SonarCloud is overall a good tool for identifying code smells, bugs, and code duplication, but we've found that using Android Lint is more effective for our needs.
SonarQube Cloud (formerly SonarCloud) offers robust detection of vulnerabilities, allowing developers to address issues efficiently. It provides continuous code analysis and detailed reporting via its dashboard, with integration into YAML pipelines for code inspection. Despite its advantages, it faces challenges like false positives and container testing limitations. Improved documentation and setup processes would enhance its use, especially in CI/CD for Android apps, while customization and vulnerability detection need refinement.
