🔬

SonarQube Learning Roadmap

Static code analysis and code quality gates integrated into CI/CD.

Estimated time:2–3 weeks

1🌱

Phase 1 — Fundamentals

Projects & analysis basics

Code smells, bugs, vulnerabilities distinction

Scanner CLI / build-tool plugins

Dashboard metrics overview

2🚦

Quality gates & conditions

Quality profiles (rule sets per language)

New code vs overall code thresholds

Failing builds on gate failure

3🔄

Pull request decoration

Branch analysis

Pipeline integration (Jenkins/GitHub Actions)

SonarLint for local pre-commit feedback

4📈

important

Custom rules & rule tuning

Security hotspots review workflow

Multi-project portfolio views

Reducing false-positive fatigue

Begin with interview questions to assess your current level.