/tags/static-code-analysis/Recent content in Static Code Analysis on Software FactoryHugoen/use/tools/sonarqube/Mon, 01 Jan 0001 00:00:00 +0000/use/tools/sonarqube/<div style="display: flex; align-items: flex-start; gap: 1.5rem; margin-bottom: 1rem; max-width: 80%;"> <img src="/logo/sonarqube.svg" alt="SonarQube" width="150" style="flex-shrink: 0;"> <div><p>SonarQube is a <strong>Static Code Analysis</strong> tool designed to help you catch and fix code issues early in the Software Development Life Cycle (SDLC), before they become major production problems.</p> <p>Static code analysis (also known as code scanning or linting) is the automated process of examining source code without executing it.</p> <p>This process helps in identifying potential issues and vulnerabilities in the codebase, such as <strong>unparsable syntax</strong>, <strong>unreachable and unused code</strong>, <strong>duplicate code</strong>, potentially <strong>vulnerable code</strong>, <strong>leaked secrets</strong>, and <strong>violations of coding standards and conventions</strong>.</p>