← Back to context

Comment by mcny

1 day ago

Sonar cloud is free of cost for open source projects. Perhaps it would be better to use that as an evaluation tool? If you tried it, what did you find lacking about it?

Disclaimer: I am not employed by or affiliated with sonar qube.

We needed to test the integration into the company CI pipeline. One of the requirements was to fully run it in a private cloud environment, maybe even without internet access (this was required for some projects for security reasons).

PS: but that's not the point. We needed an evaluation license, but the sales person just kept bugging us with questions. Like how our environments were set up, what products we want to integrate it with, how our teams are build, how much team growth was planned, and so on.

A lot of internal things that you don't want to share, especially if you are not part of the purchasing department. They probably have some guidelines what they are willing to share and what not. Even when putting aside the security risks by sharing internal information, it could also hurt the purchasing departments negotiation strategies, if the sales person already knows more than they shared with them.

PPS: We didn't want to have SonarQube at all, we didn't like the reports at all, mostly false positives in our case to work through (but I can see that some teams could benefit from it). The requirement came from some check boxes to be ticked for an audit.

It depends on the evaluation needed. Maybe they wanted to verify that SonarQube would be able to handle their code structure, but they also had requirements that it has to work locally only and they couldn’t send proprietary code to a SaaS. You can’t evaluate that using SonarCloud, but a couple days with an evaluation license are exactly what you need.

I had a similar buying experience recently, where a SaaS had a cloud option and a local option, which varied slightly. The cloud option kind of told us what we needed to know, but a trial license of the local option let us actually verify that it would work with our use case.