You're reading from Learning DevOps A comprehensive guide to accelerating DevOps culture adoption with Terraform, Azure DevOps, Kubernetes, and Jenkins

Product type Paperback

Published in Mar 2022

Publisher Packt

ISBN-13 9781801818964

Length 560 pages

Edition 2nd Edition

Tools

Azure

Concepts

DevOps

Author (1):

Mikael Krief

View More author details

Table of Contents (25) Chapters

Preface

1. Section 1: DevOps and Infrastructure as Code

2. Chapter 1: The DevOps Culture and Infrastructure as Code Practices FREE CHAPTER

3. Chapter 2: Provisioning Cloud Infrastructure with Terraform

4. Chapter 3: Using Ansible for Configuring IaaS Infrastructure

5. Chapter 4: Optimizing Infrastructure Deployment with Packer

6. Chapter 5: Authoring the Development Environment with Vagrant

7. Section 2: DevOps CI/CD Pipeline

8. Chapter 6: Managing Your Source Code with Git

9. Chapter 7: Continuous Integration and Continuous Delivery

10. Chapter 8: Deploying Infrastructure as Code with CI/CD Pipelines

11. Section 3: Containerized Microservices with Docker and Kubernetes

12. Chapter 9: Containerizing Your Application with Docker

13. Chapter 10: Managing Containers Effectively with Kubernetes

14. Section 4: Testing Your Application

15. Chapter 11: Testing APIs with Postman

16. Chapter 12: Static Code Analysis with SonarQube

17. Chapter 13: Security and Performance Tests

18. Section 5: Taking DevOps Further/More on DevOps

19. Chapter 14: Security in the DevOps Process with DevSecOps

20. Chapter 15: Reducing Deployment Downtime

21. Chapter 16: DevOps for Open Source Projects

22. Chapter 17: DevOps Best Practices

23. Assessments

24. Other Books You May Enjoy

Exploring SonarQube

SonarQube is an open source tool from SonarSource (https://www.sonarsource.com/) that's written in Java. It allows us to perform static code analysis to verify the quality and security of an application's code.

SonarQube is designed for developer teams and provides them with a dashboard and reports that are customizable so that they can present the quality of the code in their applications.

It allows for the analysis of static code in a multitude of languages (over 25), such as PHP: Hypertext Preprocessor (PHP), Java, .NET, JavaScript, Python, and so on. A complete list can be found at https://www.sonarqube.org/features/multi-languages/.

In addition, apart from code analysis with security issues, code smell, and code duplication, SonarQube also provides code coverage for unit tests. For more details about these issue concepts, read the documentation here: https://docs.sonarqube.org/latest/user-guide/concepts/.

Finally, SonarQube integrates...