Automating CI/CD Failures with SonarQube Quality Gates
Implement SonarQube Quality Gates to automatically fail CI/CD builds when new code breaches thresholds for bugs, vulnerabilities, or coverage.
ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
Implement SonarQube Quality Gates to automatically fail CI/CD builds when new code breaches thresholds for bugs, vulnerabilities, or coverage.
Add Qodana to your CI with a single workflow file, cache results for speed, and push SARIF to GitHub Code Scanning. Learn the exact steps, pitfalls, and how to verify the output.
Decide whether Qodana full scan, baseline, or Cloud mode should fail CI on new Java/Kotlin static-analysis issues, with config examples and verification steps.
Dart's Sound Null Safety moves null errors to compile time, but the `!` and `late` escape hatches can reintroduce runtime crashes. Here is how to use them safely.
NullReferenceExceptions can cripple production releases. C#’s nullable reference types let you catch those bugs early – at compile time – by making reference types non‑nullable by default and providing static flow analysis.
Learn how GCC’s -fanalyzer static analysis pass can detect double‑free and similar memory bugs at compile time, with a concrete example, setup steps, and practical trade‑offs for CI use.
Learn how to connect your GitHub, GitLab, or Bitbucket repositories to Codeac to automate code quality, complexity, and security analysis on every pull request.
Close the gap between IDE inspections and CI by running Qodana locally via its CLI. Learn the prerequisites, qodana.yaml setup, and how to verify results.
Learn how SonarQube Quality Gates enforce pass/fail thresholds, how to configure conditions and make your CI pipeline wait for the result, plus common pitfalls.