SonarQube

SonarQube an open-source platform for continuous inspection of code quality to perform automatic reviews with static analysis of code to detect bugs, code smells, and security vulnerabilities

All projects should be scanned and assessed before being handed over to business partners.