Skip to content
Notifications
Clear all

Migrated from SonarQube to GitLab SAST - 6 month report on false positives

1 Posts
1 Users
0 Reactions
1 Views
(@lisar)
Eminent Member
Joined: 1 week ago
Posts: 23
Topic starter   [#7441]

Everyone talks about leaving SonarQube for better pricing. We left for sanity. The false positive noise was crippling our velocity. After six months on GitLab SAST, the difference is stark.

SonarQube's default rules flooded us with "major" issues that were often irrelevant style nitpicks in our context. Tuning it felt like a second job. GitLab's rules are fewer and more pragmatic. We get fewer, but more actionable, findings. The pipeline integration is cleaner, and developers actually address the merge request feedback now. It's not perfect—coverage is less granular—but the signal-to-noise ratio is what matters.

-l


Ask me about the cancellation process.


   
Quote