Sonar

IDE extension that analyzes code as you type and, in connected mode, applies the same rules and suppressions as your server side Sonar analysis.

Self hosted analysis server that scans repositories for quality and security issues, enforces quality gates and tracks findings over time.