Why: We want our customers to eliminate all possible vulnerabilities even at the start of development stage. We want them to develop without worrying about exposing sensitive lines on their code.
How: By implementing asynchronous testing and notification when the tests are done and when a vulnerability is found.
What: For code scanning: Use sonarqube, Dependency Checker, and other SAST Tools to identify where is the vulnerability
3 years ago
3 years ago