A Roslyn-based static analyzer for C# and VB.NET that detects bugs, vulnerabilities, and code smells to improve code quality and security.
SonarAnalyzer for .NET is a static code analysis tool that integrates with the SonarQube ecosystem to detect bugs, vulnerabilities, and code smells in C# and VB.NET projects. It uses Roslyn analyzers to provide real-time feedback and helps teams maintain high code quality and security standards throughout the development lifecycle.
.NET developers and teams using SonarQube, SonarCloud, or SonarLint who want to enforce code quality and security rules in their C# or VB.NET codebases.
It offers a comprehensive, ecosystem-integrated solution with hundreds of built-in rules, support for custom rules, and seamless integration with popular test coverage tools, making it a robust choice for continuous code inspection.
Code analyzer for C# and VB.NET projects
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Offers over 470 rules for C# and 210+ for VB.NET, covering bugs, vulnerabilities, and code smells, as detailed in the features for comprehensive analysis.
Integrates directly with SonarQube, SonarCloud, and SonarLint, enabling consistent code quality and security checks across development and CI/CD pipelines.
Supports importing coverage reports from multiple tools like Visual Studio Code Coverage, Coverlet, and OpenCover, enhancing quality metrics as mentioned in the README.
Allows creation and integration of custom rules via the SonarQube Roslyn SDK, making it adaptable to specific project needs, as highlighted in the features.
Requires setup with SonarQube and SonarScanner for .NET, which can be more involved than using standalone Roslyn analyzers, as implied by the integration documentation.
Licensed under the SONAR Source-Available License v1.0, which may not be suitable for all open-source or commercial projects compared to more permissive licenses.
Heavy reliance on the SonarQube ecosystem means switching to other analysis platforms could be difficult, tying teams to SonarSource's tools and potentially incurring costs.