Sonar

Transcript

1. How to maintain quality code with Sonarqube September 25, 2015 Victor Hidalgo Lorenzo @vhlorenzo
2. What’s Sonarqube —  Is an open platform to manage code quality —  Cover more than 20 languages (Java, C#, PHP , JS, CSS) —  Highly customizable
3. Initial configuration —  Prerequisites —  Java JRE —  DBMS (Mysql, …) —  Download Sonarqube —  Modify sonar.properties to know about your DB —  Start Sonar server —  Add sonar.properties to your project and run SonarRunner to perform the static analysis
4. Ideal Configuration Reviewers Gerrit Git push Gerrit Git
6. A few descriptions —  Technicla debt: Can be thought of as work that needs to be done before a particular job can be considered complete or proper. (in general the lower the better) —  Cyclomatic Complexity: It is a quantitative measure of the number of linearly independent paths through a program’s source code (the lower the better too) —  Quality profiles: This are a set of rules with which you want to analyze your code. (can be chainable) —  Rules: Conditions that trigger an issue. e.g. “BigDecimal(double)” should not be used. —  SQALE: provides time estimation at the rule level
7. Issue solving —  The analyzer will generate different severity issues that you can filter at will
8. Issue solving —  It will provide solutions to your issue
9. Issue solving
10. Android Use Case —  Demo
11. Useful links —  http://www.sonarqube.org/ —  https://github.com/SonarSource/sonar-examples —  http://nemo.sonarqube.org/ —  https://medium.com/@vhlorenzo/elevating-your- flavoured-android-build-37e5d62a03c3