Notifications
Clear all
SonarQube Reviews
1
Posts
1
Users
0
Reactions
1
Views
Topic starter
15/07/2026 4:33 am
We're a small team, mostly Go and Python, running on k8s. The idea of running a Java app with its dependencies and tuning JVMs is a non-starter for us. It's not about the tool's quality, but the operational overhead.
We need the core static analysis, security, and quality gates. I've looked at SonarCloud, but we need on-prem/self-hosted. I've seen mentions of CodeClimate, but their self-hosted story seems to have changed? Also looking at Semgrep and CodeQL, but they seem more focused on security. Are there any good alternatives that are container-native and simpler to run? What are you all using?