Questions tagged [static-analysis]

Static analysis is the process of detecting errors and defects in software's source code. Although manual code review is technically static analysis, the term is most commonly used to refer to an automated code review process.

0
votes
1answer
41 views

Static code analysis for needs of manual testing

It is possible to use static code analysis tools to figure out which unit tests to run. But is it possible to use (or are there any tools like this?) code analysis for needs of manual testers? I mean ...
0
votes
0answers
25 views

SonarQube vs. Frama-c for C99-C11

Aside from SonarQube supporting many languages, and frama-c being a plugin based system, what are the main differences in relation to C? Also like to hear opinions, experiences, general gotcha's, ...
1
vote
2answers
75 views

What are important rules of static analysis to use in our automated scripts?

I am fan of improving the quality not only of the product I test but also for the test itself. I want to create other customized rules for integrating with sonarqube that does not exist in classic ...
5
votes
2answers
119 views

When to mark a build as failed?

Currently, we do a lot of things when there is a application build job triggered (the trigger can be manual, or there is a commit to the develop/trunk branch, or there is a Pull Request created or ...
4
votes
2answers
919 views

How machine learning can help in predicting defect prone modules in applications before testing?

I have looked and read in the internet that using static code analysis data, we can predict what modules in the application are defect prone. When I try to imagine of dataset,it is getting difficult ...
6
votes
3answers
10k views

How to deactivate a rule in SonarQube?

I want to deactivate a particular rule. I am checking my php code. Eg: This branch's code block is the same as the block for the branch This is the rule I deactivate I go through quality profile-->...
3
votes
2answers
215 views

I want to know working of sonarqube

I install both SonarQube and sonar-runner. And I want to know how to start working. My project uses PHP language. So I want to check the code analysis of my project. But how to get started working? ...
4
votes
3answers
456 views

How to perform static code analysis?

I am working as QA.I want to test the static code analysis of my project. How to get start this ? Can you suggest a good tool to perform static code analysis ? My project is running in php, python, ...
1
vote
1answer
70 views

Judge the project rating sonarQube [closed]

I did install sonarQube and performed a project evaluation. The fact is, sonarQube gave me a global note (A) and percentages, like duplication of code %, comment %... My question is, what is a good ...
6
votes
5answers
4k views

Should Black-box software testers do Root-Cause analysis of every defect they report?

Should Testers/QA do Root-Cause analysis of every Defect/Bug they report to Developers? Well, I perform black-box testing on AUT. Sometimes I try to drill-down the issue when I find bugs. Should ...
2
votes
2answers
360 views

Licensing restrictions of formal methods (code proof) tools and contractors

This is NOT Intended to be a product/service recommendation question - I am trying really hard to word this so it isn't one. Does anyone here perform static analysis on your code using abstract ...
1
vote
1answer
45 views

Is there a tool to find groups of files that are changed together?

We've found that there are quite a few defects introduced when files that need to be changed together are not. To address this, we're working on bringing the code together, so the change can be made ...
0
votes
2answers
416 views

Inhibit PC-lint message 9007, MISRA

According to MISRA rule 13.5 the right hand operand of a logical && or || operator shall not contain persistent side effects. Our C-code is checked with PC-Lint, message 9007 (http://gimpel-...
1
vote
3answers
174 views

Which is larger, the number of paths in a program or the number of points in its domain? [closed]

Can someone please help me with this question?!
1
vote
3answers
168 views

Technical debt report

I've been asked to create a report about the technical debt of an application, but I haven't receive further guidelines about its elaboration. I'll be assisted by Sonar code analysis tool. My main ...