🏭 UDS SonarQube Package

This package is designed for use as part of a UDS Software Factory bundle deployed on UDS Core.

SonarQube is an open-source platform that continuously inspects code quality through static analysis, detecting bugs, code smells, and security vulnerabilities across 29 programming languages. It provides detailed reports on code duplication, coding standards, unit tests, code coverage, code complexity, and more.

Prerequisites

SonarQube needs connection to a PostgreSQL instance either in cluster or external. You can learn more about configuring this (and other options) in the configuration documentation.

Releases

The released packages can be found in ghcr.

UDS Tasks (for local dev and CI)

*For local dev, this requires you install uds-cli

✅ Tip: To get a list of tasks to run you can use uds run --list!

Contributing

Please see the CONTRIBUTING.md

Development

When developing this package it is ideal to utilize the json schemas for UDS Bundles, Zarf Packages and Maru Tasks. This involves configuring your IDE to provide schema validation for the respective files used by each application. For guidance on how to set up this schema validation, please refer to the guide in uds-common.