Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Sonatype Lift – a unified code analysis platform

infoq.com

Post reply on HN
Print view View original

1–10 of 13 posts

Re: Sonatype Lift – a unified code analysis platform

#4

Post by mdaniel »

Their GH marketplace link (the "Install Lift for Free" CTA) is 404, even when signed into GH: https://github.com/marketplace/sonatype-lift

Going up one directory and searching for Sonatype surfaces https://github.com/marketplace/muse-dev which says "Muse is now Sonatype Lift!"

---

I do battle with my own company around this stuff all the time -- did not one developer click on that link during such a massive marketing push?

Re: Sonatype Lift – a unified code analysis platform

#6

Post by livealight »

mdaniel wrote: post #4

Their GH marketplace link (the "Install Lift for Free" CTA) is 404, even when signed into GH: https://github.com/marketplace/sonatype-lift Going up one directory and searching for Sonatype surfaces https://github.com/marketplace/muse-dev which says "Muse is now Sonatype Lift!" --- I do battle with my own company around this stuff all the time -- did not one developer click on that link during such a massive marketing…

seems to work now

Re: Sonatype Lift – a unified code analysis platform

#7

Post by stephen-magill »

egberts1 wrote: post #2

so close but alas … no Python support.

We do support Python. Here's an example of a Python scan: https://lift.sonatype.com/result/smagill-lift-demo/posthog/0... That gives an idea of the sorts of results we flag in Python code, though we don't expect people to interact with that full bug list often. Recommended usage is to enable Lift on a repo and use the pull request integration so you can focus on results related to code changes as they come in.

Re: Sonatype Lift – a unified code analysis platform

#8

Post by [deleted] »

livealight wrote: post #6
mdaniel wrote: post #4

Their GH marketplace link (the "Install Lift for Free" CTA) is 404, even when signed into GH: https://github.com/marketplace/sonatype-lift Going up one directory and searching for Sonatype surfaces https://github.com/marketplace/muse-dev which says "Muse is now Sonatype Lift!" --- I do battle with my own company around this stuff all the time -- did not one developer click on that link during such a massive marketing…

seems to work now

[deleted]

Re: Sonatype Lift – a unified code analysis platform

#9

Post by stephen-magill »

bberenberg wrote: post #5

Any opinions on Lift vs SonarQube? I don't fully understand what the advantages are of one vs the other.

We provide deeper analysis and can surface things like thread safety issues and resource leaks. We also focus very closely on ensuring our tools have low false positive rates and so we tend to have less noisy output. This is especially important when you're using the pull request integration (you don't want a bunch of noise in code review).
Post reply on HN