Skip to content

Commit 3b9e3d7

Browse files
authored
1 parent 8da684d commit 3b9e3d7

File tree

1 file changed

+0
-1
lines changed

1 file changed

+0
-1
lines changed

docs/faq/comparisons/sonarqube.md

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,6 @@ Both Semgrep and SonarQube use static analysis to find bugs, but there are a few
2020
- Extending Semgrep with custom rules is simple since Semgrep rules look like the source code you’re writing. Writing custom rules with SonarQube is [<i class="fas fa-external-link fa-xs"></i> restricted to a handful of languages](https://docs.sonarqube.org/latest/extend/adding-coding-rules/) and requires familiarity with Java and abstract syntax trees (ASTs).
2121
- Semgrep supports user-defined autofixes; SonarQube does not.
2222
- Semgrep focuses on speed and ease-of-use, making analysis possible at up to 20K-100K loc/sec per rule. SonarQube authors [report approximately 0.4K loc/sec for rulesets in production](https://web.archive.org/web/20221109203440/https://community.sonarsource.com/t/performance-guide-for-large-project-analysis/148/2).
23-
- Semgrep supports scanning only changed files (differential analysis), SonarQube does not.
2423
- Both have publicly available rules
2524
- Semgrep has an online, hosted free plan for up to ten contributors to private repositories; both have a hosted paid plan.
2625

0 commit comments

Comments
 (0)