What is the difference between Bug, Vulnerability, and Code Smell in SonarQube? · ORA·tech