tech talk #5 : code analysis sonarqube - lương trọng nghĩa

11
TechTalk #5: Nghia Luong

Upload: innovatube

Post on 14-Jan-2017

119 views

Category:

Mobile


0 download

TRANSCRIPT

Page 1: Tech Talk #5 : Code Analysis SonarQube - Lương Trọng Nghĩa

TechTalk #5:

Nghia Luong

Page 2: Tech Talk #5 : Code Analysis SonarQube - Lương Trọng Nghĩa

Outline1. What is Sonar? (demo)

2. Features

3. Covering 7 Axes of Code Quality

4. Architecture

5. Community and Ecosystem

6. Q&A

Page 3: Tech Talk #5 : Code Analysis SonarQube - Lương Trọng Nghĩa

1. What is Sonar?● Is a software quality management platform → Java.

● Enabling developers to access and track code analysis data ranging○ styling errors

○ potential bugs

○ code defects

○ code duplications

○ lack of test coverage

○ excess complexity

● Support more than 20 languages.

Page 4: Tech Talk #5 : Code Analysis SonarQube - Lương Trọng Nghĩa

2. Features

● Overview of all projects (demo)

● Coding rules:

○ 600+ rules are incorporated, can be fully

parameterized.

○ implement your own.

● Standard software metrics: Lines of code, Documented

API, Cyclomatic complexity, Test coverage, Duplicated

code.

Page 5: Tech Talk #5 : Code Analysis SonarQube - Lương Trọng Nghĩa

2. Features● Drill down to source code● Time Machine (Technical Debt, Code

Smell … -> SQALE), Motion Chart.

Motion Chart

Technical Debt

Page 6: Tech Talk #5 : Code Analysis SonarQube - Lương Trọng Nghĩa

2. Features● Security measures● Extensible plugin system

○ Additional languages.○ Additional metrics: Useless code,

Build stability ...○ Visualization/Reporting:

■ PDF Report.■ Timeline: Google Timeline

Chart.○ Integration:

■ Jenkins and Bamboo.○ IDE: Eclipse

Page 7: Tech Talk #5 : Code Analysis SonarQube - Lương Trọng Nghĩa

3. Covering 7 Axes of Code QualityAka Developers' Seven Deadly Sins

Page 8: Tech Talk #5 : Code Analysis SonarQube - Lương Trọng Nghĩa

4. Architecture

Sonar Architecture

Page 9: Tech Talk #5 : Code Analysis SonarQube - Lương Trọng Nghĩa

5. Architecture

Sonar with CI Architecture

Page 10: Tech Talk #5 : Code Analysis SonarQube - Lương Trọng Nghĩa

6. Community and Ecosytem● Issues: http://jira.codehaus.org/browse/SONAR

● Open Source: https://github.com/SonarSource/sonarqube

● Contribute: http://www.sonarqube.org/development/

Page 11: Tech Talk #5 : Code Analysis SonarQube - Lương Trọng Nghĩa

Q&A