Chapter 12: Static Code Analysis with SonarQube

In the previous chapter, we looked at how to test the functionality of an application programming interface (API) with Postman, a free tool for testing APIs, and the integration and automation of these tests in a continuous integration/continuous deployment (CI/CD) pipeline using Newman.

Testing the functionality of an API or application is a good practice when we wish to improve the quality of applications. In a company, the quality of an application must be considered by all its members because an application that brings business value to users increases the company's profits.

However, we often neglect to test the quality of an application's code because we think that what matters is how the application works and not how it is coded. This way of thinking is a big mistake because poorly written code can contain security vulnerabilities and can also cause performance problems. Moreover, the quality of the code has an impact...