Clean Code’ is a simple concept rooted in common sense. This software writing principle cropped up some 50 years ago and might seem quaint in today’s era of speedy software development. Related: Setting IoT security standards At Black Hat

Black Hat Fireside Chat: Why using ‘Clean Code’ is paramount in speedy software development

Global Code Analysis Tool: Scope of the Report: Our comprehensive market analysis delves into the Global Code Analysis Tool Market, providing profound insights into its dimensions, emerging trends ...

Code Analysis Tool Market Forecast 2023-2030: Global Outlook | SonarSource, Kiuwan, Morphis Tech

The report titled Development Analytics Tools Market 2023-2030 has recently been added by Infinity Business Insights to get a stronger and more effective business outlook. This includes ...

Development Analytics Tools Market Size 2023 by Share, Financial Summary, and Growth Opportunity to 2030 | SonarSource, GitPrime, Waydev

Attackers could remotely leverage a critical TeamCity CI/CD server vulnerability to facilitate arbitrary code execution and server takeovers, according to SecurityWeek.

Server hijacking likely with exploitation of critical TeamCity vulnerability

"The SQL injections were exploitable and had the ability to disclose the PostgreSQL server's version and execute arbitrary commands on the system," said SonarSource, which recently identified ...

RCE attacks possible with Gentoo Soko SQL flaws

Critical SQL injection vulnerabilities found in Gentoo Soko! Exploiting these flaws could lead to remote code execution (RCE) on affected systems.

Critical SQL Injection Flaws Expose Gentoo Soko to Remote Code Execution

The MarketWatch News Department was not involved in the creation of this content. Jun 16, 2023 (Heraldkeepers) -- The Static Code Analysis Software Market is an in-depth marketing research that examines primary and secondary market drivers, market share ...

Static Code Analysis Software Market Overview 2023 to 2030, Future Trends and Forecast | SonarSource S.A, Coverity, JetBrains

And the good folks at SonarSource found a nasty, potential supply chain attack in this tool, when used in the Packagist repository. The problem is the support for arbitrary README filenames.

Wireless Hacking

With this investment, Permira is the third largest shareholder in the company, following Bain Capital and Maverick Capital.

Permira to invest in cybersecurity firm BioCatch

Reviewpad, the platform that helps developers by automating the code review process, has raised a €1M pre-seed round.

Artificial Intelligence: Reviewpad Raises €1M to Streamline Code Reviews by Leveraging AI Tech

Reviewpad raises €1M to streamline code reviews with AI

SonarSource has four "go to market motions." The first is product-led sales in which customers use the product and call the company to buy a more robust version. Another motion is top-down mandates from a company's head of application development or security, Gaudin explained.

4 Leadership Lessons From a $200 Million, Fast-Growing, Profitable Startup

SonarSource

The wrong regex can cause your app to overflow the stack and crash but detecting the condition doesn't have to be hard.

Avoid Stack Overflows By Writing Regexes Properly

Eliminating complexity & ensuring correct boundaries in your Java regular expressions.

Getting Regex Boundaries Right: A How-To Guide

Regular expressions are a powerful tool with a steep learning curve and plenty of opportunities to make mistakes - particularly in character classes.

Regexes or Regular Expressions And The Common Mistakes Programmers Make While Using Them

The rise of developer-led security doesn't put security professionals out in the code; it frees them to do more meaningful work.

Developer-Led Code Security Will Dominate the SAST Market

There are two basic classes of code security issues: the ones you can know for certain are a problem, and the ones that depend on context and need human review.

Developer-led Security: Hotspots Continue To Maintain Engagement

Developers don't have time for false positives, so SonarSource makes sure that when SonarQube or SonarCloud raises an issue, you know there's something to fix.

Why we Prefer "Reasonable" False Negatives to Raising False Positives 

Developer-led Code Security takes the pain out of SAST analysis

SAST Analysis: No Angst Edition

Hey SonarQube and SonarCloud users! You now have a tool to own Code Security! 

Review and Improve Your Code Security Analysis in SAST

As developers, there always comes a time when we find a bug in production and wonder how it passed all our quality checks. The truth is that we can never be sure our code is bug free. We can only choose the tools and workflows which will find the most bugs without slowing us down too much.

The Ultimate Guide To Hassle Free Bugs Fixing In Premium Python Projects By SonarCloud 

Author Robert Collier said that "Success is the sum of small efforts repeated day in and day out." That's especially true when it comes to security. 

For secure code, maintainability matters

Libraries and system utilities form the foundations on which larger projects are built. So it's critical to make sure they, in particular, are secure. That's why we recently introduced five new rules for C++ and C to detect broken authentication and access control in *nix systems. The new rules fall into three categories: account validity, granting permissions, and changing directories. 

Lay a strong foundation by writing secure C and C++ utilities

When writing a rule for static analysis, it’s possible that in some cases, the rule does not give the results that were expected. Unfortunately, naming a false positive is often far easier than fixing it. In this post, I’ll discuss how the different types of rules give rise to different types of false positives, which ones are easier to fix than others, and how you can help. I’ll end with insight into how issues that are false positives can still be true indicators that the code needs to change.

False positives Are Considered Enemies, But Can They Be Your Friends?

SonarSource S.A. designs and develops software solutions. The Company offers quality management software products. SonarSource serves customers in Switzerland.

SONARSOURCE

sonarsource.com

Since 2008

SONARSOURCE

EVERGREEN INDEX #1870

SonarSource's stories on HackerNoon

Avoid Stack Overflows By Writing Regexes Properly

Getting Regex Boundaries Right: A How-To Guide

Regexes or Regular Expressions And The Common Mistakes Programmers Make While Using Them

Developer-Led Code Security Will Dominate the SAST Market

Developer-led Security: Hotspots Continue To Maintain Engagement

Why we Prefer "Reasonable" False Negatives to Raising False Positives

SAST Analysis: No Angst Edition

Review and Improve Your Code Security Analysis in SAST

The Ultimate Guide To Hassle Free Bugs Fixing In Premium Python Projects By SonarCloud

For secure code, maintainability matters

Lay a strong foundation by writing secure C and C++ utilities

False positives Are Considered Enemies, But Can They Be Your Friends?

SonarSource's latest news & mentions

Black Hat Fireside Chat: Why using ‘Clean Code’ is paramount in speedy software development

Code Analysis Tool Market Forecast 2023-2030: Global Outlook | SonarSource, Kiuwan, Morphis Tech

Development Analytics Tools Market Size 2023 by Share, Financial Summary, and Growth Opportunity to 2030 | SonarSource, GitPrime, Waydev

Server hijacking likely with exploitation of critical TeamCity vulnerability

RCE attacks possible with Gentoo Soko SQL flaws

Critical SQL Injection Flaws Expose Gentoo Soko to Remote Code Execution

Static Code Analysis Software Market Overview 2023 to 2030, Future Trends and Forecast | SonarSource S.A, Coverity, JetBrains

Wireless Hacking

Permira to invest in cybersecurity firm BioCatch

Artificial Intelligence: Reviewpad Raises €1M to Streamline Code Reviews by Leveraging AI Tech

Reviewpad raises €1M to streamline code reviews with AI

4 Leadership Lessons From a $200 Million, Fast-Growing, Profitable Startup

SonarSource's Related Companies

2017

Representing this company? Click here to claim and customize this page!

Reviews About SonarSource

SonarSource WIKI

Apply to get your Tech Company News Page live on HackerNoon.com today!

Light-Mode

Classic

Newspaper

Dark-Mode

Neon Noir

Minty

HN StartUps