Sonarsource

SonarQube Deployment in PBZ

Challenge

Driven by a strong commitment to technical excellence and regulatory compliance, one of the largest Croatian banks recognized the need for a more systematic approach to managing code quality and security. To ensure consistent standards across teams and proactively control potential issues, the bank set out to implement a centralized solution that would provide full visibility and enforce best practices throughout the development lifecycle.

Project Goals

01

Achieve a Higher Standard of Quality

Code produced by internal and external teams should be of high quality, consistently across the whole IT estate.
02

Improve Security and Quality Early

The approach must ensure that quality and security are a priority early in the development cycle.
03

Introduce Standards Across All Teams

A consistent approach for the whole organization is needed.
04

Increase Visibility and Consistency

The improvement process must be transparent and easy to observe, tweak, and control.

Solution

Kodilion supported PBZ through tailored consultations, sharing industry best practices and helping define a structured approach to code quality quality assurance. In addition, we provided clear guidance and developed practical and comprehensive onboarding documentation, enabling the customer’s teams to efficiently adopt and scale the solution across the organization.

Project Deliveries

01

Industry Best Practices and Our Experience

We used proven approaches, including "The Sonar Way" and our own hands-on expertise, to ensure reaching and maintaining higher quality standards.
02

CI/CD Integration Guidance

We provided guidance for CI/CD pipeline integration to support the shift-left approach and ensure early improvements.
03

Organizational Guidance and Standardization

We advised on governance, roles, and workflows, from onboarding to everyday usage - ensuring a controlled and scalable process introduction.

It was great to be able to meet all of the client’s organizational needs. The CI/CD integration was nice and clean, and the workflow works as intended.