SonarQube
temaki.sonarqube
A Docker Compose file for SonarQube alone, generated from the catalog and checked by the safety inspector. No account needed.
Static analysis server that inspects source code for bugs, security issues, duplication and maintainability problems across many languages, gating pull requests on configurable quality thresholds.
SonarQube receives analysis results from a scanner run in the build, aggregates them per project and presents issues by type and severity alongside coverage, duplication and complexity measures. Its quality gate applies thresholds to new code specifically rather than to the whole codebase, which makes an existing project's accumulated debt visible without blocking every change made to it. Rules are grouped into profiles that can be tuned per language and project, and results integrate into pull requests so failures appear where the change is reviewed. Analysis is language-dependent and the community build covers a smaller set of languages and rules than the paid editions.
You know it worked when
- The server reaches an operational state and the interface signs in.
- The default administrator password has been changed.
- A scanner run from a project publishes results that appear as a project in the interface.
- Issues are listed with severity and file location.
- A quality gate returns a pass or fail verdict for that analysis.
Known sharp edges
- The embedded search engine requires a raised virtual memory map limit on the host kernel, and without it the server fails at startup with an error that names the setting but not the fix.
- The bundled evaluation database is explicitly not for production use, and an external PostgreSQL must be configured before any results are worth keeping.
- Code coverage is imported from the build's own reports rather than measured by the scanner, so coverage shows as zero until that import is wired up.
- Language and rule coverage differs between the community build and the paid editions, so documented rules may simply not exist in this deployment.