I like the ease with which you can view the different warnings in code blocks. The explanations are also pretty easy to understand.
In practice, the scans don't really work out as well as you would hope. Nine times out of ten, the "violations" that it finds are either wrong or flawed in some way.
SonarCloud is easy to use and integrates seamlessly into existing projects and nearly all CI/CD pipelines. We integrated almost all of our codebases and used it along with the Sonar cloud extension, which made it more powerful.
C'est bon pour l'analyse de code de base, mais il existe d'autres outils sur le marché qui viennent avec des fonctionnalités comme l'analyse IaC et l'analyse en ligne avec l'aide d'un agent Docker. C'est un peu lent par rapport aux autres outils sur le marché.
I like the ease with which you can view the different warnings in code blocks. The explanations are also pretty easy to understand.
SonarCloud is easy to use and integrates seamlessly into existing projects and nearly all CI/CD pipelines. We integrated almost all of our codebases and used it along with the Sonar cloud extension, which made it more powerful.
In practice, the scans don't really work out as well as you would hope. Nine times out of ten, the "violations" that it finds are either wrong or flawed in some way.
C'est bon pour l'analyse de code de base, mais il existe d'autres outils sur le marché qui viennent avec des fonctionnalités comme l'analyse IaC et l'analyse en ligne avec l'aide d'un agent Docker. C'est un peu lent par rapport aux autres outils sur le marché.