<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
  <channel>
    <title>codequality on Wenhan blog</title>
    <link>https://wenhan.blog/en/tags/codequality/</link>
    <description>Recent content in codequality on Wenhan blog</description>
    <generator>Hugo -- gohugo.io</generator>
    <language>en-US</language>
    <lastBuildDate>Sun, 04 Oct 2026 23:49:19 +0900</lastBuildDate><atom:link href="https://wenhan.blog/en/tags/codequality/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Visualizing Tangled Module Dependencies with SonarQube</title>
      <link>https://wenhan.blog/en/posts/20261004_sonarqube_architecture_dependency_untangle/</link>
      <pubDate>Sun, 04 Oct 2026 23:49:19 +0900</pubDate>
      
      <guid>https://wenhan.blog/en/posts/20261004_sonarqube_architecture_dependency_untangle/</guid>
      <description>Learn how SonarQube Architecture visualizes module dependencies and cycles, and how Request Removal turns unwanted dependencies into trackable issues.</description>
    </item>
    
    <item>
      <title>CI SAST Scanning with Azure DevOps and SonarQube</title>
      <link>https://wenhan.blog/en/posts/20260219_azuredevops_sonarqube_ci_sast/</link>
      <pubDate>Thu, 19 Feb 2026 23:49:19 +0900</pubDate>
      
      <guid>https://wenhan.blog/en/posts/20260219_azuredevops_sonarqube_ci_sast/</guid>
      <description>Set up SonarQube SAST analysis in an Azure DevOps Pipeline and show Quality Gate results and issues directly on pull requests.</description>
    </item>
    
    <item>
      <title>Improving AI-Generated Code Quality with SonarQube IDE</title>
      <link>https://wenhan.blog/en/posts/20250909_sonarqube_ide_ai_code/</link>
      <pubDate>Tue, 09 Sep 2025 23:49:19 +0900</pubDate>
      
      <guid>https://wenhan.blog/en/posts/20250909_sonarqube_ide_ai_code/</guid>
      <description>Use SonarQube IDE to analyze AI-generated code in real time, catch issues while coding, and bring fixes into your development workflow.</description>
    </item>
    
    <item>
      <title>Essential Security Basics for Vibe Coding: SAST, SCA, and DAST</title>
      <link>https://wenhan.blog/en/posts/20250904_vibecoding_sast_sca_dast/</link>
      <pubDate>Thu, 04 Sep 2025 23:49:19 +0900</pubDate>
      
      <guid>https://wenhan.blog/en/posts/20250904_vibecoding_sast_sca_dast/</guid>
      <description>Understand SAST, SCA, and DAST for Vibe Coding, and learn how each approach detects risks in source code, dependencies, and running apps.</description>
    </item>
    
  </channel>
</rss>
