<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
  <channel>
    <title>SonarQube on Wenhan blog</title>
    <link>https://wenhan.blog/en/tags/sonarqube/</link>
    <description>Recent content in SonarQube on Wenhan blog</description>
    <generator>Hugo -- gohugo.io</generator>
    <language>en-US</language>
    <lastBuildDate>Sun, 04 Oct 2026 23:49:19 +0900</lastBuildDate><atom:link href="https://wenhan.blog/en/tags/sonarqube/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Visualizing Tangled Module Dependencies with SonarQube</title>
      <link>https://wenhan.blog/en/posts/20261004_sonarqube_architecture_dependency_untangle/</link>
      <pubDate>Sun, 04 Oct 2026 23:49:19 +0900</pubDate>
      
      <guid>https://wenhan.blog/en/posts/20261004_sonarqube_architecture_dependency_untangle/</guid>
      <description>Learn how SonarQube Architecture visualizes module dependencies and cycles, and how Request Removal turns unwanted dependencies into trackable issues.</description>
    </item>
    
    <item>
      <title>Trying the SonarQube CLI: Simpler, Smarter Static Analysis</title>
      <link>https://wenhan.blog/en/posts/20260505_sonarqube_cli/</link>
      <pubDate>Tue, 05 May 2026 23:49:19 +0900</pubDate>
      
      <guid>https://wenhan.blog/en/posts/20260505_sonarqube_cli/</guid>
      <description>Learn how to install and use the SonarQube CLI to analyze a project locally or in CI, with a simpler workflow for static code analysis.</description>
    </item>
    
    <item>
      <title>Streamlining Technical Debt Management with SonarQube Automatic Issue Assignment</title>
      <link>https://wenhan.blog/en/posts/20260420_sonarqube_automatic_issue_assignment/</link>
      <pubDate>Mon, 20 Apr 2026 23:49:19 +0900</pubDate>
      
      <guid>https://wenhan.blog/en/posts/20260420_sonarqube_automatic_issue_assignment/</guid>
      <description>Learn how SonarQube automatically assigns issues to the developers who introduced them, helping teams make code-quality ownership clearer.</description>
    </item>
    
    <item>
      <title>CI SAST Scanning with Azure DevOps and SonarQube</title>
      <link>https://wenhan.blog/en/posts/20260219_azuredevops_sonarqube_ci_sast/</link>
      <pubDate>Thu, 19 Feb 2026 23:49:19 +0900</pubDate>
      
      <guid>https://wenhan.blog/en/posts/20260219_azuredevops_sonarqube_ci_sast/</guid>
      <description>Set up SonarQube SAST analysis in an Azure DevOps Pipeline and show Quality Gate results and issues directly on pull requests.</description>
    </item>
    
    <item>
      <title>Available Tools in the SonarQube MCP Server</title>
      <link>https://wenhan.blog/en/posts/20251220_sonarqube_mcp_tools/</link>
      <pubDate>Sat, 20 Dec 2025 23:49:19 +0900</pubDate>
      
      <guid>https://wenhan.blog/en/posts/20251220_sonarqube_mcp_tools/</guid>
      <description>A categorized reference to SonarQube MCP Server tools for searching issues, checking Quality Gates, retrieving metrics, and more.</description>
    </item>
    
    <item>
      <title>SonarQube MCP Server Features: Static Code Analysis</title>
      <link>https://wenhan.blog/en/posts/20251216_sonarqube_mcp_static_analysis/</link>
      <pubDate>Tue, 16 Dec 2025 23:49:19 +0900</pubDate>
      
      <guid>https://wenhan.blog/en/posts/20251216_sonarqube_mcp_static_analysis/</guid>
      <description>Explore SonarQube MCP Server capabilities and setup, then see how an AI assistant can inspect static-analysis issues and Quality Gates.</description>
    </item>
    
    <item>
      <title>SonarQube × MCP: Fixing Static Analysis Issues with AI Coding</title>
      <link>https://wenhan.blog/en/posts/20251214_sonarqube_mcp_ai_fix/</link>
      <pubDate>Sun, 14 Dec 2025 23:49:19 +0900</pubDate>
      
      <guid>https://wenhan.blog/en/posts/20251214_sonarqube_mcp_ai_fix/</guid>
      <description>Connect SonarQube MCP to an AI coding assistant to retrieve static-analysis issues, fix the code, and verify the result with a new analysis.</description>
    </item>
    
    <item>
      <title>Visualizing Test Coverage with SonarQube: A Practical Guide</title>
      <link>https://wenhan.blog/en/posts/20251209_sonarqube_test_coverage/</link>
      <pubDate>Tue, 09 Dec 2025 23:49:19 +0900</pubDate>
      
      <guid>https://wenhan.blog/en/posts/20251209_sonarqube_test_coverage/</guid>
      <description>Measure Maven test coverage with JaCoCo, import the report into SonarQube, and inspect coverage in dashboards and source code.</description>
    </item>
    
    <item>
      <title>Automatically Analyze Pull Requests with GitHub Actions and SonarQube</title>
      <link>https://wenhan.blog/en/posts/20251204_githubactions_sonarqube/</link>
      <pubDate>Thu, 04 Dec 2025 23:49:19 +0900</pubDate>
      
      <guid>https://wenhan.blog/en/posts/20251204_githubactions_sonarqube/</guid>
      <description>Build a GitHub Actions workflow that runs SonarQube analysis and automatically checks code quality for every pull request.</description>
    </item>
    
    <item>
      <title>Hello World! Run Your First Code Scan</title>
      <link>https://wenhan.blog/en/posts/20251202_sonarqube_first_scan/</link>
      <pubDate>Tue, 02 Dec 2025 23:49:19 +0900</pubDate>
      
      <guid>https://wenhan.blog/en/posts/20251202_sonarqube_first_scan/</guid>
      <description>A beginner-friendly walkthrough for creating a SonarQube project and running your first code scan, with step-by-step screenshots.</description>
    </item>
    
    <item>
      <title>Start SonarQube Quickly with Docker Compose</title>
      <link>https://wenhan.blog/en/posts/20250922_sonarqube_docker_setup/</link>
      <pubDate>Mon, 22 Sep 2025 23:49:19 +0900</pubDate>
      
      <guid>https://wenhan.blog/en/posts/20250922_sonarqube_docker_setup/</guid>
      <description>A practical guide to running SonarQube with Docker, from starting the container to signing in for the first time.</description>
    </item>
    
    <item>
      <title>Improving AI-Generated Code Quality with SonarQube IDE</title>
      <link>https://wenhan.blog/en/posts/20250909_sonarqube_ide_ai_code/</link>
      <pubDate>Tue, 09 Sep 2025 23:49:19 +0900</pubDate>
      
      <guid>https://wenhan.blog/en/posts/20250909_sonarqube_ide_ai_code/</guid>
      <description>Use SonarQube IDE to analyze AI-generated code in real time, catch issues while coding, and bring fixes into your development workflow.</description>
    </item>
    
    <item>
      <title>Essential Security Basics for Vibe Coding: SAST, SCA, and DAST</title>
      <link>https://wenhan.blog/en/posts/20250904_vibecoding_sast_sca_dast/</link>
      <pubDate>Thu, 04 Sep 2025 23:49:19 +0900</pubDate>
      
      <guid>https://wenhan.blog/en/posts/20250904_vibecoding_sast_sca_dast/</guid>
      <description>Understand SAST, SCA, and DAST for Vibe Coding, and learn how each approach detects risks in source code, dependencies, and running apps.</description>
    </item>
    
  </channel>
</rss>
