Pre-Requisitos

• É necessário conhecimento básico das linguagens de programação C, C++ e/ou Java .

Informações Gerais

Este Permite automatizar a análise de código fonte escrito em C/C++ e/ou Java utilizando os plugins sonar-cxx e/ou sonar-java para adicionar relatórios de análises realizadas com outras ferramentas de código aberto como: cppCheck, Vera++, Checkstyle, SpotBugs e PMD. Por fim, você pode ver a integração com ferramentas de Integração Contínua como Jenkins ou GitLab.

Materiais

Conteúdo Programatico

Introduction to Source Code Analysis and SonarQube

1. Why Source Code Analysis (SCA)
2. Overview of Coding Style Standards
3. Analysis Tools: C/C++ and Java
4. Introduction to SonarQube
5. Lab: Running static analysis and visualizing the results in SonarQube

SonarQube for C/C++ Projects

1. Overview of the sonar-cxx plugin
2. Integration with external tools: cppcheck and Vera++
3. SonarQube configurations: rules, quality profiles & quality gates
4. Lab: Running code analysis and interpreting the results in SonarQube

SonarQube for Java Projects

1. Overview of the sonar-java plugin
2. Integration with external tools: checkstyle, SpotBugs and PMD
3. SonarQube configurations: rules, quality profiles & quality gates
4. Lab: Running code analysis and interpreting the results in SonarQube

SonarQube Server Configuration

1. SonarQube system architecture
2. SonarQube servier configuration
3. SonarQube maintenance
4. Lab: SonarQube configuration, deployment and integration with external databases

Developing Custom Style Rules

1. Overview of the process to develop custom rules using sonar-cxx and sonar-java
2. Deployment of the custom rules to the server
3. Lab: Developing a custom rule

SonarQube Integration with Jenkins

1. SonarScanner plugin for Jenkins
2. SonarQube continuous analysis with Jenkins and Git
3. Generating reports using SonarQube Web API
4. Lab: Jenkins configuration with SonarQube

SonarQube Integration with GitLab

1. GitLab CI/CD Pipelines Architecture
2. GitLab and SonarQube Integration
3. Lab: Developing a GitLab CI/CD pipeline using SonarQube