4 of 4 SonarQube Jobs in Yorkshire

Proficiency in AngularJS, Jenkins, Karate, Node 10, Groovy, Bash, Typescript. Knowledge of Gherkin, Cypress, Jest Tooling: Gitlab, Jenkins, CloudFormation, Maven, Docker, Fortify on Demand, SonarQube AWS DevOps Engineer certification or above. Understanding of software development life cycle. Ability to apply secure coding practices. Experience with CI/CD pipelines. ...

Proficiency in AngularJS, Jenkins, Karate, Node 10, Groovy, Bash, Typescript. Knowledge of Gherkin, Cypress, Jest Tooling: Gitlab, Jenkins, CloudFormation, Maven, Docker, Fortify on Demand, SonarQube AWS DevOps Engineer certification or above. Understanding of software development lifecycle. Ability to apply secure coding practices. Experience with CI/CD pipelines. Knowledge ...

Groovy pipeline steps for build, test, package, and deployment phases. Python Tooling: Extend Python scripts for SLSA provenance, SBOM generation, and security scan aggregation (SonarQube, SAST, etc.) Optimization: Enhance performance through parallel builds, caching, and dependency prefetching Integrity & Security: Ensure artifact integrity via SHA-mapping and reproducible inputs while …/YAML processing and tooling scripts. Security & Compliance: Deep understanding of supply-chain security, including SLSA, CycloneDX SBOM, and digests . Tooling: Proficiency with SonarQube, Sonatype IQ, and container/SAST scanning. Packaging: Knowledge of Maven, NPM, Python packaging, and exposure to Helm/Terraform. 🌟 Why Apply? This ...

pipeline steps (build, test, package, scan, deploy). Extend Python tooling for SLSA provenance, SBOM generation, hash/digest accuracy, and security scan aggregation (SonarQube, Sonatype IQ,SAST/Container). Optimize performance (parallel builds, caching, scope-reduced BOMs, dependency prefetch). Ensure artifact integrity (correct SHA1/SHA256 …/Python packaging knowledge; exposure to Helm/Terraform and container image metadata. Supply-chain security (SLSA, CycloneDX SBOM, digests). Experience with SonarQube, Sonatype IQ, container and SAST scanning. Proven performance tuning (caching, parallelization, dependency pruning). Compliance Awareness. ...