From the course: Static Application Security Testing

Unlock the full course today

Join today to access over 24,400 courses taught by industry experts.

Demo: SonarQube

Demo: SonarQube

- [Instructor] SonarQube is another code quality tool that includes security testing and analysis. It supports over 30 different programming languages as well as multiple build systems and continuous integration systems. You can learn more about SonarQube at sonarqube.com. SonarQube takes a governance based approach to managing your application security portfolio with a focus that goes above and beyond traditional security. SonarQube also scores applications on things like releasability, reliability, and maintainability. SonarQube maintains four distinct additions of their solution. The Community Edition is free. While the commercial editions Developer, Enterprise and Data Center are all scoped and priced based on your language support and high availability requirements. The Community Edition price tag of free is a lot more palatable than the hefty price tag tied to the Data Center edition. So I recommend you start with…

Contents