Key Results
- Security sensitive projects developed in Java and C
- 500 developers using SonarQube Server for Clean Code checks daily
- Fully integrated into the DevOps tool chain with Bitbucket and Bamboo
- Easily integrated into the developer IDE with SonarQube for IDE
- Early detection of security vulnerabilities and Security Hotspots
- Increased efficiency and visibility for security team and IT department managers
The challenge
Security is the most important thing for this multinational automotive manufacturing corporation. Software projects developed for customers and joint venture partners often process highly sensitive data, such as car usage or owner information, that has the highest security priority. As more and more projects and applications are migrated to the public cloud, which comes with additional security challenges and compliance rules, teams need to know if their code is absolutely secure before any project can be delivered or made public.
The solution
SonarQube Server Enterprise Edition was selected by this Fortune Global 500 company to measure the quality and security of all its code and to detect and remediate vulnerabilities as early as possible. SonarQube Server is seamlessly integrated into a DevOps tool chain that is used by 500 developers in their daily work. By focusing on new code and following the Sonar “Clean as You Code” methodology, security issues are prioritized from the beginning, even for legacy projects. Developers have also installed SonarQube for IDE in their IDE to constantly learn and to conveniently scan code before submission.
The results
SonarQube Server enables the development teams to measure their code delivery against a well-established clean code standard on a daily basis. The security team and IT department managers have better visibility and are highly satisfied about the positive trends: The overall code quality increases and fewer vulnerabilities are detected in the final review just prior to delivery. With SonarQube Server and SonarQube for IDE, developers have the confidence that what they deliver is secure, high quality code that continually meets the team's and customer's standards.
