Systems | Development | Analytics | API | Testing

The cloud-based GitLab CI/CD platform allows development teams to streamline their Continuous integration (CI) and Continuous Delivery (CD) pipelines and accelerate their Software Development Lifecycle (SDLC). Adding strict, compliance-based static analysis — as provided by Helix QAC — as new stages to existing GitLab CI/CD pipelines will enhance the SDLC still further, and move your DevOps workflows from Continuous Integration to Continuous Compliance.

The latest release of Helix QAC and Klocwork features significant improvements to the static analysis tools, empowering development teams to shift left by fixing errors early, reducing development costs and releasing faster. Here, we provide an overview of the new features and functionality of the 2024.2 release.

Since HP ALM/Quality Center was acquired by Micro Focus (and now Open Text), users have been outgrowing its functionality. While HP upgraded many of its solutions to be more compatible with Agile and to support automation, ALM/Quality Center was left behind. What was once considered a best-in-class solution is becoming more obsolete by the day, having no resources allocated to development and limited support for customers. Today, there are better ALM options available.

Technology is booming now more than ever, and every day brings new products and functionality for every unimaginable task. It is not just about mobile apps and computers anymore; instead, it is all about embedded systems and Internet-of-Things (IoT) devices that have quickly become so commonplace, both in our day-to-day lives and in industries like industrial automation.

Quality gates are just what they sound like: They ensure the delivery of high-quality software by serving as quality milestones (or “gates”) during various stages of the software development lifecycle (SDLC), preventing bad code from passing through. Here, we explain what are quality gates, how they work, and how to implement them using static analysis. Read along or jump ahead to the section that interests you most: Manage Your ci/cd pipeline with Static Analysis.

Testing is an essential part of any software deployment project, whether a new eCommerce gateway or migrating from SAP ECC to S/4HANA. But ERP testing SAP and other packaged applications differs from standard web or mobile application testing.

GitLab SAST is a combination of GitLab— an integrated solution that covers the entire DevOps lifecycle — and, Klocwork — a static code analysis and SAST tool. When used together, these tools provide software development teams with a powerful GitLab SAST solution. Here we explain the benefits of GitLab SAST.

Having a dedicated branching strategy is key for teams wanting to speed up their workflows, meet tasks on a deadline, and reduce code errors. But with all the different branching strategies – including release branching, trunk-based branching, feature branching, and more – it can be difficult to determine which one best fits your team’s needs.

NASA Jet Propulsion Laboratory’s Laboratory for Reliable Software developed a set of code guidelines for developing safety-critical code. The NASA's 10 rules are intended to eliminate C coding practices that make it difficult to review or properly analyze with static analysis tools. Enforce NASA's 10 Rules With Klocwork.