You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
SonarLint is a free extension for the most popular IDEs, and supports the most used languages. However, the code style sections I checked, only refer to the language developer's code style guides, and there's no mention of Etool's SonarQube or SonarLint anywhere.
That's something we need to work on changing. Too much "how" has leaked into standards and requirements. We need standards that define "what", not "how".
Activity
jeffdoolittle commentedon Feb 25, 2022
Does the current devguide list SonarCube as a requirement? Or as a suggested option for static analysis and code coverage?
coliff commentedon Feb 25, 2022
I think we need to link to the TSDLC Guidelines.
https://sites.google.com/trimble.com/cyber-defense/tsdlc/tsdlc-control-standards-guidelines/tsdlc-guidelines#h.pztn25o1ffz8
jhonkan commentedon Feb 25, 2022
Yes, it's a TSDLC requirement, can be found from TSP as well.
jeffdoolittle commentedon Feb 26, 2022
That's something we need to work on changing. Too much "how" has leaked into standards and requirements. We need standards that define "what", not "how".