Semgrep vs SonarQube
A side-by-side look at Semgrep and SonarQube. For an in-depth review of either product, follow the links below.
Semgrep
Development
Semgrep is an open-source tool for detecting bugs and security vulnerabilities in source code using pattern matching. It works by scanning codebases to find instances where code matches predefined patterns that correspond to vulnerabilities or errors.
static-analysispattern-matchingvulnerability-detection
SonarQube
Development
SonarQube is an open source platform for continuous inspection of code quality. It performs automatic reviews with static analysis of code to detect bugs, code smells, and security vulnerabilities in over 20 programming languages.
static-analysiscode-inspectionbug-detectionsecurity
Related Comparisons
Parasoft C/C++test
SourceMonitor
Codegrip
ProjectCodeMeter
Semmle
Landscape (Python)