

This applies to all code: source code, test code, Infrastructure as Code, glue code, scripts, and others. Key attributes include code that is high-quality, reliable, secure, maintainable, robust, and modular and is fit for development and production.

We define Clean Code as code that meets a certain defined standard. Writing Clean Code is essential to maintaining a healthy codebase. SonarCloud does not work with on-premises code repositories.

It achieves this by integrating into your CI pipeline or DevOps platform thus, extending your DevOps experience by importing your projects and performing automated code checks within minutes. Early detection of problems during static analysis ensures that fewer issues get through to the later stages of the process and ultimately helps to increase the overall quality of your production code.Īs a core element of our Sonar solution, SonarCloud integrates into your existing workflow and detects issues in your code to help you perform continuous code inspections of your projects. Its powerful set of language-specific analyzers uses thousands of rules to track down hard-to-find bugs and quality issues - from simple coding mistakes, and tricky bugs, to advanced issues and security vulnerabilities such as injection flaws. As a result, SonarCloud offers an additional layer of verification, different from automated testing and manual code review. Static analysis is called static because it does not rely on actually running the code. SonarCloud uses state-of-the-art techniques in static code analysis to find problems and potential problems in the code that you and your team write.
