GitLab DevSecOps platform enables software innovation by aiming to empower development, security, and operations teams to build better software, faster. With GitLab, teams can create, deliver, and manage code quickly and continuously instead of managing disparate tools and scripts. GitLab helps teams across the complete DevSecOps lifecycle, from developing, securing, and deploying software. Differentiators, as described by Gitlab:
Simplicity: With GitLab, DevSecOps can…
$0
per month per user
SonarQube
Score 8.6 out of 10
N/A
SonarQube is a code quality and vulnerability solution for development teams that integrates with CI/CD pipelines to ensure the software you produce is secure, reliable, and maintainable.
We migrated from Gerrit to GitLab, and minus a few minor bumps during migration, GitLab has been hands down better. Our devs have faster time to code review with notifications, the UI is easy to navigate and, and our pipeline is integrated and automated, so once everything is …
We are coming from Bitbucket, and we switch to Gitlab to improve the source code management and the reading, which is better on Gitlab. The Merge request flow is also better than Bitbucket. This allows us to use Gitlab CI, which is well-integrated. Compared to GitHub, it is …
Other solutions were studied, however GitHub being a SaaS solution causes security issues whithin many organizations. Bitbucket on the other hand can be installed and maintained however it must require licensing purchases. Although GitLab free version doesn't provide a lot of …
GitLab offers us the CE as an on-premise option without additional cost. We can deploy easily GitLab CE using docker official images. The GitLab CI option is more mature and simple than GitHub Actions.
Cost aside, the current field of source code management systems is exceptional. GitLab, however, rises above them all. The community version has all of the basic features needed by virtually any company and the pricing for additional features is in line with the value obtained.
Gitlab, if you have the right license, ships with a static analysis tool. It integrates better with Gitlab, but didn't seem to have the same quality output that Sonarqube did. Sonarqube's community version is plenty suitable for day to day analysis operations.
SonarQube deployment worked well with our pipeline and had the right integrations with our IDE as well as it worked well with analyzing .NET frameworks when compared to GitHub and GitLab which has some of the functionality and can do some checks, but SonarQube made more sense …
Verified User
Engineer
Chose SonarQube
Jenkins and GitLab are not exact alternatives for SonarQube, however, they do provide functionality for running and executing build pipelines for various languages and generating reports. However, they are not extensible, have no integration with IDEs and not suitable for …