Company
Date Published
Author
G. Ann Campbell
Word count
460
Language
English
Hacker News points
None

Summary

In SonarQube 5.5 we adopted an evolved quality model, the SonarQube Quality Model, that takes the best from SQALE and adds what was missing. The SonarQube Quality Model aims to highlight project risks while retaining technical debt. SQALE is primarily about maintainability, but it lacks a concept of risk, which can lead to ignoring new issues in favor of time-tested ones. The SonarQube team re-evaluated what's important and created a model that prioritizes bugs and security vulnerabilities alongside maintainability issues, making it easier to identify serious problems and provide actionable insights. The updated quality model features three simple categories: code smells, reliability issues, and security issues, each with its own risk-based rating, allowing for easy prioritization and enforcement through the Quality Gate.