SonarQube - Code Quality & Security
Analyse the quality and vulnerabilities of your code with SonarQube. Quality Gates, coverage, OWASP and integration into your CI/CD pipelines.
- Install and administer SonarQube
- Understand quality metrics (bugs, smells, coverage)
- Configure Quality Gates suited to your team
- Integrate SonarQube into Jenkins, GitLab CI and GitHub Actions
- Detect security vulnerabilities in code before they reach production
- Automatically block a merge if the code does not meet quality thresholds
- Measure and improve test coverage on an existing codebase
- Build a clean-code culture shared by the whole team
The programme
Day 1 - Analysis & CI integration
- SonarQube architecture (Server, Scanner, plugins)
- Key metrics and Sonar Way
- Quality Gates and quality profiles
- Jenkins / GitLab CI / GitHub Actions integration
- OWASP Top 10 vulnerability analysis
- Coverage and unit tests
- Workshop: analyse and fix a real codebase
Who is this for
Developers, tech leads and DevOps engineers concerned about code quality.
Prerequisites
- Practice in a programming language (Java, Python, JavaScript or other)
- CI/CD basics
Format
Frequently asked questions
Is the course eligible for OPCO or CPF funding?
No. Sphinx-Digital is not Qualiopi certified and is not listed on Mon Compte Formation. The course is invoiced directly to the company or the individual, with no external funding.
What is the difference between the public (inter-company) and in-company formats?
In the public format, you join a session with participants from other companies (3 to 10 people). In-company, we run a session dedicated to your team, on your site or remotely, with content adapted to your context. In-company pricing is available on quote.
Remote or on-site: what are the practical differences?
Content and labs are identical. Remotely, labs run on cloud environments accessible from a browser, with nothing to install. On-site, you provide the workstations; labs can run in the cloud or locally depending on your infrastructure.
How many participants per session?
3 to 10 participants at most. This deliberate limit ensures everyone can ask questions, adapt the exercises to their context and get a detailed answer.
What is the evening format?
The evening format spreads the same course over 4 sessions of 3.5 hours (14 hours in total), in the evening from 6:30 pm to 10:00 pm. Same content, same labs, same price, so you can build skills without taking days off.
How does payment work?
Courses are invoiced on quote, by bank transfer. Payment in instalments is possible. We issue a training agreement for companies that want their training department to cover the cost.
Interested in this course?
Join the next session or request a tailored in-company session.
What participants say
Not sure this course fits your context?
A 20-minute call to take stock before you enrol, with no sales pitch.