General Motor’s Journey to Adopting Static Analysis With a Legacy Codebase - Seguridad Mania.com - España y América Latina

General Motors (GM) pushes the limits of transportation. This leader in the automotive industry has engineers distributed all over the world and product lines that consist of thousands of small components and complex ECUs. Their challenge was consistently delivering high-quality software that would improve code quality and compliance with coding standards. Hear from James Nicholson, product owner and software architect at GM, on how adopting static analysis enhanced the quality and security of their C programming language codebase. GM tailored this approach by amalgamating the MISRA and CERT coding standards along with GM Standards to create a customized static analysis configuration that aligns with their development requirements. This configuration has been seamlessly integrated into their CI/CD pipeline, enabling the automatic assessment of code quality at every stage of development. Learn how to: • Facilitate a smooth adoption of static analysis. • Enable real-time code quality in your CI/CD pipeline. • Balance strict coding standards and workflow efficiency. • Shift left safety and security testing.