Continuous Inspection of Code Base: Best Practices for Microsoft DevOps Solutions

Continuous Inspection of the Code Base

Question

You are designing the development process for your company.

You need to recommend a solution for continuous inspection of the company's code base to locate common code patterns that are known to be problematic.

What should you include in the recommendation?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

C

SonarCloud is a cloud service offered by SonarSource and based on SonarQube. SonarQube is a widely adopted open source platform to inspect continuously the quality of source code and detect bugs, vulnerabilities and code smells in more than 20 different languages.

Note: The SonarCloud Azure DevOps extension brings everything you need to have your projects analyzed on SonarCloud very quickly.

Incorrect Answers:

A: Test plans are used to group together test suites and individual test cases. This includes static test suites, requirement-based suites, and query-based suites.

https://docs.travis-ci.com/user/sonarcloud/ https://sonarcloud.io/documentation/integrations/vsts/

When it comes to continuous inspection of code base, there are several tools available in the market. However, in the given options, the most suitable solution for this purpose is C. SonarCloud analysis.

SonarCloud is a cloud-based code quality and security analysis tool. It continuously inspects the code base, locates common code patterns that are problematic and provides feedback on issues, bugs, vulnerabilities, code smells, and duplication. It supports several languages including Java, C#, JavaScript, Python, and many more.

SonarCloud can be easily integrated with different tools, including Azure DevOps, Jenkins, GitHub, and GitLab. It provides various reports and dashboards, which can help developers and teams to track the progress of the codebase and identify areas for improvement.

Option A, Microsoft Visual Studio test plans, is a tool for managing test cases and test suites. It is not designed for code inspection or analysis.

Option B, Gradle wrapper scripts, is a tool for building, testing, and deploying applications. It is not designed for code inspection or analysis.

Option D, the JavaScript task runner, is a tool for automating repetitive tasks in JavaScript-based projects. While it can be used for linting and other code quality checks, it is not as comprehensive or specialized as SonarCloud for continuous inspection of code patterns that are known to be problematic.

Therefore, option C, SonarCloud analysis, is the best solution for continuous inspection of the company's code base to locate common code patterns that are known to be problematic.