Scaling Software Integrity with Automated Code Verification

on YouTube ↗27m

" summary

Wolters Kluwer embeds automated verification into pull requests using SonarQube PR analysis to enforce a single baseline of checks, mandates 80% test coverage for new code, and tightens branch policies and bypass rights so gates actually block merges. AI-assisted workflows generate unit tests and refactorings to meet coverage, reviewer work shifts to higher-value design questions, and overall delivery speeds up rather than slows as technical debt drops and remediation effort falls.

AI-written summary · about

" chapters (21)

1. 0:00Introduction
2. 1:15Meet Paul: DevSecOps Leadership at Wolters Kluwer
3. 1:56Scaling Secure Coding Across a Large Product Portfolio
4. 2:25Non-Negotiables: Security, Code Quality, and Compliance
5. 3:04Standardizing Quality Gates Across All Engineering Teams
6. 3:51Shift-Left Development: Preventing Technical Debt Before Merge
7. 4:09Driving Developer Adoption and Reducing Context Switching
8. 5:37Benefits of Shared Standards Across Engineering Teams
9. 7:29Pull Request Feedback in GitHub and Azure DevOps
10. 9:11Improving Delivery Speed by Reducing Technical Debt
11. 10:39Quality Gate Rules: Debates Around Test Coverage Requirements
12. 11:54Enforcing 80% Test Coverage for New Code
13. 13:11Aligning Engineering Standards with the Sonar Way
14. 14:06Better Peer Code Reviews Focused on Real Value
15. 15:20Balancing Engineering Guardrails with Team Autonomy
16. 16:31Using AI to Support Refactoring and Automated Testing
17. 19:07Scaling Testing and Refactoring with AI Assistance
18. 20:28The Future: Keeping Humans in the Loop for Code Quality
19. 21:55Governance Reality: Quality Gates Not Mandatory Everywhere
20. 22:50Governance Strategy: Mandating Checks and Limiting Bypass
21. 24:49First Step to Adoption: Enable Pull Request Analysis Feedback

" related talks

• 42mSecure or Insecure Code, That Is the QuestionAntonio Calero · Commit Conf 2018
• 19mApplication Security at High VelocityFrancis Potter · GOTO Chicago 2020
• 42mContinuous Security: Integrate security tools into your DevOps PipelineBill Dinger · Build Stuff 2020
• 16mShift Left with GitHub Copilot: Enforcing Code Quality Before the CommitAli Khalil · DevOpsDays Cairo 2025
• 11mLove Your Security Engineer as YourselfAndrey Beshkov · DevOpsDays Moscow 2019
• 40mSecure by Default: Building an AI-Augmented, OSS-Powered Reusable CI/CD PipelineJenisten Xavier · Open Source Summit India 2026
• 23mAI assisted code reviews Quality and Security at ScaleSneha Tuli · AI Native DevCon Fall 2025
• 46mRevolutionizing Automotive Software: DevSecOps, Functional Safety, and Open Source Sy...Hasan Yasar · Automotive Linux Summit @ Open Source Summit Japan 2023