SonarQube
SonarQube is a static code analysis platform that continuously scans source code for bugs, vulnerabilities, and code smells across dozens of languages. It surfaces quality-gate pass/fail results inside CI pipelines and pull requests so regressions can be blocked before merge.
What gets deployed with it
- PostgreSQL HA Cluster — required SonarQube requires an external relational database for production. The embedded H2 database is not supported for production.
Baseline topologies
| Topology | Minimum nodes | Roles |
|---|---|---|
| single-node | 1 | sonarqube |
What drives the cost
- Number of projects
- Total number of projects analyzed. Drives Elasticsearch index size and JVM working set.
- Total lines of code (millions)
- Aggregate lines of code across all projects. Primary driver for JVM heap and Elasticsearch memory.
Where it runs
bare_metal, dedicated, cloud_vm
Size SonarQube and get a cost estimate