MMamatha BandiOct 9 · 5 min readJenkins Installation and Understanding CI/CDWhat is Jenkins? Jenkins is an open-source automation server written in Java. It is widely used to automate tasks such as building, testing, and deploying applications. Before using Jenkins, we learnemamathab.hashnode.dev
MMamatha BandiOct 8 · 5 min readMaven Installation and SetupWhat is Maven? Maven is a build tool mainly used for Java projects. It helps us to: Build the Java project Download and manage dependencies Run tests Create the final WAR or JAR file Maven is anmamathab.hashnode.dev
GGeorge EzejioforSep 23 · 26 min readTekton, Cosign, Kyverno: A Signed CI/CD Supply Chain on RKE2Introduction The Workshop Where Trust Is Manufactured Here's a confession I'll make out loud: I was running code I'd never read, built by people I've never met, pulled from a registry I don't control—georgeezejiofor.com
MManu ShuklaAug 22 · 14 min readSecrets Manager's Jenkins and SonarQube rotation, 11 August 2026, needs a publicly reachable controllerSecrets Manager's Jenkins and SonarQube rotation, 11 August 2026, needs a publicly reachable controller Summary. On 11 August 2026 AWS extended Secrets Manager managed external secrets to two new secrecorpit.hashnode.dev
SSAI PRANEETH BHATTUJun 12 · 10 min readIntegrating SonarQube with Jenkins for Continuous Code Quality AnalysisWhat SonarQube Actually Does SonarQube is an open-source platform for continuous code quality and security. When it scans your code, it looks for: Bugs - code that will likely produce incorrect behavsaipraneethbhattu.hashnode.dev
PPravin KhandkeMay 4 · 10 min readClean Code at Scale: How Sonar Became Our Silent ReviewerThe pull request was three hundred lines of Java, touching seven files across two modules. A senior developer had reviewed it, left a dozen comments, and approved. But the build failed — not because opravin-khandke.hashnode.dev
GGopinath KarunanithiApr 28 · 27 min readHow to Apply STRIDE Threat Modeling and SonarQube Analysis for Secure Software DevelopmentSecure software requires both design-time and code-time protection. STRIDE threat modeling helps identify risks early in system design, while SonarQube enforces secure coding practices through static freecodecamp.org
SSarthak-code786Apr 19 · 3 min readFrom Auto Deployment to Controlled Deployment: Integrating SonarQube Quality GatesI thought my CI/CD pipeline was complete. Build ✔Docker ✔Deployment ✔ Everything was working end to end. Then I added one more step: Code quality. Introducing Code Quality into the Pipeline To make tjourneyindevops.hashnode.dev
HHardik AroraMar 29 · 5 min read🛡️Educonnect: A Deep Dive into Cloud-Native Security & K3s Orchestration"If you can't measure it, you can't secure it." In this post, I’m pulling back the curtain on the EduConnect CI/CD pipeline. We aren't just looking at code; we are looking at real-time security telem1hardik0811arora.hashnode.dev
TThankGod Chibugwum OboboMar 29 · 10 min readShift-Left Testing: How to Automate QA/QC Pipelines with SonarQube and GitHub ActionsFinding a bug in production costs significantly more to fix than catching it during development. This is the core argument behind shift-left testing, the practice of moving quality checks earlier in tactocodes.hashnode.dev
