SonarQube is a continuous inspection platform for automated static code analysis, quality gates, and security findings across many programming languages in CI/CD workflows.
10.9k stars2.2k forksLGPL-3.0last commit Actively maintained
2 self-hosted SonarCloud alternatives
SonarCloud is a cloud-based code quality and security analysis service that inspects branches and pull requests to detect bugs, vulnerabilities, and code smells. It integrates with CI/CD pipelines and provides quality gates, metrics, and reports for code health.
Alternatives to SonarCloud
#2
Secrover generates human-readable HTML security audit reports for repositories and domains. Scans dependencies, code, and domains; supports scheduling and remote exports.
252 stars3 forksGPL-3.0last commit Actively maintained
What replacing SonarCloud actually involves
Every option on this page is open source and free to run on your own hardware, so you own the data and there is no subscription to cancel. 2 of 2 shipped a commit in the last six months. Licences in this list: LGPL-3.0, GPL-3.0. In exchange you take on hosting, backups and updates yourself.
Browse everything in Code Quality & Static Analysis.
