WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2022 • Jun 15, 2022

Automated Code Quality Checks with Custom SonarQube Rules

Daniel Strmečki , Martin Gluhak

Stop relying on passive documentation to enforce enterprise code quality. Convert your internal guidelines into custom SonarQube plugins to block non-compliant pull requests from ever merging.

Pause
Mute Enter Fullscreen
#1 about 3 min

Setting the context for code quality and custom rules

An overview of utilizing automated code checks to differentiate products and attract developer talent.

#2 about 4 min

Reasons for establishing code standardization and routine checks

Standardization builds customer trust, prevents repeated errors across projects, and simplifies new joiner onboarding.

#3 about 3 min

Establishing a company-wide approach to software quality assurance

Quality becomes the entire team's responsibility when testing is heavily automated and integrated into continuous development.

#4 about 3 min

Test automation strategy and following the testing pyramid

Most automated testing is handled at the unit level, preserving manual testing for edge cases and exploratory scenarios.

#5 about 6 min

Documenting and sharing standard software coding guidelines centrally

Relying strictly on basic static analysis is insufficient without aligned developer habits and detailed organizational documentation.

#6 about 1 min

Enforcing quality standards strictly with pull request decoration

Blocking a pull request merge upon a failed branch analysis ensures developers comply with centralized code metrics.

#7 about 2 min

Validating Java application architecture design with automated tests

The ArchUnit library natively uncovers cyclic dependencies and package naming violations within a standard test suite.

#8 about 2 min

Translating custom guidelines into automated static analysis checks

Automating organizational rules into specific SonarQube checks captures framework quirks that out-of-the-box analysis natively ignores.

#9 about 4 min

Creating a boilerplate project for custom rule development

The open-source Sonar Java plugin repository provides a straightforward maven template for bootstrapping customized static analysis rules.

#10 about 5 min

Writing test-driven unit tests for custom rule validation

Analyzing mocked non-compliant code snippets confirms whether a custom rule successfully catches targeted programming violations.

#11 about 6 min

Implementing syntax tree visitor logic for code rules

A custom visitor method inspects a method's return type token to detect and flag restricted class usages.

#12 about 4 min

Adding metadata and documentation to new custom rules

Providing JSON and HTML resources displays rule severity, expected compliance times, and alternative solutions natively within SonarQube.

#13 about 4 min

Building and installing the compiled custom rule extension

A standard maven build generates a jar executable that smoothly activates when copied directly into the SonarQube extensions directory.

#14 about 4 min

Synchronizing local developer tools with centralized custom rules

Linking the SonarLint IDE plugin to a customized SonarQube instance automatically distributes organizational guidelines to all developers.

#15 about 3 min

Audience questions on rule documentation and workflow updates

Custom checks require comprehensive maintenance processes to safely track updates and manage deployment into the centralized marketplace.

Matching moments

2:08 min

Enforcing code quality rules across client projects

Vadzim Prudnikau Vadzim Prudnikau · WWC Europe 2026

3:23 min

Enforcing consistent code quality with static analysis

Chris Heilmann +2 · LIVE

5:55 min

Evaluating generated code syntax and maintaining quality control

Phil Nash · Coffee With Developers

2:20 min

Applying customizable rules for static code analysis

Daniel Oh Daniel Oh · WWC 2024

2:17 min

Enforcing coding standards with editor configurations and analyzers

Dennis Doomen Dennis Doomen · WWC 2025

1:40 min

Modifying methodology rules for organizational specific needs

Sebastian Gierlinger Sebastian Gierlinger · WWC 2025

More from World Congress 2022

What the heck do "declarative" and "reactive" actually mean? thumbnail
30:40
almost 4 years ago

What the heck do "declarative" and "reactive" actually mean?

André Kovac

The Design and Evolution of C++ thumbnail
1:01:15
about 4 years ago

The Design and Evolution of C++

Bjarne Stroustrup

But, you're not Facebook thumbnail
31:12
about 4 years ago

But, you're not Facebook

Kristijan Ristovski

Communicate efficiently with Software Architecture Diagrams thumbnail
28:11
about 4 years ago

Communicate efficiently with Software Architecture Diagrams

Simon Lasselsberger

Get Ready for Jakarta EE 10! thumbnail
42:53
about 4 years ago

Get Ready for Jakarta EE 10!

Ivar Grimstad

Keep your code refactorable thumbnail
26:46
about 4 years ago

Keep your code refactorable

Gerrit Stapper

Upcoming sessions on this topic

Open session

World Congress 2026 North America

From Static Rules to Reasoning Platforms: Scaling Intelligent Canary Delivery in 2026

Daniel Oh

Senior Principal Developer Advocate

Daniel Oh
Open session

World Congress 2026 North America

There's no dark factory without better software verifiers

Dexter Horthy

Co-Founder, HumanLayer

Dexter Horthy
Open session

World Congress 2026 North America

When Humans Stop Writing Code: Rethinking Languages, Compilers, and Responsibility

Simon Auer

Organizer of flutter vienna meetup and CEO of marqably

Simon Auer
Open session

World Congress 2026 North America

Who Tests the AI? Building Trustworthy AI Systems at Enterprise Scale

Him Raj Singh

PayPal, Manager, Software Engineer

Him Raj Singh
Open session

World Congress 2026 North America

The spectrum of agentic coding: From vibe coding to high-quality software engineering

YK Sugi

Developer Experience Manager at Eventual

YK Sugi
Open session

World Congress 2026 North America

GitHub’s Team X-Ray: Your Repository Knows More About Your Team Than Your Team Does

Andrea Griffiths

Senior Developer Advocate

Andrea Griffiths

Related videos

Practical tips for keeping your C# code base clean thumbnail
22:48
WWC Europe 2026 • about 1 month ago

Practical tips for keeping your C# code base clean

Dennis Doomen

The Clean as You Code Imperative thumbnail
30:40
WWC 2023 • almost 3 years ago

The Clean as You Code Imperative

Olivier Gaudin

Build a CI/CD pipeline to automate code reviews and ensure code quality thumbnail
45:28
LIVE • over 4 years ago

Build a CI/CD pipeline to automate code reviews and ensure code quality

Julien Delange

What you can learn from an open-source project with 500 million downloads thumbnail
29:31
WWC 2025 • 12 months ago

What you can learn from an open-source project with 500 million downloads

Dennis Doomen

From boy scouting to redrawing the landscape thumbnail
30:01
WWC 2024 • almost 2 years ago

From boy scouting to redrawing the landscape

timtebeek

Supercharging Static Code Analysis: Konveyor AI & LLMs thumbnail
33:14
WWC 2024 • almost 2 years ago

Supercharging Static Code Analysis: Konveyor AI & LLMs

Daniel Oh

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.