DevSecOps pour l'embarqué et l'IoT

Introduction

• Smile : a quick overview

• Course organization

• Setting up the training VM

Code

• Good Code vs Bad Code

• Coding Style

• Coding Rules

• Code Review

• Static Code Analysis

• Dynamic Code Analysis

• Complexity

• Unit testing

• Code Coverage

• Conclusion

Inspection Continue

• Technical Debt

• Technical Debt

• Definition Of Done

• Conclusion

• Inspection

• Setting up SonarQube Server

• Setting up SonarQube configuration

• Analyzing source code : First analysis

• Analyzing source code : Going further

• Understanding SonarQube analysis

• Quality Gate

• Fixing issues

Intégration Continue

• Introduction to GitLab-CI

• What is CI/CD ?

• CI/CD with GitLab and external tools

• GitLab-CI : GitLab’s integrated CI/CD

• GitLab-CI for the source code developer

• Viewing pipeline results

• Forcing or skipping pipeline execution

• GitLab Runners

• GitLab-CI for the pipeline developer

• Introduction to YAML

• Defining jobs

• Saving job artifacts

• Organizing jobs into a pipeline

• Defining conditions on pipeline execution

• Organizing YML files

• Defining a system of pipelines

• GitLab-CI for the job developer

• Choosing your runner

• Handling errors

• Caching job data

Let’s build your own quality pipeline

• Your project

• Defining your pipeline architecture

• Let’s go further