SonarQube Connector brings your source code quality model from SonarQube to your Bitbucket repository:
- Reliability: focused on bugs, an issue that represents something wrong in the code. If this has not broken yet, it will, and probably at the worst possible moment. This needs to be fixed. Yesterday.
- Security: focused on vulnerabilities, a security-related issue which represents a potential backdoor for attackers.
- Maintainability: focused on code smells, a maintainability-related issue in the code. Leaving it as-is means that at best maintainers will have a harder time than they should making changes to the code. At worst, they'll be so confused by the state of the code that they'll introduce additional errors as they make changes.
- Security Review: focused on Security Hotspot. A Security Hotspot A Security Hotspot highlights a security-sensitive piece of code that the developer needs to review. Upon review, you'll either find there is no threat or you need to apply a fix to secure the code.
And also the most important code quality metrics:
- Code Coverage
- Duplications Density
- Lines of Code (ncloc)
