WEBVTT

00:00:05.570 --> 00:00:07.900
[Autogenerated] Welcome to Pluralsight and this blue team

00:00:07.900 --> 00:00:12.080
tools course diving into sonar cube, a static code analysis.

00:00:12.090 --> 00:00:15.700
Open source platform first released back in 2006.

00:00:15.710 --> 00:00:20.150
That is developed and maintained by sonar Source, a company based in Geneva.

00:00:20.150 --> 00:00:20.830
Switzerland.

00:00:22.240 --> 00:00:25.040
Sonya Cube can detect bugs, cold smells,

00:00:25.050 --> 00:00:29.030
vulnerabilities and hotspots in over 25 programming languages.

00:00:29.940 --> 00:00:32.229
In this course we'll focus on the tools,

00:00:32.240 --> 00:00:35.660
static application security testing or sask capabilities.

00:00:37.590 --> 00:00:39.810
It is common that security threats increase.

00:00:40.110 --> 00:00:44.630
APIs evolve and you members join and leave your developer teams every day.

00:00:45.490 --> 00:00:48.970
All these factors call for continuous inspection of your code

00:00:48.970 --> 00:00:51.850
base for real and potential security flaws.

00:00:52.770 --> 00:00:57.150
Sandra cube allows your devops teams to do just that by integrating the

00:00:57.150 --> 00:01:00.690
tool into your existing continuous integration and continuous delivery

00:01:00.690 --> 00:01:04.560
pipeline and running it against every build to guarantee high quality

00:01:04.560 --> 00:01:08.730
of your code base from a security standpoint in line with miter attack

00:01:08.740 --> 00:01:09.780
framework standards.

00:01:11.760 --> 00:01:12.940
By the end of this course,

00:01:12.950 --> 00:01:16.650
you will learn how to run static analysis against the cold base and

00:01:16.650 --> 00:01:20.230
detect vulnerabilities and hotspots also known as potential

00:01:20.230 --> 00:01:23.970
vulnerabilities that can then be remedied by developers.

00:01:25.060 --> 00:01:29.670
We will concentrate on three major attack techniques that can be detected by

00:01:29.670 --> 00:01:32.850
sonar cube During static application security testing,

00:01:34.140 --> 00:01:39.100
join me to learn how to unleash the power of sonar cube to discover looming

00:01:39.100 --> 00:01:43.620
vulnerabilities and hotspots in source code and ___ them in the bud before

00:01:43.620 --> 00:01:47.810
they become gaping security holes to be exploited by malicious hackers who

00:01:47.810 --> 00:01:49.340
want to damage your organization