Do you use automated code review tools in your org? If so, what are your recommendations?

Software Development Quality, Testing and Security

412 views1 Upvote2 Comments

Sort by:

Senior Director Of Technology in Softwarea year ago

We use SonarQube for finding issues and vulnerabilities in our code. It does static code analysis and helps us with a meaningful report too.

1

Director of Engineering in Hardwarea year ago

hello - we only only use a tool in India at this time - Hirepro.

1

Content you might like

When securing your mobile application(s), which of the following is your #1 priority to protect?

Your core data44%

Your cryptographic keys45%

Your proprietary code9%

Other (please comment below)

View Results

Software Engineers often get pegged as the team that says “no” or “that’s impossible”. How do you maintain a strong and trusting relationship with the product team while continuing to reset their expectations?

Read More Comments

Any tips for establishing a security champions program for the software team? If you’ve done this, did you run into any internal pushback or skepticism?

Read More Comments

Has DevSecOps taken off as a concept?

Yes, teams are implementing it56%

Not yet36%

No, and it won't5%

Not sure1%

View Results

How are you tracking developer feedback/sentiment? Do you tie those metrics in with overall productivity measurements?