Test frameworks and commercial choices are increasing. In the past few years, there has been a lot of improvement in test automation. One example is that static code review is being used more thoroughly for security checks. SonarQube is an all-encompassing reporter of project quality and new frameworks are emerging to improve on the old. Here are a few implications:
- SonarQube: This measures the project quality. Its community is active. SonarQube will evolve faster than the full range of Jenkins quality metrics plugins. Consider using Jenkins plugins for early warnings of negative quality changes and SonarQube for in-depth reporting.
- You can find the SonarQube Jenkins plugin at: https://wiki.jenkins.io/display/JENKINS/SonarQube+plugin:
- Static code review tools: These are improving. FindBugs has moved comment-making into...
