--- title: "#sonarqube articles | Hashnode" description: "Explore 353 articles tagged #sonarqube on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/sonarqube" --- Tag # #sonarqube 353 posts · 131 followers [Mamatha Bandi](https://hashnode.com/@Mamatha2004) · [Oct 9](https://hashnode.com/posts/jenkins-installation-and-understanding-ci-cd/6ac88922a0b8d3ccc2de6955) ### [Jenkins Installation and Understanding CI/CD](https://mamathab.hashnode.dev/jenkins-installation-and-understanding-ci-cd?utm_source=hashnode&utm_medium=feed) What is Jenkins? Jenkins is an open-source automation server written in Java. It is widely used to automate tasks such as building, testing, and deploying applications. Before using Jenkins, we learne 5 min read · [mamathab.hashnode.dev](https://mamathab.hashnode.dev/jenkins-installation-and-understanding-ci-cd?utm_source=hashnode&utm_medium=feed) [Mamatha Bandi](https://hashnode.com/@Mamatha2004) · [Oct 8](https://hashnode.com/posts/maven-installation-and-setup/6ac77e3623bda2a3ac3c74ae) ### [Maven Installation and Setup](https://mamathab.hashnode.dev/maven-installation-and-setup?utm_source=hashnode&utm_medium=feed) What is Maven? Maven is a build tool mainly used for Java projects. It helps us to: Build the Java project Download and manage dependencies Run tests Create the final WAR or JAR file Maven is an 5 min read · [mamathab.hashnode.dev](https://mamathab.hashnode.dev/maven-installation-and-setup?utm_source=hashnode&utm_medium=feed) [George Ezejiofor](https://hashnode.com/@georgeezejiofor) · [Sep 23](https://hashnode.com/posts/build-scan-sign-cicd-supply-chain-rke2/6ab40e8d7152d465392e25fc) ### [Tekton, Cosign, Kyverno: A Signed CI/CD Supply Chain on RKE2](https://georgeezejiofor.com/build-scan-sign-cicd-supply-chain-rke2?utm_source=hashnode&utm_medium=feed) Every gate in this pipeline has been shown refusing something 26 min read · [georgeezejiofor.com](https://georgeezejiofor.com/build-scan-sign-cicd-supply-chain-rke2?utm_source=hashnode&utm_medium=feed) [Manu Shukla](https://hashnode.com/@mr-manushukla) · [Aug 22](https://hashnode.com/posts/secrets-managers-jenkins-and-sonarqube-rotation-11-august-2026-needs-a-publicly-reachable-controller/6a899ac67011e182dc1987d1) ### [Secrets Manager's Jenkins and SonarQube rotation, 11 August 2026, needs a publicly reachable controller](https://ecorpit.hashnode.dev/secrets-managers-jenkins-and-sonarqube-rotation-11-august-2026-needs-a-publicly-reachable-controller?utm_source=hashnode&utm_medium=feed) Secrets Manager's Jenkins and SonarQube rotation, 11 August 2026, needs a publicly reachable controller Summary. On 11 August 2026 AWS extended Secrets Manager managed external secrets to two new secr 14 min read · [ecorpit.hashnode.dev](https://ecorpit.hashnode.dev/secrets-managers-jenkins-and-sonarqube-rotation-11-august-2026-needs-a-publicly-reachable-controller?utm_source=hashnode&utm_medium=feed) [SAI PRANEETH BHATTU](https://hashnode.com/@saipraneethbhattu) · [Jun 12](https://hashnode.com/posts/integrating-sonarqube-with-jenkins-for-continuous-code-quality-analysis/6a2bc329aebb82f79be6bc4b) ### [Integrating SonarQube with Jenkins for Continuous Code Quality Analysis](https://saipraneethbhattu.hashnode.dev/integrating-sonarqube-with-jenkins-for-continuous-code-quality-analysis?utm_source=hashnode&utm_medium=feed) Every CI/CD pipeline has a code quality gate. Without it, you are shipping code that might compile and deploy successfully but is full of bugs, security vulnerabilities, duplicated logic, and poor practices. SonarQube is the tool that fills this gap. It scans your source code, measures its quality, and reports back everything a team needs to know before approving a deployment. In this post, we will set up SonarQube on a dedicated EC2 instance, integrate it with Jenkins, and add a code quality analysis stage to our pipeline. 10 min read · [saipraneethbhattu.hashnode.dev](https://saipraneethbhattu.hashnode.dev/integrating-sonarqube-with-jenkins-for-continuous-code-quality-analysis?utm_source=hashnode&utm_medium=feed) [Pravin Khandke](https://hashnode.com/@pravin-khandke) · [May 4](https://hashnode.com/posts/clean-code-at-scale-how-sonar-became-our-silent-reviewer/69f7e55f76c1469ba406030b) ### [Clean Code at Scale: How Sonar Became Our Silent Reviewer](https://pravin-khandke.hashnode.dev/clean-code-at-scale-how-sonar-became-our-silent-reviewer?utm_source=hashnode&utm_medium=feed) Clean Code at Scale: Sonar as Silent Reviewer 10 min read · [pravin-khandke.hashnode.dev](https://pravin-khandke.hashnode.dev/clean-code-at-scale-how-sonar-became-our-silent-reviewer?utm_source=hashnode&utm_medium=feed) [Gopinath Karunanithi](https://hashnode.com/@gopinathtts) · [Apr 28](https://hashnode.com/posts/apply-stride-threat-modeling-and-sonarqube-analysis-for-secure-software-development/69f0bbbf10a70b3335be7131) ### [How to Apply STRIDE Threat Modeling and SonarQube Analysis for Secure Software Development](https://freecodecamp.org/news/apply-stride-threat-modeling-and-sonarqube-analysis-for-secure-software-development?utm_source=hashnode&utm_medium=feed) Secure software requires both design-time and code-time protection. STRIDE threat modeling helps identify risks early in system design, while SonarQube enforces secure coding practices through static 27 min read · [freecodecamp.org](https://freecodecamp.org/news/apply-stride-threat-modeling-and-sonarqube-analysis-for-secure-software-development?utm_source=hashnode&utm_medium=feed) [Sarthak-code786](https://hashnode.com/@sarthak0078) · [Apr 19](https://hashnode.com/posts/from-auto-deployment-to-controlled-deployment-integrating-sonarqube-quality-gates/69e4eec3a098742608aee8fe) ### [From Auto Deployment to Controlled Deployment: Integrating SonarQube Quality Gates](https://journeyindevops.hashnode.dev/from-auto-deployment-to-controlled-deployment-integrating-sonarqube-quality-gates?utm_source=hashnode&utm_medium=feed) Integrate SonarQube quality gates into Jenkins CI/CD pipelines. Understand code analysis, pipeline pauses, and how quality checks control deployments. 3 min read · [journeyindevops.hashnode.dev](https://journeyindevops.hashnode.dev/from-auto-deployment-to-controlled-deployment-integrating-sonarqube-quality-gates?utm_source=hashnode&utm_medium=feed) [Hardik Arora](https://hashnode.com/@Hardik999) · [Mar 29](https://hashnode.com/posts/educonnect-a-deep-dive-into-cloud-native-security-k3s-orchestration/69c9811c5282e6ac9ce7b0f8) ### [🛡️Educonnect: A Deep Dive into Cloud-Native Security & K3s Orchestration](https://hardik0811arora.hashnode.dev/educonnect-a-deep-dive-into-cloud-native-security-k3s-orchestration?utm_source=hashnode&utm_medium=feed) Build a secure DevSecOps pipeline using GitHub Actions, CodeQL, SonarQube & Trivy on a lightweight K3s Kubernetes cluster. 5 min read · [hardik0811arora.hashnode.dev](https://hardik0811arora.hashnode.dev/educonnect-a-deep-dive-into-cloud-native-security-k3s-orchestration?utm_source=hashnode&utm_medium=feed) [ThankGod Chibugwum Obobo](https://hashnode.com/@actocodes) · [Mar 29](https://hashnode.com/posts/shift-left-testing/69c95af94c26fafd74168864) ### [Shift-Left Testing: How to Automate QA/QC Pipelines with SonarQube and GitHub Actions](https://actocodes.hashnode.dev/shift-left-testing?utm_source=hashnode&utm_medium=feed) Finding a bug in production costs significantly more to fix than catching it during development. This is the core argument behind shift-left testing, the practice of moving quality checks earlier in t 10 min read · [actocodes.hashnode.dev](https://actocodes.hashnode.dev/shift-left-testing?utm_source=hashnode&utm_medium=feed)