Software qualities

High quality code contributes to software that is secure, reliable, and maintainable. SonarQube's software qualities help asses the overall health of your code.

High quality code contributes to software that is secure, reliable, and maintainable. These three aspects - security, reliability, and maintainability - are called software qualities in SonarQube and they contribute to the long-term value of your software.

Security

Security is the protection of your software from unauthorized access, use, or destruction.

Reliability

Reliability is a measure of how your software is capable of maintaining its level of performance under stated conditions for a stated period of time.

Maintainability

Maintainability refers to the ease with which you can repair, improve and understand software code.

Severity at the software quality level

Severity	Definition
Blocker	An issue that has a significant probability of severe unintended consequences on the application that should be fixed immediately. This includes bugs leading to production crashes and security flaws allowing attackers to extract sensitive data or execute malicious code.
High	An issue with a high impact on the application that should be fixed as soon as possible.
Medium	An issue with a medium impact.
Low	An issue with a low impact.
Info	There is no expected impact on the application. For informational purposes only.

Code analysis

The Sonar automated code review aims to identify any issue in your code. Each code attribute is evaluated, for a given language, based on a series of rules.

• Each rule is associated with one or more software qualities (security, reliability, or maintainability).

• Each associated software quality is assigned a severity (blocker, high, medium, low, or info). This severity determines how much that software quality is impacted when the rule is broken.

When a rule is broken, an issue is raised. The issue affects one or more software qualities with varying severity as inherited from the rule.

Related pages

• Rules

• Introduction to managing your code issues