Managing Code Quality and Security Policies with Azure DevOps

This lesson explores how to manage code quality and security policies with Azure DevOps, and will help those preparing for Microsoft's AZ-400 exam.

It starts by examining the definition of code quality and how to write high-quality code. Next, we’ll look at what goes into code quality scanning and at how SonarCloud can help monitor code quality, and you'll see a hands-on demonstration that shows you how to use SonarCloud in the pipeline.

You'll learn what code coverage means and how to use the “Publish Code Coverage Results” task to report on code coverage. This lesson also covers security policies, including OWASP and its Top-10 list, as well as looking at a couple of popular security analysis tools.

If you have any feedback relating to this lesson, feel free to get in touch with us at support@cloudacademy.com. Any URLs referenced during this lesson can be found in the relevant lecture transcripts.

Learning Objectives

• Understand what high-quality code is and how to write quality code
• Learn how to monitor code quality
• Learn how to report on code coverage
• Learn about the OWASP Top Ten
• Understand how security analysis tools can be used in conjunction with Azure DevOps to check code for vulnerabilities
• Learn how to configure SonarCloud in a pipeline

Intended Audience

This lesson is intended for those who are preparing for the AZ-400 exam, or anyone who wants to learn more about managing code quality and security policies with Azure DevOps.

Prerequisites

To get the most from this lesson, you should have a basic understanding of Microsoft Azure and of DevOps concepts.