[Autogenerated] Welcome to Pluralsight and this blue team
tools course diving into sonar cube, a static code analysis.
Open source platform first released back in 2006.
That is developed and maintained by sonar Source, a company based in Geneva.
Switzerland.
Sonya Cube can detect bugs, cold smells,
vulnerabilities and hotspots in over 25 programming languages.
In this course we'll focus on the tools,
static application security testing or sask capabilities.
It is common that security threats increase.
APIs evolve and you members join and leave your developer teams every day.
All these factors call for continuous inspection of your code
base for real and potential security flaws.
Sandra cube allows your devops teams to do just that by integrating the
tool into your existing continuous integration and continuous delivery
pipeline and running it against every build to guarantee high quality
of your code base from a security standpoint in line with miter attack
framework standards.
By the end of this course,
you will learn how to run static analysis against the cold base and
detect vulnerabilities and hotspots also known as potential
vulnerabilities that can then be remedied by developers.
We will concentrate on three major attack techniques that can be detected by
sonar cube During static application security testing,
join me to learn how to unleash the power of sonar cube to discover looming
vulnerabilities and hotspots in source code and ___ them in the bud before
they become gaping security holes to be exploited by malicious hackers who
want to damage your organization