Coding Requirements in Vendor Assessment and Evaluation Framework

For coding requirement which can be automated with CI build pipelines using the SonarQube and set the below parameters:

Quality Gates Passed
Duplicated Line on New Code 5%
Duplicated Blocks 5
Issues Less than or equals to 5

  • Blocker 0
  • Critical 0
  • Major 10
  • Minor 20

Reliability Rating New Code B
Security Rating New Code B

  • Security Hotspots Reviewed 95%
  • Checkmarks – 1. High Vulnerabilities 0
  • Checkmarks – 1. Medium Vulnerabilities less than or equals to 4
  • Checkmarks – 1. Low Vulnerabilities less than or equals to 4

Code Smells less than or equals to 5
Bugs less than or equals to 5

  • Maintainability Rating (SQALE Rating) A

Coverage on Code – SonarQube 80%
Automation Testing – Unit Test, E2E Tests 80%
Automated Regression Testing 90%
Deployment Failure Rate less than 15%

These are a few metrices for your coding requirements to be passed as quality. Feel free to review and update in comments if any further questions or suggestions.

Leave a Reply

Your email address will not be published. Required fields are marked *