4

I am working as QA.I want to test the static code analysis of my project. How to get start this ? Can you suggest a good tool to perform static code analysis ? My project is running in php, python, javascript. How to test the static code analysis of these code ?

Is it possible to add plugin sonarqube to idea Inellij ? Is it easy way to choose to test ? OR just install sonarqube on my ubuntu pc. Which should I choose to use sonarqube ?

  • 1
    Static analysis tool is a technique, it has no direct relationship with Jenkins. There are various tools that you can find from Google. – Yu Zhang Dec 22 '16 at 6:34
2

Jenkins is a continuous integration server, also known as a build server. It takes the source code and builds it, runs tests and execute any other commands you see fit. Afterwards it can report about the status of these commands like success and or failures.

Code analysis programs can be started and reported on with Jenkins, but this is not something that is included by default.

A common open source code analysis tool I would look at is SonarQube. It has plugins for most programming languages. SonarQube has some command-line tools to process the code and then push it to the web-server for view the results. Jenkins or any other build can push the results from the command-line tool to the SonarQube web-application.

  • Hai.. Is it possible to add plugin sonarqube to idea Inellij ? Is it easy way to choose to test ? – user21268 Dec 22 '16 at 7:20
  • Check sonarlint.org/intellij I never used it though. – Niels van Reijmersdal Dec 22 '16 at 8:39
  • No idea, that is a different question, questionably offtopic on SQA.SE :) – Niels van Reijmersdal Dec 22 '16 at 11:08
  • I quiet to sonarqube, because last 4 days I was trying to install sonarqube but cannot get a success. So what's your opinion still I do with sonarqube or look with any other tool ? – user21268 Dec 26 '16 at 10:34
  • 1
    All steps have Linux, Mac and windows commands if they differ. It's not windows focused it's for all platforms. – Niels van Reijmersdal Dec 26 '16 at 11:46
1

SonarLint can be fully integrated with the IntelliJ or Eclipse without any difficulties. https://github.com/SonarSource/sonarlint-intellij

0

If you are looking for static analysis tools, you can probably find a lot of good information with a simple google or wikipedia search. What to do to get started depends heavily on what tool you are using. One Static Analysis tool that you can use in nDpend and if you want more information or thoughts on how to use it, Erik Dietrich has some really good posts on their blog with useful and interesting ways to use static analysis

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy