SonarQube is an open-source code quality and security tool that analyzes source code during development.
It detects bugs, security vulnerabilities, duplicated code, and other issues.

Its goal is to help teams produce higher-quality code while simplifying the development process.
By using static analysis, SonarQube enables teams especially in Agile and DevOps environments to identify and fix issues early in the development lifecycle before deployment.