ShiftLeft is a known concept that focuses on finding and preventing defects and security vulnerabilities early in the software development process. If security is a priority, shifting left should be too. In this 5 min. video, we walk through how to shift left by combining VS Code and CodeSecure. It uses Gitlab for the CI/CD part, but more importantly, it allows developers to perform a local build which most embedded developers prefer to ensure the code is in good before issuing merge requests. CodeSonar can fit into workflows and check for both security issues as well as MISRA violations.
