Automating CI/CD Failures with SonarQube Quality Gates
Implement SonarQube Quality Gates to automatically fail CI/CD builds when new code breaches thresholds for bugs, vulnerabilities, or coverage.
Loading…
ReadMeFeed / Community knowledge
#static-analysis
Real questions. Useful conversations. Find the people who know your stack.
sonarqubeRun Qodana in GitHub Actions: From Workflow to Code Scanning
Learn how to integrate Qodana into GitHub Actions, output SARIF, and view results in Code Scanning. Includes a minimal workflow, a sample .qodana.yml, and tips for avoiding common pitfalls.
qodanaFreeze Legacy Debt with Qodana Baselines and Quality Gates
Use Qodana baselines to freeze existing technical debt and gate CI on new issues only, enabling incremental quality improvement without blocking merges on legacy violations.
Integrating Qodana Static Analysis into a GitHub Actions Pipeline
Add Qodana to your CI with a single workflow file, cache results for speed, and push SARIF to GitHub Code Scanning. Learn the exact steps, pitfalls, and how to verify the output.
Enforce SonarQube Quality Gates in CI to Block Merges on New-Code Issues
Configure SonarScanner to wait for the Quality Gate and fail your pipeline when new-code issues violate the gate, then verify with a deliberate violation.
Qodana CI quality gate: full scan, baseline, or Cloud mode
Decide whether Qodana full scan, baseline, or Cloud mode should fail CI on new Java/Kotlin static-analysis issues, with config examples and verification steps.
Diagnosing False‑Positive Hardcoded Secret Warnings in Codeac for Java Test Code
Guide to tell when Codeac’s hardcoded‑secret warning is a false positive in Java test code and how to safely suppress or fix it.
javaWhy Dart's Sound Null Safety Still Lets You Crash: A Practical Look at `late` and `!`
Dart's Sound Null Safety moves null errors to compile time, but the `!` and `late` escape hatches can reintroduce runtime crashes. Here is how to use them safely.
Nullable Reference Types: Turning NullReferenceExceptions into Compile‑Time Warnings
NullReferenceExceptions can cripple production releases. C#’s nullable reference types let you catch those bugs early – at compile time – by making reference types non‑nullable by default and providing static flow analysis.
csharp
dotnet