I like the ease with which you can view the different warnings in code blocks. The explanations are also pretty easy to understand.
In practice, the scans don't really work out as well as you would hope. Nine times out of ten, the "violations" that it finds are either wrong or flawed in some way.
SonarCloud is easy to use and integrates seamlessly into existing projects and nearly all CI/CD pipelines. We integrated almost all of our codebases and used it along with the Sonar cloud extension, which made it more powerful.
It's good for basic code scanning by there are other tools in the market which are coming with features like IaC scan and inline scan with the help of docker agent. It's a bit slow as compared to other tools in the market.
I like the ease with which you can view the different warnings in code blocks. The explanations are also pretty easy to understand.
SonarCloud is easy to use and integrates seamlessly into existing projects and nearly all CI/CD pipelines. We integrated almost all of our codebases and used it along with the Sonar cloud extension, which made it more powerful.
In practice, the scans don't really work out as well as you would hope. Nine times out of ten, the "violations" that it finds are either wrong or flawed in some way.
It's good for basic code scanning by there are other tools in the market which are coming with features like IaC scan and inline scan with the help of docker agent. It's a bit slow as compared to other tools in the market.