GitLab vs. IntelliJ IDEA vs. SonarQube

GitLab is good if you work a lot with code and do complex repository actions. It gives you a very good overview of what were the states of your branches and the files in them at different stages in time. It's also way easier and more efficient to write pipelines for CI\CD. It's easier to read and it's easier to write them. It takes fewer clicks to achieve the same things with GitLab than it does for competitor products.

Incentivized

This is a superb tool if your project involves a lot of backend development, especially in Java/Spring Boot and Kotlin. The support for the front end is great as well, but some developers may prefer to use the GitHub copilot add-on. I especially love using the GitHub copilot add-on. It may be less appropriate if your project requires heavy use of HotSwaps for backend debugging, as sometimes the support for that can be limited.

Incentivized

SonarQube is excellent if you start using it at the beginning when developing a new system, in this situation you will be able to fix things before they become spread and expensive to correct. It’s a bit less suitable to use on existing code with bad design as it’s usually too expensive to fix everything and only allows you to ensure the situation doesn’t get worse.

Incentivized

• GitLab excels in managing code versions, allowing easy tracking of changes, branch management, and merging contributions.
• It helps maintain code stability and reliability, saving time and effort in the development or research workflow.
• Powerful code review features, enabling collaboration and feedback among team members.
• Robust project management features, including issue tracking, kanban boards, and milestones.

Incentivized

• Unit testing: Fully integrated into IntelliJ IDEA. Your unit tests will run smoothly and efficiently, with excellent debugging tools for when things get tricky.
• Spring integration: Our Spring project using Maven works flawlessly in IntelliJ IDEA. I know firsthand that Apache is also easily and readily supported too. The integration is seamless and very easy to set up using IntelliJ IDEA's set up wizard when importing new projects.
• Customization: IntelliJ IDEA comes out of the box with a bunch of handy shortcuts, as well as text prediction, syntax error detection, and other tools to help keep your code clean. But even better is that it allows for total customization of shortcuts you can easily create to suit your needs.

Incentivized

• Detecting bugs and vulnerabilities: SonarQube can identify a wide range of bugs and vulnerabilities in code, such as null pointer exceptions, SQL injection, and cross-site scripting (XSS) attacks. It uses static analysis to analyze the code and identify potential issues, and it can also integrate with dynamic analysis tools to provide even more detailed analysis.
• Measuring code quality: SonarQube can measure a wide range of code quality metrics, such as cyclomatic complexity, duplicated code, and code coverage. This can help teams understand the quality of their code and identify areas that need improvement.
• Providing actionable insights: SonarQube provides detailed information about issues in the code, including the file and line number where the issue occurs and the severity of the issue. This makes it easy for developers to understand and address issues in the code.
• Integrating with other tools: SonarQube can be integrated with a wide range of development tools and programming languages, such as Git, Maven, and Java. This allows teams to use SonarQube in their existing development workflow and take advantage of its powerful code analysis capabilities.
• Managing technical debt: SonarQube provides metrics and insights on the technical debt on the codebase, enabling teams to better prioritize issues to improve the quality of the code.
• Compliance with coding standards: SonarQube can check the code against industry standards like OWASP, CWE and more, making sure the code is compliant with security and coding standards.

Incentivized

• CI variables management is sometimes hard to use, for example, with File type variables. The scope of each variable is also hard to guess.
• Access Token: there are too many types (Personal, Project, global..), and it is hard to identify the scope and where it comes from once created.
• Runners: auto-scaled runners are for the moment hard to put in place, and monitoring is not easy.

Incentivized

• Finding if a feature exists or not in IntelliJ IDEA can be challenging.
• For example, if we know how to format a particular file, the command is Ctrl+Alt+Shift+L, but if we don't, then finding it is difficult.
• Setting up a project interpreter and directory structure might not be intuitive at first.
• Git integration can be improved. For example, it isn't easy to rebase using UI in IntelliJ IDEA.

Incentivized

• Importing a new custom quality profile on SonarQube is a bit tricky, it can be made easier
• Every second time when we want to rerun the server, we have to restart the whole system, otherwise, the server stops and closes automatically
• When we generate a new report a second time and try to access the report, it shows details of the old report only and takes a lot of time to get updated with the details of the new and fresh report generated

Incentivized

I really feel the platform has matured quite faster than others, and it is always at the top of its game compared to the different vendors like GitHub, Azure pipelines, CircleCI, Travis, Jenkins. Since it provides, agents, CI/CD, repository hosting, Secrets management, user management, and Single Sign on; among other features

Incentivized

VS Code is maturing and has a Scala plugin now. The overall experience with VS Code - for web development at least - is very snappy/fast. IntelliJ feels a bit sluggish in comparison. If that Scala plugin for VS Code is deemed mature enough - we may not bother renewing and resort to the Community Edition if we need it.

Incentivized

I find it easy to use, I haven't had to do the integration work, so that's why it is a 9/10, cause I can't speak to how easy that part was or the initial set up, but day to day use is great!

Incentivized

There is always room for improvement, but I haven't met any IDE that I liked more so far. Even if it did not fit a use case right out of the box, there is always a way to configure how it works to do just that.

Incentivized

It can improve in some user experience and usability parts, like the code view and the way we assign issues it's a bit hidden and not highlighted

Incentivized

I've never had experienced outages from GItlab itself, but regarding the code I have deployed to Gitlab, the history helps a lot to trace the cause of the issue or performing a rollback to go back to a working version

Incentivized

GItlab reponsiveness is amazing, has never left me IDLE. I've never had issues even with complex projects. I have not experienced any issues when integrating it with agents for example or SSO

Incentivized

At this point, I do not have much experience with Gitlab support as I have never had to engage them. They have documentation that is helpful, not quite as extensive as other documentation, but helpful nonetheless. They also seem to be relatively responsive on social media platforms (twitter) and really thrived when GitHub was acquired by Microsoft

Incentivized

Customer support is really good in the case of IntelliJ. If you are paying for this product then, the company makes sure that you will get all the services adequately. Regular update patches are provided to improve the IDE. An online bug report makes it easier for the developers to find the solution as fast as possible. The large online community also helps to find the various solutions to the issues.

Incentivized

We we easily able to integrate the SonarQube steps into our TFS process via the Microsoft Marektplace, we didn't have the need to call SonarQube support. We've used their online documentation and community forum if we ran into any issues.

Incentivized

This installs just like any other application - its pretty straight forward. Perhaps licensing could be more challenging - but if you use the cloud licensing they offer its as simple as having engineers login to the application and it just works.

Incentivized

Gitlab seems more cutting-edge than GitHub; however, its AI tools are not yet as mature as those of CoPilot. It feels like the next-generation product, so as we selected a tool for our startup, we decided to invest in the disruptor in the space. While there are fewer out-of-the-box templates for Gitlab, we have never discovered a lack of feature parity.

Incentivized

Eclipse is just so old, like a dinosaur, compared to IntelliJ. There are still formats that Eclipse supports better, especially old and/or propriety ones. Still, most of the modern software development needs can be done on IntelliJ, & in a much better way, some of them are not even supported on Eclipse.

Incentivized

SonarQube is an open-source. It's a scalable product. The costs for this application, for the kind of job it does, are pretty descent. Pipeline scan is more secured in SonarQube. Its a very good tool and its support multiple languages. Its main core competency is of static code analysis and that is why SonarQube exists and it does it exceedingly well. The quality of scan on code convention, best practices, coding standards, unit test coverage etc makes them one of the best competent tool in the market

Incentivized

I think is very well designed, and like any VCS it works as intended

Incentivized

• GitLab cut down our spent on container, package and infrastructure registry
• Best thing is we can now have everything in single platform which cost effective too
• Quality of support is really good and they do have emergency support team as well which is great

Incentivized

• Easier to find bugs and debugs, thus reducing man hours and generating immediate dollar impact.
• Coding time is lessened, which in turn again reduces man hours and generates immediate dollar impact.
• Refactoring code is more innovative and easy here, resulting in more maintainable code.

Incentivized

• Positive ROI from the standpoint of flagging several issues that would have otherwise likely been unaddressed and caused more time to be spent closer to launch
• Slightly positive ROI from time-saving perspective (it's an automated check which is nice, but depending on the issues it finds, can take developers time to investigate and resolve)