these three personas use for the creation and execution of tests? -What are the key benefits to continuous testing when mapped correctly?

Driving Risks Out of Embedded Automotive SoftwareParasoft

Automobiles are becoming the ultimate mobile computer. Popular models have as many as 100 Electronic Control Units (ECUs), while high-end models push 200 ECUs. Those processors run hundreds of millions of lines of code written by the OEMs’ teams and external contractors—often for black-box assemblies. Modern cars also have increasingly sophisticated high-bandwidth internal networks and unprecedented external connectivity. Considering that no code is 100% error-free, these factors point to an unprecedented need to manage the risks of failure—including protecting life and property, avoiding costly recalls, and reducing the risk of ruinous lawsuits.

[Europe merge world tour] Coverity Development TestingPerforce

Development testing can reduce costs, accelerate development, and protect brands by: 1) Finding defects earlier in the development process before they escape to production through continuous integration and static analysis. 2) Prioritizing testing of critical code and ensuring all code impacted by changes is tested. 3) Optimizing developer workflows by integrating testing into the development process and minimizing redundant testing.

Zero-bug Software, Mathematically GuaranteedAshley Zupkus

Introduction to Parasoft C++TEST Engineering Software Lab

Webcast Presentation: Accelerate Continuous Delivery with Development Testing...GRUC

With organizations under intense pressure to get products out to market quickly, they can’t afford to operate within operational silos. Yet communicating and collaborating across the organizational boundaries of QA and development can be difficult. Development is typically a black box to QA teams. QA has no visibility into the quality and security of the code until late in the lifecycle. Watch this recorded webcast to learn how to break down the barriers and improve visibility and transparency by integrating development testing results into the IBM Rational Team Concert and providing QA and development with a unified workflow for ensuring code quality. Explore different development testing techniques and the types of defects and security vulnerabilities they can find. About the Presenter: James Croall, Director of Product Management, Coverity Over the last 8 years, James Croall has helped a wide range of customers incorporate static analysis into their software development lifecycle. Prior to Coverity, Mr. Croall spent 10 years in the computer and network security industry as a C/C++ and Java software engineer.

Formal Versus Agile: Survival of the Fittest? (Paul Boca)AdaCore

The potential for combining agile and formal methods holds promise. Although it might not always be an easy partnership, it will succeed if it can foster a fruitful interchange of expertise between the two communities. In this talk I explain how formal methods can complement agile practices and vice versa. There are no pre-requisites for this talk, except an open mind and a desire to make software development more reliable. Leave any pre-conceptions at home, and be prepared for myths to be dispelled.

Brave New World - A wider perspective of our opportunitiesJayathirtha Rao

The world has changed. We feel it in the work environment. We see it in the numbers. We smell it in the questions. Much that once was, is lost, for few remember it, even less still use it. In the name of agility and lean processes, we have turned a blind eye to quality, favouring quick execution over customer delight. And some things that should not have been forgotten were lost. Join Jay Rao and Vishal Anand to explore the new world of “agile delivery”. Understand the myths vs the real picture, the anti-patterns to watch out for and how you can look forward to understanding new measurements for delivery, and various functions within – from architecture to deployment – and where each of us has opportunities that align with common sense and outcomes

What is SonarQube in DevOps.docxDevOps University

SonarQube is an open-source tool for ongoing code quality inspection. It analyses static code and generates a complete report with details on defects; code smells, vulnerabilities, and duplications. SonarQube delivers clear remediation recommendations for developers to understand and solve errors and for teams to build better, safer software by covering 27 programming languages and integrating with your existing development workflow.

Parasoft .TEST, Write better C# Code Using Data Flow Analysis Engineering Software Lab

Data flow analysis is a type of static code analysis that examines how values are propagated through a program. It is more effective than pattern matching or regular static analysis at finding defects related to interactions between methods and classes that may be difficult to uncover through testing alone. Static analysis tools using data flow analysis can simulate execution paths to detect potential issues without requiring the code to be compiled and run. Developers are encouraged to use static testing tools to catch defects early in development, as prevention of bugs is more efficient than finding and fixing them later.

How to improve code quality for iOS apps?Kate Semizhon

Improving Development Productivity: Static Analysis and Continuous IntegrationKlocwork

The document discusses how static source code analysis and continuous integration can improve software development productivity. It describes how Klocwork Insight and Urbancode AnthillPro address productivity bottlenecks by enabling continuous build and code analysis. This finds issues early, reduces bugs shipped to customers, and establishes stable builds. The integration of Klocwork and AnthillPro provides automated safety checks and correlates analysis data across the development lifecycle. The combination of these tools generates continuous feedback to improve quality and productivity.

Coding, Testing, Black-box and White-box Testing.pptxamierlesigues1

[India Merge World Tour] CoverityPerforce

The document discusses Coverity Development Testing which helps reduce risks in software development through continuous integration and development testing. It highlights how software complexity and speed of development have outpaced traditional testing methods. Coverity aims to move quality, security and testing earlier in the software development lifecycle through static analysis, issue management, and developer workflow integration. The document provides an overview of how Coverity's static analysis works and how it can find critical defects that are difficult to detect with traditional testing alone.

Adopting a security attitude in DevOps via DevOpsSecTapabrata Pal

Adopting a security attitude in DevOps involves implementing security practices and controls at every stage of the software delivery pipeline from coding through testing and deployment. This includes performing security checks and tests during coding like using secure coding practices and static analysis tools, during building like reviewing dependencies and analyzing for vulnerabilities, and during testing and deployment through security testing techniques like penetration testing and configuration reviews. The goal is to shift security left and provide rapid security feedback throughout the development and delivery process.

Test-Driven Code Review: An Empirical StudyDelft University of Technology

The study investigated how the order of presenting test code versus production code during code reviews influences the effectiveness of the review. It also examined developers' perceptions of test-driven code reviews. For RQ1, 92 developers participated in a code review experiment comparing reviewing test code first versus production code first. Reviewing test code first led to finding more bugs in the test code but did not influence bugs found in production code. For RQ2, interviews and a survey of 103 developers found that while some saw advantages to reviewing test code first, issues like low test code quality and the inability to choose review order were perceived problems. Adoption of test-driven reviews varied, with most using them sometimes.

Software Quality Architecture And Code AuditXebia IT Architects

Enhancing Developer Productivity with Code ForensicsTechWell

Cross functional peer review preso 10-01-2013SmartBear

Keeping Your Continuous Test Automation Suites Continuously Valuable in DevOpsPerfecto by Perforce

Solving the 3 Biggest Questions in Continuous TestingPerfecto by Perforce

Driving Risks Out of Embedded Automotive SoftwareParasoft

[Europe merge world tour] Coverity Development TestingPerforce

Zero-bug Software, Mathematically GuaranteedAshley Zupkus

Introduction to Parasoft C++TEST Engineering Software Lab

Webcast Presentation: Accelerate Continuous Delivery with Development Testing...GRUC

Formal Versus Agile: Survival of the Fittest? (Paul Boca)AdaCore

Brave New World - A wider perspective of our opportunitiesJayathirtha Rao

What is SonarQube in DevOps.docxDevOps University

Parasoft .TEST, Write better C# Code Using Data Flow Analysis Engineering Software Lab

How to improve code quality for iOS apps?Kate Semizhon

Improving Development Productivity: Static Analysis and Continuous IntegrationKlocwork

Coding, Testing, Black-box and White-box Testing.pptxamierlesigues1

[India Merge World Tour] CoverityPerforce

Adopting a security attitude in DevOps via DevOpsSecTapabrata Pal

Test-Driven Code Review: An Empirical StudyDelft University of Technology

Recently uploaded (20)

Designing Low-Latency Systems with Rust and ScyllaDB: An Architectural Deep DiveScyllaDB

Want to learn practical tips for designing systems that can scale efficiently without compromising speed? Join us for a workshop where we’ll address these challenges head-on and explore how to architect low-latency systems using Rust. During this free interactive workshop oriented for developers, engineers, and architects, we’ll cover how Rust’s unique language features and the Tokio async runtime enable high-performance application development. As you explore key principles of designing low-latency systems with Rust, you will learn how to: - Create and compile a real-world app with Rust - Connect the application to ScyllaDB (NoSQL data store) - Negotiate tradeoffs related to data modeling and querying - Manage and monitor the database for consistently low latencies

What is Model Context Protocol(MCP) - The new technology for communication bw...Vishnu Singh Chundawat

The MCP (Model Context Protocol) is a framework designed to manage context and interaction within complex systems. This SlideShare presentation will provide a detailed overview of the MCP Model, its applications, and how it plays a crucial role in improving communication and decision-making in distributed systems. We will explore the key concepts behind the protocol, including the importance of context, data management, and how this model enhances system adaptability and responsiveness. Ideal for software developers, system architects, and IT professionals, this presentation will offer valuable insights into how the MCP Model can streamline workflows, improve efficiency, and create more intuitive systems for a wide range of use cases.

Andrew Marnell: Transforming Business Strategy Through Data-Driven InsightsAndrew Marnell

Generative Artificial Intelligence (GenAI) in BusinessDr. Tathagat Varma

Linux Support for SMARC: How Toradex Empowers Embedded DevelopersToradex

Toradex brings robust Linux support to SMARC (Smart Mobility Architecture), ensuring high performance and long-term reliability for embedded applications. Here’s how: • Optimized Torizon OS & Yocto Support – Toradex provides Torizon OS, a Debian-based easy-to-use platform, and Yocto BSPs for customized Linux images on SMARC modules. • Seamless Integration with i.MX 8M Plus and i.MX 95 – Toradex SMARC solutions leverage NXP’s i.MX 8 M Plus and i.MX 95 SoCs, delivering power efficiency and AI-ready performance. • Secure and Reliable – With Secure Boot, over-the-air (OTA) updates, and LTS kernel support, Toradex ensures industrial-grade security and longevity. • Containerized Workflows for AI & IoT – Support for Docker, ROS, and real-time Linux enables scalable AI, ML, and IoT applications. • Strong Ecosystem & Developer Support – Toradex offers comprehensive documentation, developer tools, and dedicated support, accelerating time-to-market. With Toradex’s Linux support for SMARC, developers get a scalable, secure, and high-performance solution for industrial, medical, and AI-driven applications. Do you have a specific project or application in mind where you're considering SMARC? We can help with Free Compatibility Check and help you with quick time-to-market For more information: https://www.toradex.com/computer-on-modules/smarc-arm-family

Into The Box Conference Keynote Day 1 (ITB2025)Ortus Solutions, Corp

Mobile App Development Company in Saudi ArabiaSteve Jonas

EmizenTech is a globally recognized software development company, proudly serving businesses since 2013. With over 11+ years of industry experience and a team of 200+ skilled professionals, we have successfully delivered 1200+ projects across various sectors. As a leading Mobile App Development Company In Saudi Arabia we offer end-to-end solutions for iOS, Android, and cross-platform applications. Our apps are known for their user-friendly interfaces, scalability, high performance, and strong security features. We tailor each mobile application to meet the unique needs of different industries, ensuring a seamless user experience. EmizenTech is committed to turning your vision into a powerful digital product that drives growth, innovation, and long-term success in the competitive mobile landscape of Saudi Arabia.

Rusty Waters: Elevating Lakehouses Beyond Sparkcarlyakerly1

Spark is a powerhouse for large datasets, but when it comes to smaller data workloads, its overhead can sometimes slow things down. What if you could achieve high performance and efficiency without the need for Spark? At S&P Global Commodity Insights, having a complete view of global energy and commodities markets enables customers to make data-driven decisions with confidence and create long-term, sustainable value. 🌍 Explore delta-rs + CDC and how these open-source innovations power lightweight, high-performance data applications beyond Spark! 🚀

#StandardsGoals for 2025: Standards & certification roundup - Tech Forum 2025BookNet Canada

Book industry standards are evolving rapidly. In the first part of this session, we’ll share an overview of key developments from 2024 and the early months of 2025. Then, BookNet’s resident standards expert, Tom Richardson, and CEO, Lauren Stewart, have a forward-looking conversation about what’s next. Link to recording, transcript, and accompanying resource: https://bnctechforum.ca/sessions/standardsgoals-for-2025-standards-certification-roundup/ Presented by BookNet Canada on May 6, 2025 with support from the Department of Canadian Heritage.

Role of Data Annotation Services in AI-Powered ManufacturingAndrew Leo

Enhancing ICU Intelligence: How Our Functional Testing Enabled a Healthcare I...Impelsys Inc.

The Evolution of Meme Coins A New Era for Digital Currency ppt.pdfAbi john

Dev Dives: Automate and orchestrate your processes with UiPath MaestroUiPathCommunity

This session is designed to equip developers with the skills needed to build mission-critical, end-to-end processes that seamlessly orchestrate agents, people, and robots. 📕 Here's what you can expect: - Modeling: Build end-to-end processes using BPMN. - Implementing: Integrate agentic tasks, RPA, APIs, and advanced decisioning into processes. - Operating: Control process instances with rewind, replay, pause, and stop functions. - Monitoring: Use dashboards and embedded analytics for real-time insights into process instances. This webinar is a must-attend for developers looking to enhance their agentic automation skills and orchestrate robust, mission-critical processes. 👨‍🏫 Speaker: Andrei Vintila, Principal Product Manager @UiPath This session streamed live on April 29, 2025, 16:00 CET. Check out all our upcoming Dev Dives sessions at https://community.uipath.com/dev-dives-automation-developer-2025/.

AI Changes Everything – Talk at Cardiff Metropolitan University, 29th April 2...Alan Dix

Talk at the final event of Data Fusion Dynamics: A Collaborative UK-Saudi Initiative in Cybersecurity and Artificial Intelligence funded by the British Council UK-Saudi Challenge Fund 2024, Cardiff Metropolitan University, 29th April 2025 https://alandix.com/academic/talks/CMet2025-AI-Changes-Everything/ Is AI just another technology, or does it fundamentally change the way we live and think? Every technology has a direct impact with micro-ethical consequences, some good, some bad. However more profound are the ways in which some technologies reshape the very fabric of society with macro-ethical impacts. The invention of the stirrup revolutionised mounted combat, but as a side effect gave rise to the feudal system, which still shapes politics today. The internal combustion engine offers personal freedom and creates pollution, but has also transformed the nature of urban planning and international trade. When we look at AI the micro-ethical issues, such as bias, are most obvious, but the macro-ethical challenges may be greater. At a micro-ethical level AI has the potential to deepen social, ethnic and gender bias, issues I have warned about since the early 1990s! It is also being used increasingly on the battlefield. However, it also offers amazing opportunities in health and educations, as the recent Nobel prizes for the developers of AlphaFold illustrate. More radically, the need to encode ethics acts as a mirror to surface essential ethical problems and conflicts. At the macro-ethical level, by the early 2000s digital technology had already begun to undermine sovereignty (e.g. gambling), market economics (through network effects and emergent monopolies), and the very meaning of money. Modern AI is the child of big data, big computation and ultimately big business, intensifying the inherent tendency of digital technology to concentrate power. AI is already unravelling the fundamentals of the social, political and economic world around us, but this is a world that needs radical reimagining to overcome the global environmental and human challenges that confront us. Our challenge is whether to let the threads fall as they may, or to use them to weave a better future.

tecnologias de las primeras civilizaciones.pdffjgm517

Semantic Cultivators : The Critical Future Role to Enable AIartmondano

Procurement Insights Cost To Value Guide.pptxJon Hansen

Big Data Analytics Quick Research Guide by Arthur MorganArthur Morgan

This is a Quick Research Guide (QRG). QRGs include the following: - A brief, high-level overview of the QRG topic. - A milestone timeline for the QRG topic. - Links to various free online resource materials to provide a deeper dive into the QRG topic. - Conclusion and a recommendation for at least two books available in the SJPL system on the QRG topic. QRGs planned for the series: - Artificial Intelligence QRG - Quantum Computing QRG - Big Data Analytics QRG - Spacecraft Guidance, Navigation & Control QRG (coming 2026) - UK Home Computing & The Birth of ARM QRG (coming 2027) Any questions or comments? - Please contact Arthur Morgan at [email protected]. 100% human made.

Quantum Computing Quick Research Guide by Arthur MorganArthur Morgan

Technology Trends in 2025: AI and Big Data AnalyticsInData Labs

At InData Labs, we have been keeping an ear to the ground, looking out for AI-enabled digital transformation trends coming our way in 2025. Our report will provide a look into the technology landscape of the future, including: -Artificial Intelligence Market Overview -Strategies for AI Adoption in 2025 -Anticipated drivers of AI adoption and transformative technologies -Benefits of AI and Big data for your business -Tips on how to prepare your business for innovation -AI and data privacy: Strategies for securing data privacy in AI models, etc. Download your free copy nowand implement the key findings to improve your business.

Designing Low-Latency Systems with Rust and ScyllaDB: An Architectural Deep DiveScyllaDB

What is Model Context Protocol(MCP) - The new technology for communication bw...Vishnu Singh Chundawat

Andrew Marnell: Transforming Business Strategy Through Data-Driven InsightsAndrew Marnell

Generative Artificial Intelligence (GenAI) in BusinessDr. Tathagat Varma

Linux Support for SMARC: How Toradex Empowers Embedded DevelopersToradex

Into The Box Conference Keynote Day 1 (ITB2025)Ortus Solutions, Corp

Mobile App Development Company in Saudi ArabiaSteve Jonas

Rusty Waters: Elevating Lakehouses Beyond Sparkcarlyakerly1

#StandardsGoals for 2025: Standards & certification roundup - Tech Forum 2025BookNet Canada

Role of Data Annotation Services in AI-Powered ManufacturingAndrew Leo

Enhancing ICU Intelligence: How Our Functional Testing Enabled a Healthcare I...Impelsys Inc.

The Evolution of Meme Coins A New Era for Digital Currency ppt.pdfAbi john

Dev Dives: Automate and orchestrate your processes with UiPath MaestroUiPathCommunity

AI Changes Everything – Talk at Cardiff Metropolitan University, 29th April 2...Alan Dix

tecnologias de las primeras civilizaciones.pdffjgm517

Semantic Cultivators : The Critical Future Role to Enable AIartmondano

Procurement Insights Cost To Value Guide.pptxJon Hansen

Big Data Analytics Quick Research Guide by Arthur MorganArthur Morgan

Quantum Computing Quick Research Guide by Arthur MorganArthur Morgan

Technology Trends in 2025: AI and Big Data AnalyticsInData Labs

Track code quality with SonarQube

1. Track code quality with SonarQube

2. HELLO! I am Dmytro Patserkovskyi Project Manager and Founder of Dev SonarQube Community at V.I.Tech

3. Low code quality costs a lot

4. Toyota story Aug. 28, 2009, San Diego CA, USA ◉ Toyota reached 100 mph ◉ Phone call during event ◉ All 4 occupants killed in crash ◉ This is a trigger for Toyota investigation

5. Toyota story NASA’s investigation found 7134 violations in code. Oklahoma’s investigation found 81 514 violations in code.

6. Toyota story: Results ◉ Recall of 10 000 000+ cars entire the world. ◉ Lost of billions dollars. ◉ 89 death till 2010 because of bugs.

8. Source Code Should Be Simple & Readable Extendable Testable & Covered with Tests Flexible

9. Code Metrics

10. Rules Violations Code Style checks if code compliant with conventions Vulnerabilities search for bottlenecks with lacks of validations, security issues etc Bugs looking for bugs and potential bugs Performance checks if everything doing in the best way 100% - rules compliance

11. Code Coverage Line Coverage Branch Coverage Overall Coverage 85% - min overall coverage

12. Cyclomatic Complexity 10 - max compliant complexity 50 - function unsupported

13. Dublications I SHALL NOT DUPLICATE ANY CODE ANY CODE ANY CODE 0% - perfect solution 1% - keep buffer

14. Documentation Code tells you what is doing, documentation should tell why and how. JavaDocs Block Comments 100% - public documented API 15% - comments in code

15. Technical Debt Extra development work, that rises with not clear code. Financial DEBT Time DEBT

16. An open source platform for Continuous Inspection

17. 20+ programming languages 50+ official plugins

18. Quality Rules and Profiles Code Smells Bugs Vulnerabilities Quality Profile

19. Rules Plugins and Repositories 44 53 357 43 73

20. Quality Gates Set of boolean conditions per project, based on measure thresholds. Passed Warning Failed

21. Quality Gates Metric Operator Open Issues Is greater than 70 100 Blocker Issues Is greater than 0 Critical Issues Is greater than 0 New Issues Is greater than 0 10 Overall Coverage Is less than 85 80 Unit Test Failures Is greater than 0

22. Quality of New Code Tracking quality of code, added in current snapshot Comparison measures for different versions Good for long term projects

23. Project Dashboard Issues Coverage Complexity Anything you wantAnother awesome widget Duplications Documentation Useful Info

24. Code Processes PullRequest Master branch Nightly Each update

25. Support Team for SonarQube

26. Administrator Sonar support and monitoring Sonar upgrade (new version every 2 months) Plugins upgrade (new version every month)

27. Dev Sonar Community Working on Rules List Updating Quality Profiles Setting up Dashboards Looking for new Plugins

28. Project Teams Update project analysis frequently Monitoring Quality of own project Defining project Quality Gate Voice and discuss all concerns with Sonar Community

29. Support Processes Modifications Monthly Meetings Biweekly Feedbacks On-demand Discussions On-demand Upgrade Monthly

30. 24/7 monitoring and transparency

31. Summary ◉ Start from small: perform analysis ◉ Track code quality everyday ◉ Develop your own standard, or use existing ◉ Organize support process to make SonarQube alive ◉ Transparency 24/7, even for customers

32. Questions

33. THANKS! Resources ◉ http://sonarqube.org ◉ http://docs.sonarqube.org/display/PLUG/Plugin+Library ◉ https://analysis.apache.org/ Links ◉ https://facebook.com/dmytro.wng ◉ http://slideshare.net/DmytroPatserkovskyi

Track code quality with SonarQube

Recommended

More Related Content

What's hot (20)

Viewers also liked (20)

Similar to Track code quality with SonarQube (20)

Recently uploaded (20)

Track code quality with SonarQube