OSS Tanbou

SonarQube Community Build

View on GitHubProject website

SonarQube Community Build — continuously verify code quality and security with static analysis and Quality Gates

OSS scale score 293.7OSS health 89Update pace 347 commits/30d
About these scores

OSS scale score is an unbounded metric that log-compresses and weights Stars, Watchers, Forks, and Contributors. Discovery score is the current OSS scale score minus the score at discovery. Update pace is commits in the last 30 days, growth momentum is the OSS scale score difference within the recent observation window, and OSS health is a 0–100 rating based on available recency, Community Health, and release data.

Stars
10,996
Primary language
Java
License
LGPL-3.0
Repository last updated
Sep 18, 2026

Overview

SonarQube Community Build is an open-source static-analysis platform that identifies bugs, security vulnerabilities and hotspots, maintainability issues, and coverage signals. Quality Gates turn those findings into pass/fail conditions for continuous inspection in CI.

Features and best fit

Based on official documentation; not hands-on tested · Content checked:

Classify source issues through static analysis

Techniques including symbolic execution and data/control-flow analysis identify reliability, security, and maintainability problems at file and line level.

Sources: [2][4]

Use Quality Gates as automated new-code acceptance criteria

Coverage and issue conditions can be combined into pass/fail gates that integrate analysis results with CI and release workflows.

Sources: [2][4]

For continuous quality and security checks beyond manual code review

SonarQube Community Build fits teams that want consistent static-analysis rules across repeated changes and repositories to expose technical debt and security regressions.

Sources: [2][4]

Separate Community Build from commercial Server/Cloud capabilities

The README describes Community Build as free and open source, while branch/PR analysis, SCA, advanced SAST, secrets detection, IaC analysis, and enterprise reporting are commercial-edition capabilities. Verify edition boundaries before adoption.

Sources: [2]

Official sources

  1. [1]SonarSource/sonarqube repository(2026-09-20)
  2. [2]SonarQube Community Build README(2026-09-20)
  3. [3]SonarQube Community Build LGPL-3.0 statement(2026-09-20)
  4. [4]SonarQube documentation(2026-09-20)
Supplemental curator note

This repository is explicitly the source of SonarQube Community Build. The free open-source Community Build should be evaluated separately from commercial SonarQube Server/Cloud features such as branch/PR analysis, SCA, deeper SAST, secrets detection, and enterprise reporting. Community Build itself is LGPL-3.0.

Try it in 3 steps

  1. 1

    Start Community Build on localhost

    Run the free open-source Community Build locally and keep it distinct from commercial SonarQube Server editions.

    docker run --name sonarqube-demo --rm -d -p 127.0.0.1:9000:9000 sonarqube:community
  2. 2

    Open the UI and create a local project

    Complete initial setup, create a project for source code you control, and generate an analysis token.

    Open http://127.0.0.1:9000
  3. 3

    Run the generated scanner command on your local project

    Inspect bugs, security, maintainability, coverage, and Quality Gate results. Do not commit the analysis token.

    Run the analysis command shown by SonarQube for your local project
Check the official README

Growth

Growth trends · Last 30 days

10,996 Stars

Trend data is still being collected.

Development activity

Last 90 days · weekly

Commits (last 30 days)
347
Open PRs
0
Issues opened
0
Issues closed
0
PRs opened
5
PRs merged
0

Issues

0 / 0

Jun 23Sep 20
Issues openedIssues closed

Pull requests

5 / 0

Jun 23Sep 20
PRs openedPRs merged

Maintenance

Median first response
Not specified
Issue response rate
No eligible issues

Based on up to the 100 newest issues opened by external users in the last 90 days. A first comment from an OWNER, MEMBER, or COLLABORATOR counts as a response; issues whose full comment history cannot be checked are excluded. The median and response rate update weekly.

Built with

Categories and tags

Categories

Tags

GitHub data

GitHub dataView detailed GitHub data
View on GitHub

GitHub Topics

  • sonarqube
  • code-quality
  • static-analysis
Stars
10,996
Forks
2,233
Watchers
340
Open issues
0
Contributors
313
Primary language
Java
License
LGPL-3.0
Repository last updated
Sep 18, 2026
Write a related article

Share a guide or use case for this OSS in Markdown. Articles are published after administrator approval.

Report incorrect information

Tell us if any listing information is incorrect or outdated.