Hands-On Security in DevOps

Static code analysis

Static code scanning analysis is an effective source-level security inspection in CI frameworks, such as Jenkins or Travis. The development team may not fully apply IDE code-scanning plugins to do the secure code analysis. In that case, the static code analysis adoption into the CI framework will help to enforce the secure code scanning for all projects. In other words, the integration with the static security code analysis tools and Jenkins is a must in the development stage.

The following table lists some of the static code analysis tools. You can also refer to Chapter 8, Secure Coding Best Practices, for other suggested tools:

Tools	Supported Programming language	Characteristics
Grep Rough Audit	All ...