Increasing code quality
Typically, developers are too busy to focus on the quality of their code and end up taking advantage of different automated tools to make sure they are producing the best and most secure application possible.
There are two important areas in this space to understand:
- Static application security testing: This allows you to detect vulnerabilities in your code
- Software composition analysis: This allows you to detect vulnerabilities in references to external packages and libraries used in your code
Why use tools to improve code quality?
Developers and testers can only do so much with the time they have available to meet timelines and work on application features. Introducing these tools early allows them to detect bugs and vulnerabilities that could otherwise be costly when the application is released to end users.
There are many well-known third-party tools you can use to scan and assess your code quality. In this chapter, we will use...
