Run a self-managed SonarQube instance in a container and make code quality and security analysis available to local and CI workflows.
This is the Git repo of the official Docker image for SonarQube. See the Hub page for the full readme on how to use the Docker image and for information regarding contributing and issues.
The full readme is generated over in docker-library/docs, specifically in docker-library/docs/sonarqube.
- Official SonarQube images for the Community Build and supported commercial editions.
- Versioned tags for repeatable local, test, and production deployments.
- A containerized SonarQube runtime that scanners can send analysis results to.
- Configuration and tag guidance maintained through the Docker Official Images documentation.
The image runs the same SonarQube analysis for developer-written and AI-generated code. Scanners analyze a project and send the results to the running SonarQube instance, where teams can review explainable findings and enforce quality gates.
- SonarQube Community Build, the open-source server provided by this image.
- SonarQube Server, the self-managed product with additional capabilities.
- SonarQube Cloud, the hosted SonarQube service.
- SonarQube for IDE, real-time analysis while you write or generate code.
- SonarQube MCP Server, bringing SonarQube analysis into AI agent workflows.
- SonarQube CLI, running analysis from the command line.
For support questions ("How do I?", "I got this error, why?", ...), please first read the documentation and then head to the SonarSource forum. There are chances that a question similar to yours has already been answered.
Be aware that this forum is a community, so the standard pleasantries ("Hi", "Thanks", ...) are expected. And if you don't get an answer to your thread, you should sit on your hands for at least three days before bumping it. Operators are not standing by. :-)
If you would like to see a new feature or report a bug, please create a new thread in our forum.
Please be aware that we are not actively looking for feature contributions. We typically accept minor improvements and bug fixes.
With that in mind, if you would like to submit a code contribution, please create a pull request for this repository. Please explain your motives to contribute this change: what problem you are trying to fix, what improvement you are trying to make.
Copyright SonarSource.
SonarQube Community Build is released under the GNU Lesser General Public License, Version 3.0, and packaged with SSALv1 analyzers. SonarQube Server Developer, Enterprise, and Data Center Editions are licensed under SonarQube Server Terms and Conditions.