发布于 2016-02-06 00:59:52 | 149 次阅读 | 评论: 0 | 来源: 网友投递

这里有新鲜出炉的精品教程，程序狗速度看过来！

SonarQube代码质量管理平台

Sonar是一个用于代码质量管理的开源平台，用于管理源代码的质量，可以从七个维度检测代码质量通过插件形式，可以支持包括java,C#,C/C++,PL/SQL,Cobol,JavaScrip,Groovy等等二十几种编程语言的代码质量管理与检测

---

SonarQube Java 3.10 发布，这是 Sonar 用来分析 Java 项目代码的插件。该版本改进了 Symbolic Execution 引擎

包含 17 条新的规则：

• “action” mappings should not have too many “forward” entries (brain-overload, struts)

• “catch” clauses should do more than rethrow (clumsy, unused)

• “InterruptedException” should not be ignored (bug, cwe, multi-threading)

• “private” methods called only by inner classes should be moved to those classes (confusing)

• “SingleConnectionFactory” instances should be set to “reconnectOnException” (bug, spring)

• Default EJB interceptors should be declared in “ejb-jar.xml” (bug)

• Deprecated “${pom}” properties should not be used (maven, obsolete)

• Disallowed dependencies should not be used (maven)

• EJB interceptor exclusions should be declared as annotations (pitfall)

• Functions should not be defined with a variable number of arguments (cert, misra, pitfall)

• Inappropriate regular expressions should not be used (bug)

• Method overrides should not change contracts (suspicious)

• Methods should not return constants (confusing)

• Security constraints should be defined (cwe, jee, owasp-a7, security, websphere)

• Struts validation forms should have unique names (bug, cwe, struts)

• Try-with-resources should be used (pitfall)

• Web applications should use validation filters (injection, owasp-a1, security)

完整介绍请看发行说明。

历史版本 :
SonarQube GitHub 1.4.2 发布
SonarPython 1.8 发布，Sonar 的 Python 检查扩展
SonarQube VSTS/TFS 扩展 2.1 发布
SonarQube Scanner 2.9 发布，代码质量管理平台
SonarQube 5.6.6 发布，代码质量管理平台
SonarQube PL/I 1.5 发布
SonarPHP 2.9.2 发布，Sonar 的 PHP 检查扩展
SonarPython 1.7 发布，Sonar 的 Python 检查扩展
SonarQube Java 4.2.1 发布，Java 代码质量分析
SonarQube Scanner for Gradle 2.2 发布
SonarQube Developer Cockpit 1.14 发布
SonarQube JavaScript 2.17 发布