Simple example static code analyse with sonar qube
curl -X GET 'http://localhost:7777/sum/5/3'
go test -v ./...
go test -short -coverprofile=./coverage.out ./...
go get github.com/securego/gosec/cmd/gosec
gosec -fmt=sonarqube -out report.json ./...
docker run -d --name sonarqube -p 9777:9000 sonarqube
./sonar-scan.sh
make cover
make sec
make sonarqube-scan
or
make all
make sonarqube-server-down