Questions tagged [static-analysis]

Static analysis is the process of detecting errors and defects in software's source code. Although manual code review is technically static analysis, the term is most commonly used to refer to an automated code review process.

Filter by
Sorted by
Tagged with
3
votes
2answers
55 views

Can I deactivate a Sonar Qube rule just for test classes?

I want to apply different SonarQube rules for production and test code. For example: squid : S1192: "String literals should not be duplicated". It is quite reasonable in production but for test code ...
33
votes
5answers
6k views

Is there a tool to measure the “maturity” (age) of a code in Git?

The vc-annotate in Emacs is a nice tool to see the "maturity" (age) of each line of code in colors. More blue dark, more mature, more red, less mature. This functionality has already been considered ...
0
votes
1answer
71 views

Static code analysis for needs of manual testing

It is possible to use static code analysis tools to figure out which unit tests to run. But is it possible to use (or are there any tools like this?) code analysis for needs of manual testers? I mean ...
0
votes
0answers
29 views

SonarQube vs. Frama-c for C99-C11

Aside from SonarQube supporting many languages, and frama-c being a plugin based system, what are the main differences in relation to C? Also like to hear opinions, experiences, general gotcha's, ...
1
vote
2answers
82 views

What are important rules of static analysis to use in our automated scripts?

I am fan of improving the quality not only of the product I test but also for the test itself. I want to create other customized rules for integrating with sonarqube that does not exist in classic ...
5
votes
2answers
127 views

When to mark a build as failed?

Currently, we do a lot of things when there is a application build job triggered (the trigger can be manual, or there is a commit to the develop/trunk branch, or there is a Pull Request created or ...
4
votes
2answers
984 views

How machine learning can help in predicting defect prone modules in applications before testing?

I have looked and read in the internet that using static code analysis data, we can predict what modules in the application are defect prone. When I try to imagine of dataset,it is getting difficult ...
8
votes
3answers
14k views

How to deactivate a rule in SonarQube?

I want to deactivate a particular rule. I am checking my php code. Eg: This branch's code block is the same as the block for the branch This is the rule I deactivate I go through quality profile-->...
3
votes
2answers
227 views

I want to know working of sonarqube

I install both SonarQube and sonar-runner. And I want to know how to start working. My project uses PHP language. So I want to check the code analysis of my project. But how to get started working? ...
4
votes
3answers
516 views

How to perform static code analysis?

I am working as QA.I want to test the static code analysis of my project. How to get start this ? Can you suggest a good tool to perform static code analysis ? My project is running in php, python, ...
1
vote
1answer
75 views

Judge the project rating sonarQube [closed]

I did install sonarQube and performed a project evaluation. The fact is, sonarQube gave me a global note (A) and percentages, like duplication of code %, comment %... My question is, what is a good ...
6
votes
5answers
4k views

Should Black-box software testers do Root-Cause analysis of every defect they report?

Should Testers/QA do Root-Cause analysis of every Defect/Bug they report to Developers? Well, I perform black-box testing on AUT. Sometimes I try to drill-down the issue when I find bugs. Should ...
2
votes
2answers
363 views

Licensing restrictions of formal methods (code proof) tools and contractors

This is NOT Intended to be a product/service recommendation question - I am trying really hard to word this so it isn't one. Does anyone here perform static analysis on your code using abstract ...
1
vote
1answer
48 views

Is there a tool to find groups of files that are changed together?

We've found that there are quite a few defects introduced when files that need to be changed together are not. To address this, we're working on bringing the code together, so the change can be made ...
0
votes
2answers
442 views

Inhibit PC-lint message 9007, MISRA

According to MISRA rule 13.5 the right hand operand of a logical && or || operator shall not contain persistent side effects. Our C-code is checked with PC-Lint, message 9007 (http://gimpel-...
1
vote
3answers
175 views

Which is larger, the number of paths in a program or the number of points in its domain? [closed]

Can someone please help me with this question?!
1
vote
3answers
192 views

Technical debt report

I've been asked to create a report about the technical debt of an application, but I haven't receive further guidelines about its elaboration. I'll be assisted by Sonar code analysis tool. My main ...