Quality Gate passed with Security rating D

[Colin]

Hey there.

Is your Quality Gate that is applied to the project set to fail if the Security Rating on Overall Code is set to D?

By default, the Quality Gate doesn’t include conditions on Overall Code (only New Code) because we believe that’s where the focus should be. See this interesting post.

Clean as You Code: How to win at Code Quality without even trying

The first time you analyze a legacy project - and here I mean any project older than about two months - the results are usually truly overwhelming. There might be: thousands of Code Smells, hundreds of Bugs, high duplication and - depending on the age and technology of the project - 0% Code Coverage. The usual emotional response to this is fear, sadness… even despair. And then the questions come: Where do I start? How do I pick? Which should I fix first: Bugs, Vulnerabilities, test coverage…? Or…