I am working as QA.I want to test the static code analysis of my project. How to get start this ? Can you suggest a good tool to perform static code analysis ? My project is running in php, python, javascript. How to test the static code analysis of these code ?
Is it possible to add plugin sonarqube to idea Inellij ? Is it easy way to choose to test ? OR just install sonarqube on my ubuntu pc. Which should I choose to use sonarqube ?
Jenkins is a continuous integration server, also known as a build server. It takes the source code and builds it, runs tests and execute any other commands you see fit. Afterwards it can report about the status of these commands like success and or failures.
Code analysis programs can be started and reported on with Jenkins, but this is not something that is included by default.
A common open source code analysis tool I would look at is SonarQube. It has plugins for most programming languages. SonarQube has some command-line tools to process the code and then push it to the web-server for view the results. Jenkins or any other build can push the results from the command-line tool to the SonarQube web-application.
SonarLint can be fully integrated with the IntelliJ or Eclipse without any difficulties. https://github.com/SonarSource/sonarlint-intellij
If you are looking for static analysis tools, you can probably find a lot of good information with a simple google or wikipedia search. What to do to get started depends heavily on what tool you are using. One Static Analysis tool that you can use in nDpend and if you want more information or thoughts on how to use it, Erik Dietrich has some really good posts on their blog with useful and interesting ways to use static analysis
