Code Quality & Security

Bring code quality into the delivery conversation

Connect SonarQube findings, quality gates, coverage, and technical debt with team and delivery context. See where issues are concentrated and what needs follow-up.

Code Quality & Security

Project findings and quality gates

Project quality overview

SonarQube · 3 projects in view

Failed quality gates
2 / 3
Vulnerabilities
3
Bugs
18
Technical debt
36 days
Illustrative SonarQube findings by project
ProjectQuality gateBugsVulnerabilitiesCode smellsCoverageDebt
Payments APIFailed928768.4%12d
Platform ServicesPassed304284.2%8d
Mobile BackendFailed616171.6%16d

Payments API and Mobile Backend have failed quality gates. Inspect their findings and remediation priorities with the teams.

Choose “Needs attention” to focus the project view on failed quality gates.

From signals to decisions

Connect the finding to the engineering work

Make quality part of the same review as contribution, delivery, and remediation.

Bring findings into the review

Read bugs, vulnerabilities, code smells, and quality gate status with your delivery and project context.

Follow the contribution context

Connect quality issues to contributors and teams. Review ownership with the code and responsibilities behind the finding.

Track the remediation work

Review technical debt and quality movement over time. Keep the next action visible in the engineering review.

What to look at

Read quality, security, and maintainability together

Bring the quality signals reported by SonarQube into your engineering review, using consistent project and team scope.

  • Quality gate status and findings
  • Bugs, vulnerabilities, and code smells
  • Technical debt and remediation effort
  • Unit tests and coverage
Quality gate status
Check which projects meet the quality conditions reported by your SonarQube setup.
Bugs and vulnerabilities
Review reliability and security findings with the projects, contributors, and teams affected.
Code smells and technical debt
Follow maintainability findings and the estimated remediation effort over time.
Coverage and unit tests
Inspect the test coverage and unit test signals available from connected quality reports.

What to look at

Keep the next action attached to the finding

Use quality movement to focus the investigation, then review the work and follow up on the result.

  • Connected SonarQube Server or Cloud source
  • Project, contributor, and team context
  • Delivery and quality review together
Start with the failed gate or changing trend
Identify the project and period where quality changed. Review the relevant conditions and findings.
Inspect ownership and delivery context
Follow the finding into its contributor and team context. Review the affected changes and related delivery symptoms.
Agree on the remediation and follow-up
Prioritize the work with the responsible team and revisit the quality and technical debt trend after the change.

Common questions

Code quality and security questions

Need to discuss your team or technical setup? Contact us.

Which quality signals can Oobeya bring together?

Review SonarQube bugs, vulnerabilities, code smells, quality gates, technical debt, maintainability, reliability, and test coverage. Availability depends on the connected source and its reports.

Does Oobeya support SonarQube Server and Cloud?

Oobeya supports SonarQube Server and SonarQube Cloud integration scenarios. Review the integration catalog for your environment and connection requirements.

Can findings be reviewed by contributor and team?

Oobeya connects code quality issues with contributor and team context so quality can be discussed alongside engineering work and delivery.

Can we track technical debt over time?

Yes. Use the technical debt timeline and related quality signals to review where remediation effort is accumulating and whether follow-up work changes the trend.

Does a passed quality gate mean there are no quality risks?

A gate reflects the conditions configured in the quality system. Review the underlying findings, coverage, scope, and related delivery signals when assessing quality.

How does this connect to delivery performance?

Read quality findings with Team Performance, Delivery Symptoms, and production DORA trends to investigate the work and workflow around an outcome.

See Oobeya in practice

Review code quality with the work behind it

Walk through SonarQube findings, quality gates, technical debt, and engineering context with your team’s priorities in mind.