WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2022 • Jun 15, 2022

Automated Code Quality Checks with Custom SonarQube Rules

Daniel Strmečki , Martin Gluhak

Stop relying on passive documentation to enforce enterprise code quality. Convert your internal guidelines into custom SonarQube plugins to block non-compliant pull requests from ever merging.

Pause
Mute Enter Fullscreen
#1 about 3 min

Setting the context for code quality and custom rules

An overview of utilizing automated code checks to differentiate products and attract developer talent.

#2 about 4 min

Reasons for establishing code standardization and routine checks

Standardization builds customer trust, prevents repeated errors across projects, and simplifies new joiner onboarding.

#3 about 3 min

Establishing a company-wide approach to software quality assurance

Quality becomes the entire team's responsibility when testing is heavily automated and integrated into continuous development.

#4 about 3 min

Test automation strategy and following the testing pyramid

Most automated testing is handled at the unit level, preserving manual testing for edge cases and exploratory scenarios.

#5 about 6 min

Documenting and sharing standard software coding guidelines centrally

Relying strictly on basic static analysis is insufficient without aligned developer habits and detailed organizational documentation.

#6 about 1 min

Enforcing quality standards strictly with pull request decoration

Blocking a pull request merge upon a failed branch analysis ensures developers comply with centralized code metrics.

#7 about 2 min

Validating Java application architecture design with automated tests

The ArchUnit library natively uncovers cyclic dependencies and package naming violations within a standard test suite.

#8 about 2 min

Translating custom guidelines into automated static analysis checks

Automating organizational rules into specific SonarQube checks captures framework quirks that out-of-the-box analysis natively ignores.

#9 about 4 min

Creating a boilerplate project for custom rule development

The open-source Sonar Java plugin repository provides a straightforward maven template for bootstrapping customized static analysis rules.

#10 about 5 min

Writing test-driven unit tests for custom rule validation

Analyzing mocked non-compliant code snippets confirms whether a custom rule successfully catches targeted programming violations.

#11 about 6 min

Implementing syntax tree visitor logic for code rules

A custom visitor method inspects a method's return type token to detect and flag restricted class usages.

#12 about 4 min

Adding metadata and documentation to new custom rules

Providing JSON and HTML resources displays rule severity, expected compliance times, and alternative solutions natively within SonarQube.

#13 about 4 min

Building and installing the compiled custom rule extension

A standard maven build generates a jar executable that smoothly activates when copied directly into the SonarQube extensions directory.

#14 about 4 min

Synchronizing local developer tools with centralized custom rules

Linking the SonarLint IDE plugin to a customized SonarQube instance automatically distributes organizational guidelines to all developers.

#15 about 3 min

Audience questions on rule documentation and workflow updates

Custom checks require comprehensive maintenance processes to safely track updates and manage deployment into the centralized marketplace.

Matching moments

2:08 min

Enforcing code quality rules across client projects

Vadzim Prudnikau Vadzim Prudnikau · World Congress 2026 Europe

3:23 min

Enforcing consistent code quality with static analysis

Chris Heilmann Chris Heilmann +2 · LIVE

5:55 min

Evaluating generated code syntax and maintaining quality control

Phil Nash · Coffee With Developers

2:20 min

Applying customizable rules for static code analysis

Daniel Oh Daniel Oh · World Congress 2024

2:17 min

Enforcing coding standards with editor configurations and analyzers

Dennis Doomen Dennis Doomen · World Congress 2025

1:40 min

Modifying methodology rules for organizational specific needs

Sebastian Gierlinger Sebastian Gierlinger · World Congress 2025

More from World Congress 2022

What the heck do "declarative" and "reactive" actually mean? thumbnail
30:40
about 4 years ago

What the heck do "declarative" and "reactive" actually mean?

André Kovac

The Design and Evolution of C++ thumbnail
1:01:15
over 4 years ago

The Design and Evolution of C++

Bjarne Stroustrup

But, you're not Facebook thumbnail
31:12
over 4 years ago

But, you're not Facebook

Kristijan Ristovski

Communicate efficiently with Software Architecture Diagrams thumbnail
28:11
over 4 years ago

Communicate efficiently with Software Architecture Diagrams

Simon Lasselsberger

Get Ready for Jakarta EE 10! thumbnail
42:53
over 4 years ago

Get Ready for Jakarta EE 10!

Ivar Grimstad

Keep your code refactorable thumbnail
26:46
over 4 years ago

Keep your code refactorable

Gerrit Stapper

Related videos

Practical tips for keeping your C# code base clean thumbnail
22:48
World Congress 2026 Europe • 3 months ago

Practical tips for keeping your C# code base clean

Dennis Doomen

The Clean as You Code Imperative thumbnail
30:40
World Congress 2023 • about 3 years ago

The Clean as You Code Imperative

Olivier Gaudin

Build a CI/CD pipeline to automate code reviews and ensure code quality thumbnail
45:28
LIVE • over 4 years ago

Build a CI/CD pipeline to automate code reviews and ensure code quality

Julien Delange

What you can learn from an open-source project with 500 million downloads thumbnail
29:31
World Congress 2025 • about 1 year ago

What you can learn from an open-source project with 500 million downloads

Dennis Doomen

From boy scouting to redrawing the landscape thumbnail
30:01
World Congress 2024 • about 2 years ago

From boy scouting to redrawing the landscape

timtebeek

Supercharging Static Code Analysis: Konveyor AI & LLMs thumbnail
33:14
World Congress 2024 • about 2 years ago

Supercharging Static Code Analysis: Konveyor AI & LLMs

Daniel Oh

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.