High code coverage != high code quality. So how are you all measuring quality at scale?

We all have organizational standards and best practices to adhere to in addition to industry standards and best practices.

Imagine you were running an organization of 10,000 engineers, what metrics would you use to gauge overall code quality? You can’t review each PR yourself and, as a human, you can’t constantly monitor the entire codebase. Do you rely on tools like sonarqube to scan for code smells? What about when your standards change? Do you rescan the whole codebase?

I know you can look at stability metrics, like the number of bugs that come up. But that’s reactive, I’m looking for a more proactive approach.

In a perfect world a tool would be able to take in our standards and provide a sort of heat map of the parts of the codebase that needs attention.