thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

SonarQube

A code quality and security platform (from SonarSource) that performs static analysis for bugs, code smells, vulnerabilities and security hotspots.

Definition

SonarQube supports dozens of languages, integrates with CI/CD and pull requests and enforces quality gates. It distinguishes vulnerabilities (confirmed issues) from security hotspots (code needing manual review).

Example

A quality gate fails a pull request that introduces a new vulnerability or drops test coverage below 80%.

Exam tip

Associate SonarQube with quality gates in CI pipelines.

Related terms