From the course: Static Application Security Testing

Unlock the full course today

Join today to access over 24,400 courses taught by industry experts.

Static code analysis

Static code analysis - SonarQube Tutorial

From the course: Static Application Security Testing

Start my 1-month free trial Buy for my team

Static code analysis

“

- [Narrator] I've said it before and I'm going to keep saying it. When it comes to application security testing, especially static code analysis, automation is where it's at. The only way you're going to achieve the coverage you need to secure your source code, is by adding automated scanners to the mix. But there are a lot, and I mean a lot of code security scanners to pick from. How do you know which scanner to use? The best place to start is with the programming language that you'll be assessing, oh, sorry did I say language? I meant languages. During the documentation review, you should have uncovered the languages that the development team or teams are using. This information is essential when it comes to selecting the tool or tools that you'll use to perform automated static source code security testing. Take these three tools for example. If you've ever tested Python apps for security flaws, then you may…

Contents