Open jhonkan opened 2 years ago
Does the current devguide list SonarCube as a requirement? Or as a suggested option for static analysis and code coverage?
I think we need to link to the TSDLC Guidelines. https://sites.google.com/trimble.com/cyber-defense/tsdlc/tsdlc-control-standards-guidelines/tsdlc-guidelines#h.pztn25o1ffz8
That's something we need to work on changing. Too much "how" has leaked into standards and requirements. We need standards that define "what", not "how".
SonarLint is a free extension for the most popular IDEs, and supports the most used languages. However, the code style sections I checked, only refer to the language developer's code style guides, and there's no mention of Etool's SonarQube or SonarLint anywhere.