Advanced Developer Certification now available with DevSecOps Suite 2.5! Rank all your developers to get a Certification Score.
We spent the last few years analyzing how our developers are writing code, how this is aiding their career progression and how their work is contributing to our project’s and company’s progress as a whole. We have used several project management tools such as Atlassian/Jira and GitHub statistics. We have also analyzed 40+ Security Tools, SAST/DAST software, code management tools. But none of these tools come close to the kind of analytics we wanted to evaluate our developers on. Since we couldn’t find the right tools from enterprise providers such as GitHub and others, we built our own! Now we are offering this to the world, so everyone can benefit from our enhanced analytics, with our own unique take on developer productivity.
Firstly, we used our tools internally to track Weekly lines of code added per repository, Weekly Commits across all repositories, Weekly Pull Requests across all repositories and other low level metrics. We can then run these metrics across a time horizon – last 7-30 days, last 3-12 months, or up to last 1-2 years.
Secondly, when users scan a project, we capture scores such as EPSS, CVSS and assign a severity metric to each of the security issues found. We then associate the code with these corresponding vulnerability statistics. In addition to this mapping, we track users who introduced the vulnerability in the code and assign a custom ranking to the user based on their security practices. We aggregate this score across all their repositories and assign them an Advanced Developer Certification. In addition, we can also show how many High, Medium and Low vulnerabilities the user has introduced across all their code repositories.
Thirdly, if you subscribe to our DevSecOps as an Organizational user (instead of an individual user), you get additional benefits. We have added a hierarchical Organizational Structure view for users, their projects and project dependencies. When a user with the role of an Organization Admin logs in, they are able to view the Advanced Developer Certification for all the developers under their organization, sort them by their scores and view other low level details. This is a key feature that helps your Organization and Developers adhere to security best practices. Over time our reports will help improve the developer’s certification score and in turn improve the security of their projects, their organization and their company as a whole.
We plan to introduce more such metrics and reports to rank your developers based on their security and development practices. Do look forward to these exciting features in an upcoming release!
#developers #analytics #certification #cybersecurity #devsecops #enterprise #organizations #PervazivAI
