27,000 scans, 2.1 billion lines of code, one month - Best Buy on Checkmarx
Roughly 3,000 engineers, 300 app dev teams and 8,000 repositories - and everything that attempts to release into production gets scanned. Sayso filmed two Best Buy security leaders at the retailer's Minnesota headquarters.
Two Best Buy security leaders on scanning everything that heads to production: 27,000 scans and 2.1 billion lines of code in one month, with 80% less noise.
In our environment, everything that attempts to release into production gets scanned. And so last month, that was about 27,000 scans and 2.1 billion lines of code.
Shot at Best Buy's corporate campus in Richfield, Minnesota - two interviewees back to back. Best Buy would not release its working offices, so the interviews ran in the company's in-house basement studio. Between subjects the camera panned right and the subject moved left so the second setup would not mirror the first, dropping lower on a 28mm. For B-roll the director overruled the studio and asked for the real offices and the building exterior with Best Buy signage.
What this film answers
Best Buy scans everything that attempts to release into production - about 27,000 scans covering 2.1 billion lines of code in a single month on Checkmarx, across roughly 8,000 repositories.
One pipeline, one policy, one place to read results. Best Buy covers 3,000 engineers and 300 app dev teams without juggling scanners.
At Best Buy, custom queries and presets cut noise by 80% against roughly 20,000 high-severity findings a year - so engineers work the findings that matter.