To currently enhance the security posture of our application environment to comply with STIG

[ganncamp (G Ann Campbell)]

Hi,

You may find this useful:

Can SonarQube scan the source code for FIPS 140-2 compliance?

Hello, We are working on two topics related to FIPS these days: Support running SonarQube in a FIPS-enforced environment Map our existing security rules to this particular STIG U_ASD_V5R3_STIG STIG Application Security and Development Security Technical Implementation Guide If our understanding of the FIPS 140-2 compliance is correct, to be compliant with FIPS everything you use to make and run your software must comply with the 240+ STIGs. When we looked at these 240+ STIGs, only the U_ASD…

 
HTH,
Ann