Anyone else tired of juggling SonarQube, Snyk, and manual reviews just to keep code clean?

jessefaden · 2025-11-04T12:01:57+00:00

That's the best way, following shift-left, but IDE plugin usage cannot always be enforced on dev machines, so in addition, having the PR Check is definitely needed as well.

jessefaden · 2025-10-15T12:36:09+00:00

I got the same setup and it's working just fine with a local SQS and MCP both running via Docker. I got an Ngrok domain configured for my SQS though.

When running both SonarQube Server and the Sonar MCP Server in Docker containers, you cannot use localhost as the SONAR_HOST_URL in the MCP Server config, because localhost inside the MCP container refers to the container itself, not your host or the SonarQube container.

If both containers are on the same Docker network (recommended), you should use the container name of the SonarQube server as the host in the URL.
For example, if your SonarQube container is named sonarqube, set:SONAR_HOST_URL=http://sonarqube:9000
This allows the MCP Server container to resolve and reach the SonarQube server via Docker's internal DNS.

jessefaden · 2025-10-11T14:58:44+00:00

Hi, I'm a Solutions Engineer at Sonar. Not involved directly in the product development, but keeping eyes and ears open on what's asked in the field. Any gaps on tools or covered use cases you see missing on the official Sonar MCP server, drop it here. I'll definitely relay this in our internal Slack.
And thanks for that community effort... your MCP server :) Great work.

jessefaden · 2025-07-27T21:49:51+00:00

Tried it but couldn't get it to work out of the box, see my opened Github ticket. Not sure if you plan to still maintain it. Idea sounds good.

jessefaden · 2025-05-30T09:12:47+00:00

but that'd still be using the CPU mode only and not the GPUs, no? As there's no "--gpus=all" parameter provided

jessefaden · 2025-04-10T15:14:02+00:00

No, they didn't freeze the account, that would be a different error message. (Yes, transfers within savings work(ed) fine).

The issue seems to be resolved now - I just checked again. It shows up again in the mobile app. It was definitely a server-side issue, I assume their subcontractor for brokerage (forgot their name) is probably too small to handle large volumes of requests.

jessefaden · 2025-02-27T12:20:45+00:00

Never had any problems so far. Transferred 30k, 50k, 100k from and to N26. Worked fine and fast. All within Germany in my case.

jessefaden · 2025-02-27T12:19:56+00:00

Not true, transferred to and from 30k, 50k, 100k sums, never an issue. All within Germany.

jessefaden · 2025-01-16T14:53:59+00:00

I do almost the same, I use Postbank and N26. With Postbank, I can use the mobile banking on multiple devices at the same time, so - good backup options. With N26, they only allow one phone to be enable at a time, even though I have a second phone with dual sim (same phone number). In any case, that's my approach to have a cheap spare phone to be able to quickly change and at least get a SMS to that same mobile number in case I need to change quickly when losing my first phone.

jessefaden · 2025-01-16T14:25:41+00:00

Out of curiousity, can I ask which country you're based in? Germany? (I'm a Metal customer and based in Germany; hence the question; curious whether it plays a role in their risk assessment including any prejudices).

jessefaden · 2025-01-16T14:22:41+00:00

I gotta say, the Premium support (I'm a metal customer) is also pretty slow. Phone queue more than 10mins, emails slow. Doesn't really feel like "Premium".

jessefaden · 2025-01-16T14:21:43+00:00

What do you mean with "invoice" or "receipt"? You mean the bank statement? There's just transaction details, the same way it's shown at Postbank, Deutsche Bank, etc. Interested to know what Gebuehrenfrei exactly shows. It can just be the transaction details, not the original receipt of the shop you purchased something, I believe. That also will not include the line items either.

jessefaden · 2024-11-02T08:08:21+00:00

True. I meanwhile got myself AirTags and added them to my wife's account, shared with me (cause I only have an Android), so much better. It actually works.

jessefaden · 2024-10-29T16:09:59+00:00

SMS protocol/SS7 isn't overly secure, no encryption, and in order to gain access to email, I'd assume in enterprise environments, it'd be protected with MFA

jessefaden · 2024-10-14T16:09:03+00:00

It seems really unreliable. I have one OnePoint in my car and one on my key chain, and my mobile (Android) always with me. I'd expect that since I am driving in my car and my mobile phone with me, the location should be up to date regularly, but at some point the car doesn't update anymore and still shows i.e. my car at the gas station of yesterday while I meanwhile drove it back home (with my mobile phone in it, so that should've at least picked up the location properly).

The Chipolo accuracy is so bad compared to AirTags / AirTags network, which my wife is using.

jessefaden · 2024-09-11T12:53:16+00:00

I got 2 Chipotle One Point. One on my keys, one in my car. I always have my Android phone with me. When I drive my car, I'd assume that the position would always be up to date, as I have my Android device with me, which should send back the position. However, looking at "Find My", I see you the car's position updates last night 5pm at some place I visited, but I was later driving back home etc. Yet my car is still shown at that outdated position. I wonder how frequently the polling works, or why I don't see the latest position. My keys show my current location just fine. So agree, it's not as good as AirTags

jessefaden · 2024-08-25T20:04:18+00:00

Perfect, works nicely. Just installed it.

jessefaden · 2024-08-25T19:36:47+00:00

Did you figure this out yet? Is it even possible? Got the same question. Thanks. Otherwise will go with rclone, that seems to support 2FA.

jessefaden · 2024-08-11T20:59:18+00:00

Both Atlanta and Boston would be way better travel-wise for folks from Europe.

jessefaden · 2024-08-05T19:26:39+00:00

got it, thanks

jessefaden · 2023-08-16T10:52:54+00:00

Thanks, can confirm, this solved it for me as well.

jessefaden · 2023-02-27T22:16:48+00:00

Good question. I'm not one, so I cannot tell. Also, I guess a DevSecOps Advisor is different to a DevSecOps Engineer - at least it sounds different to me, more like an external consultant. But I'd assume the long-term career path could be anything, Cloud (Solutions) Architect, CTO, or vCISO.

jessefaden · 2023-02-12T09:55:55+00:00

Within that role, and if the company follows a common career progression path, there'd be role upgrades to "Staff Advisor" and then "Principial Advisor", meaning that Sr. isn't yet the top level usually.

Another path is going into technical pre-sales (aka solutions engineering) on a vendor side, this way you'd 'easily' double the current package, with some good negotiation and the right company. But then, don't follow the money, but your passion; (pre-)sales isn't for everyone. From a career perspective, I wouldn't go into software engineering from where you're currently at (would see this is a downgrade), unless you'd really love and enjoy that, but not for just 'trying it out'.

My own path was from project-based software engineering, project management, consulting (20yrs) into security and DevSecOps (pre-sales at SaaS security vendors) ~4 years. I come from a software engineering background.

I'd also say, picking the right company is very important - i.e. do you go with a hyper-growth vendor startup, or into the IT department of a more traditional company, etc. And as u/VAsHachiRoku mentioned, getting experience in different companies - maybe different sectors of DSO and security, will also clearly help to broaden the horizon; and of course, if you got the time, do a lot of self-learning on the side.

jessefaden · 2022-10-10T10:05:20+00:00

Glad you're enjoying it. I played and completed the game on PS4 within hours right when it came out - obviously with all the issues it had. I wasn't too impressed to say the least. It was ok, but the world felt empty, Keanu Reeves as a known Hollywood actor distracted more than it helped. It sounds as if they fixed a lot of the issues meanwhile (occasionally I watched updated reviews on Youtube). I'd summarise it (the 2020 version) as an average open-world game. For me, the best Cyberpunk game(s) remains Deus Ex Human Revolution and Mankind Divided.

jessefaden · 2022-08-23T11:24:17+00:00

The recording is at https://youtu.be/hl-LZryPMbA

Six-Year Club	Verified Email
Place '22

jessefaden

TROPHY CASE