Skip to main content

Posts

Showing posts with the label SonarQube Security Analysis

How can we do the Security Analysis using SonarQube?

​ For Security Analysy purposes, a source code security analyzer - examines source code to - detect and report weaknesses that can lead to security vulnerabilities. They are one of the last lines of defense to eliminate software vulnerabilities during development or after deployment. A Source Code Security Analysis Tool Functional Specification is available. The SonarQube Quality Model has three different types of rules: Reliability (bug), Vulnerability (security), and Maintainability (code smell) rules. But divided another way, there are only two types: security rules, and all the rest. Read more click here Reference:- This article was originally posted on scmGalaxy.com Virus-free. www.avast.com