awesome-kubernetes/v2-docs/sonarqube.md

Sonarqube

!!! info "Architectural Context" Detailed reference for Sonarqube in the context of Engineering Pipeline.

Standard Reference

• wikipedia: SonarQube [COMMUNITY-TOOL]
• Dzone: Why SonarQube [COMMUNITY-TOOL]
• Dzone: How to quickly get started with Sonar [COMMUNITY-TOOL]
• Dzone: Sonarqube scanning in 15 minutes [COMMUNITY-TOOL]
• Dzone: Quick start with sonarqube for static code analysis [COMMUNITY-TOOL]
• Dzone.com: Code Analysis Part 1 - Analyzing Code with SonarQube [COMMUNITY-TOOL]
• Dzone: SonarCloud integration with SpringBoot Maven [COMMUNITY-TOOL]
• Running SonarQube on Kubernetes [COMMUNITY-TOOL]

DevSecOps

Continuous Inspection

Static Code Analysis

Execution

• thenewstack.io: How to Analyze Code and Find Vulnerabilities with SonarQube [COMMUNITY-TOOL] — Hands-on guide to running static analyzers against real codebases using SonarQube scanners, configuring quality gates, and reviewing vulnerability alerts.

Installation

• thenewstack.io: How to Install the SonarQube Security Analysis Platform [COMMUNITY-TOOL] — Step-by-step deployment guide detailing how to host SonarQube locally or on dedicated infrastructure, including database dependencies and JVM configurations.

SonarQube

• (2026) ==Sonarqube.org== 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — The leading platform for continuous inspection of code quality, executing automatic reviews with static analysis of code to detect bugs, security vulnerabilities, and code smells across 30+ programming languages.

SonarQube Scanner

• (2026) SonarQube Scanner Overview [DOCUMENTATION] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Core index for the official SonarQube scanner integrations, providing detailed configurations for popular build tools and continuous integration platforms like Gradle, MSBuild, Maven, Jenkins, and Azure DevOps.

Continuous Integration

Jenkins Pipelines

Dockerized Scans

• itnext.io: SonarQube: running tests from Jenkins Pipeline in Docker [ENTERPRISE-STABLE] — Deep technical guide showing how to architect a Jenkins pipeline that runs unit tests and executes SonarQube code coverage scans natively inside transient Docker containers.

Kubernetes Native

Google Cloud Platform

Blueprints

• click-to-deploy/sonarqube ⭐ 771 [COMMUNITY-TOOL] — A Google Cloud Platform blueprint repository designed to ease the deployment of SonarQube on Google Kubernetes Engine (GKE) via highly standardized manifest suites.

Helm Deployments

SonarQube (1)

• (2024) hub.helm.sh/charts/oteemo/sonarqube 🌟🌟🌟 [COMMUNITY-TOOL] — Helm chart repository listing for deploying SonarQube on Kubernetes, complete with configurations for persistence, ingress routing, and integrated database deployments.

Local Environments

Video Tutorials

• youtube: Installation of Sonarqube on Kubernetes/Minikube [COMMUNITY-TOOL] — Video guide demonstrating how to spin up a SonarQube server inside Minikube, configured for localized developer playground environments.

---

💡 Explore Related: Registries | Jenkins | CI/CD