GeezerVison

SonarQube Community Build is an industry-standard on-premises automated code review and static analysis tool designed to detect coding issues in Supported languages. By integrating directly with your Overview or on one of our supported DevOps platforms, your code is checked against an extensive set of rules that cover many attributes of code, such as maintainability, reliability, and security issues on each merge/pull request.

As a core element of the SonarQube platform, SonarQube Community Build completes the analysis loop to help you deliver code that meets high-quality standards.

Please see the Try out SonarQube Community Build page to learn how to get started. For a Software-as-a-Service (SaaS) cloud-based tool, see SonarQube Cloud or upgrade to SonarQube Server.

SonarQube sets high standards for all code — ensuring software is secure, reliable, and maintainable. This applies across all code types: source code, test code, infrastructure as code, glue code, scripts, and AI-generated code.

All new code, whether written by a developer or generated by an AI agent, should meet the same quality and security standards. SonarQube achieves this by providing automated code verification that surfaces bugs, vulnerabilities, and maintainability issues in real time, before code is merged or released. This helps teams maintain consistent standards across the entire codebase — and is the foundation for high-performance software engineering.

SonarQube Community Build comes with three built-in quality profiles for each supported language. See Built-in quality profiles. Sonar way core is the default, activating a set of rules applicable to most projects and serving as a starting point for implementing good practices in your organization.

SonarQube is designed to help you achieve a state of high quality, verified code at every stage of development. By linking SonarQube for IDE ( VS Code, IntelliJ, Visual Studio, Eclipse) with SonarQube Cloud or SonarQube Community Build, automated code analysis runs continuously across the development lifecycle. We call this the SonarQube platform. Your project settings, new code definitions, and quality profiles managed in SonarQube are applied locally to an analysis in the IDE.

The SonarQube platform embodies a clear methodology: Guide your AI tools and developers with the right standards, Verify every line of code automatically, and Solve issues at the source before they compound. Focusing on quality and verification at the point of creation ensures your codebase improves incrementally over time.

Connected Mode joins SonarQube Community Build with SonarQube for IDE to deliver the full SonarQube platform. While in Connected Mode, SonarQube Community Build sends notifications to SonarQube for IDE when a quality gate changes or a new issue is assigned to the user. Smart notifications can be enabled or disabled from the SonarQube for IDE interface while creating or editing the connection settings. Additionally, SonarQube for IDE helps engineers focus on writing high quality code by using the new code definition from the server. Be sure to check out all of the Connected mode.

Now that you’ve heard about how SonarQube can help you verify and ship secure, reliable code, you are ready to try out SonarQube for yourself. You can run a local non-production instance of SonarQube Community Build and the initial project analysis. Installing a local instance gets you up and running quickly, so you can experience SonarQube Community Build firsthand. Then, when you’re ready to set up SonarQube Community Build in production, you’ll need to Introduction before configuring your first code analysis.

The Project analysis setup section explains how to connect your scanner to your CI pipeline and provides instructions for analyzing your project’s branches and pull requests.

Here is a page with everything you need to Try out SonarQube Community Build.

Check out the entire suite of Sonar products: SonarQube Community Build, SonarQube Server, SonarQube Cloud, and SonarQube for IDE for static code analysis.

Then, have a look at how to fix issues detected by SonarQube for IDE in

If you need help, visit our online community to search for answers and reach out with questions!