You're reading from Learning DevOps A comprehensive guide to accelerating DevOps culture adoption with Terraform, Azure DevOps, Kubernetes, and Jenkins

Product type Paperback

Published in Mar 2022

Publisher Packt

ISBN-13 9781801818964

Length 560 pages

Edition 2nd Edition

Tools

Azure

Concepts

DevOps

Author (1):

Mikael Krief

View More author details

Table of Contents (25) Chapters

Preface

1. Section 1: DevOps and Infrastructure as Code

2. Chapter 1: The DevOps Culture and Infrastructure as Code Practices FREE CHAPTER

3. Chapter 2: Provisioning Cloud Infrastructure with Terraform

4. Chapter 3: Using Ansible for Configuring IaaS Infrastructure

5. Chapter 4: Optimizing Infrastructure Deployment with Packer

6. Chapter 5: Authoring the Development Environment with Vagrant

7. Section 2: DevOps CI/CD Pipeline

8. Chapter 6: Managing Your Source Code with Git

9. Chapter 7: Continuous Integration and Continuous Delivery

10. Chapter 8: Deploying Infrastructure as Code with CI/CD Pipelines

11. Section 3: Containerized Microservices with Docker and Kubernetes

12. Chapter 9: Containerizing Your Application with Docker

13. Chapter 10: Managing Containers Effectively with Kubernetes

14. Section 4: Testing Your Application

15. Chapter 11: Testing APIs with Postman

16. Chapter 12: Static Code Analysis with SonarQube

17. Chapter 13: Security and Performance Tests

18. Section 5: Taking DevOps Further/More on DevOps

19. Chapter 14: Security in the DevOps Process with DevSecOps

20. Chapter 15: Reducing Deployment Downtime

21. Chapter 16: DevOps for Open Source Projects

22. Chapter 17: DevOps Best Practices

23. Assessments

24. Other Books You May Enjoy

Analyzing code with SonarCloud

In Chapter 12, Static Code Analysis with SonarQube, we explained the importance of implementing static code analysis practices. For open source projects, code analysis is more important because the source code and its binaries are published publicly.

One of the roles of open source is to provide code and components that can be used in enterprise applications, so this code must be written correctly and without any security issues.

Previously in this book, we have discussed the fact that SonarQube, with its installations and uses, is one of the major tools that allows code analysis to take place for enterprise applications. However, it requires an on-premises infrastructure to be installed, which is more expensive for a company.

For open source project code analysis, it is possible to use SonarCloud (https://sonarcloud.io/), which is the same product as SonarQube but comes in a cloud solution that requires no installation.

SonarCloud has a free...