Code Analysis and Review Needs from NIST SSDF framework

SAMMY UI is optimized for resolutions with a width 1024px and higher.

PW.7.2: Code Analysis and Review Process

Code Analysis and Review Needs

PW.7.1: Determine whether code review (a person looks directly at the code to find issues) and/or code analysis (tools are used to find issues in code, either in a fully automated way or in conjunction with a person) should be used, as defined by the organization.

Example 1: Follow the organization’s policies or guidelines for when code review should be performed and how it should be conducted. This may include third-party code and reusable code modules written in-house.
Example 2: Follow the organization’s policies or guidelines for when code analysis should be performed and how it should be conducted.
Example 3: Choose code review and/or analysis methods based on the stage of the software.

Description

Determine whether code review (a person looks directly at the code to find issues) and/or code analysis (tools are used to find issues in code, either in a fully automated way or in conjunction with a person) should be used, as defined by the organization.