sonarcube

Using SonarQube to Analyze a Java Project

For the past weeks, I have tried to leverage SonarQube in order to do static analysis of the James source code. This article reports and describes some of the things I did to eventually spot a few security issues in …