ReSharper is a code analysis and debugging tool available as an extender to Visual Studio. Its features are also present in JetBrain's .NET IDE, Rider.
$139
per year per user
SonarQube Server
Score 9.5 out of 10
N/A
SonarQube is a code quality and vulnerability solution for development teams that integrates with CI/CD pipelines to ensure the software you produce is secure, reliable, and maintainable.
ReSharper is suitable for all legacy and new projects. It helps keep the code clean, short and understandable. The color codes help you quickly identify what you are looking for, and the shortcuts are the best. While Visual Studio made progress on these points on its own, it seems to me that ReSharper has a lot to offer. Today it happens to me that I can't think of another productivity tool without thinking of ReSharper first.
Large codebase: The tool's static analysis capabilities can help teams quickly identify and fix bugs, vulnerabilities, and code smells in large codebases.
Compliance and security: The tool can check the code against industry standards or regulations, such as OWASP and CWE, and identify any issues that need to be addressed.
Agile development: SonarQube can be integrated with CI/CD pipelines allowing teams to continuously monitor and improve code quality throughout the development process.
Teams using multiple languages: Teams that use multiple programming languages can benefit from using SonarQube, as the tool supports a wide range of languages and can be integrated with a variety of development tools.
Scenarios where SonarQube may be less appropriate:
Small codebase: Organizations with a small codebase may not see the full benefits of using SonarQube, as the tool's static analysis capabilities may be overkill for a smaller codebase.
Limited resources: Organizations with limited resources may find it difficult to set up and configure SonarQube, as the tool can be complex and may require specialized expertise.
Limited integration: Organizations that use development tools or IDEs that are not supported by SonarQube may find it difficult to integrate the tool into their existing development workflow.
Limited scalability: Large organizations with millions of lines of code may find SonarQube's performance and scalability to be an issue. It may take longer for the analysis to finish and the results may not be as accurate.
ReSharper is very familiar if you already know Visual Studio. JetBrains does have an excellent IDE (Rider); however, since ReSharper is an extension to Visual Studio, you only need to learn what their tools add, not a whole new way of working. I have found the extension's interface to be straightforward, although perhaps due to the massive range of features, navigating the menus is a little time-consuming until your muscle memory kicks in. Maybe a feature search tool would help make usability a 10 out of 10?
We we easily able to integrate the SonarQube steps into our TFS process via the Microsoft Marektplace, we didn't have the need to call SonarQube support. We've used their online documentation and community forum if we ran into any issues.
ReSharper does what it does very well because it operates inside the IDE you are already using. It provides advanced features that function far above and beyond what Visual Studio Professional offers and does not require you to learn another IDE like JetBrain's excellent IDE Rider. My only wish is that ReSharper had a Visual Studio Code plugin!
SonarQube identifies significant more thing compared to the built-in suggestions in IntelliJ IDEA. The suggestions how to correct issues are also a lot better with SonarQube. IntelliJ IDEA provides great refactoring support to make it easy to refactor the code to solve issues. We use these tools together and they really complement each other.
Positive ROI from the standpoint of flagging several issues that would have otherwise likely been unaddressed and caused more time to be spent closer to launch
Slightly positive ROI from time-saving perspective (it's an automated check which is nice, but depending on the issues it finds, can take developers time to investigate and resolve)