An important tool to implement Secure SDLC practices
September 22, 2021

An important tool to implement Secure SDLC practices

Sharique Khan | TrustRadius Reviewer
Score 9 out of 10
Vetted Review
Verified User

Overall Satisfaction with SonarQube

SonarQube is the static security code analysis tool used in the organization. It is integrated with Continuous Integration pipelines of multiple product lines including legacy and modern applications. It has been implemented with TeamCity, Azure DevOps and VSTS CI/CD tools. Its purpose is to ensure the builds are of the highest quality and free of security vulnerabilities.

Pros

  • Customizable Ruleset
  • Support multiple programming stacks
  • Ease of integration with multiple CI/CD tools

Cons

  • Admin Portal could have more usability
  • Enhanced Reporting
  • More live examples and samples
  • Security Ruleset
  • Ease of integration with CI CD tools
  • Intelligent Reporting
  • Better Quality Code Output
  • Enhanced secure coding implementation
  • Increase efficiency of the development team

Do you think SonarQube Server delivers good value for the price?

Yes

Are you happy with SonarQube Server's feature set?

Yes

Did SonarQube Server live up to sales and marketing promises?

Yes

Did implementation of SonarQube Server go as expected?

Yes

Would you buy SonarQube Server again?

Yes

SonarQube is well suited to implement Secure SDLC and incorporate the best secure coding practices. It would ensure adherence to the organization's coding standards and have uniform code across various development teams. It enables early identification and remediation of security flaws in the code

Comments

More Reviews of SonarQube Server

  1. Home
  2. Static Application Security Testing (SAST) Tools
  3. SonarQube Server Reviews
  4. User Review of SonarQube Server