39 votes
Accepted

Is there a tool to measure the "maturity" (age) of a code in Git?

I think you can use: https://github.com/erikbern/git-of-theseus It can visualize the amount of code still in use since its conception. This is a graph of the Git codebase itself:
31 votes

How to deactivate a rule in SonarQube?

for some one still looking for a answer like me (it took me few hours to resolve). Firstly, go to Quality Profiles Secondly: Select the profile you want then create a new copy of profile (if you ...
  • 411
11 votes

Is there a tool to measure the "maturity" (age) of a code in Git?

On browsing through the of @Niels van Reijmersdal answer, I found this written in the README Markovtsev Vadim implemented a very similar analysis that claims to be 20%-6x faster than Git of ...
8 votes

Should Black-box software testers do Root-Cause analysis of every defect they report?

It's not necessary for QA to do root-cause analysis for every defect they found. It's up to circumstances. And for the level of drill-down, I did not drill to the level of source-code when I tested a ...
  • 506
7 votes

Should Black-box software testers do Root-Cause analysis of every defect they report?

As others have said, it depends. My usual method works like this: I find something that doesn't seem right: If it's really obvious (a typo in a high-profile part of a site, an error message that ...
  • 30.8k
7 votes

How to deactivate a rule in SonarQube?

Follow below steps to disable any rule in SonarQube: Login by admin Go to quality profile & Select java/php profile [whichever is appropriate to you] Enter the rule as key and Search Uncheck the ...
6 votes

How to deactivate a rule in SonarQube?

On newer version of SonarQube (mine is 6.7.4): Go to http://localhost:9000/admin/settings?category=exclusions Scroll to Ignore Issues on Multiple Criteria Add Rule Key Pattern and File Path Pattern ...
3 votes
Accepted

Can I deactivate a Sonar Qube rule just for test classes?

You can do this in Administration -> Configuration -> Analysis Scope -> Restrict Scope of Coding Rules. You need to specify the code of the rule (without spaces) and a file path pattern to filter. If ...
2 votes
Accepted

How to perform static code analysis?

Jenkins is a continuous integration server, also known as a build server. It takes the source code and builds it, runs tests and execute any other commands you see fit. Afterwards it can report about ...
2 votes
Accepted

Judge the project rating sonarQube

There is no golden standard for code quality statistics. Also older Stackoverflow questions about code duplication shows these topics are very opinionated. What good or bad statistics are will also ...
2 votes
Accepted

I want to know working of sonarqube

Here is the step-by-step procedure to perform the scenario: Setup a Jenkins server if already not using. Goto plugin-manager of Jenkins to install “SonarQube Plugin”. Goto “System-configuration” of ...
  • 552
2 votes

When to mark a build as failed?

Perfect, fail fast(er). When the extreme programmers came up with continuous integration the idea was when someone checked in their code a couple of times per day and if that failed their automated ...
2 votes
Accepted

When to mark a build as failed?

Personally, I think this is absolutely fine. Since you said you are using feature branches, only builds on top of these branches are failing. Pull requests are only merged when the corresponding build ...
  • 2,112
1 vote

Is there a tool to measure the "maturity" (age) of a code in Git?

You can check Codacy. This will give some insight about code.
  • 31
1 vote

Is there a tool to measure the "maturity" (age) of a code in Git?

The best tool I know is Codescene https://codescene.io.
1 vote

What are important rules of static analysis to use in our automated scripts?

How about an code review from an experienced senior developer, so that you can focus more on practical tips. Experience is incomparable to any tool at least in the current state of the tools. Having ...
1 vote

What are important rules of static analysis to use in our automated scripts?

Try out https://docs.sonarqube.org/display/SONAR/Analyzing+Source+Code Other possible ways If coding guidelines and standard followed. Duplicate code. Coding guidelines followed. Design principle ...
1 vote

How machine learning can help in predicting defect prone modules in applications before testing?

Thoughts on error-prone modules detection One line of "defect prone modules" analysis may use the code complexity analysis to classify a module as "error-prone" or not. This would ...
  • 11.4k
1 vote

How machine learning can help in predicting defect prone modules in applications before testing?

Have a graph with number of bugs on the left vertical y axis I would then have lines for factors that are relevant, e.g. lines of code, number of statements, line length, number of variables, global ...
1 vote

How to perform static code analysis?

SonarLint can be fully integrated with the IntelliJ or Eclipse without any difficulties. https://github.com/SonarSource/sonarlint-intellij
1 vote

Should Black-box software testers do Root-Cause analysis of every defect they report?

Nobody can really answer it since it depends. Depends on your qualifications, your and your team work load, the dev team work load, the complexity of the issue etc. I work now in a combined ...
  • 6,985
1 vote

Licensing restrictions of formal methods (code proof) tools and contractors

I haven't gone looking for such services, but I doubt that they would work out. Current static analysis tools can deliver very useful information, but they need to be tuned for best results. This ...
1 vote

Is there a tool to find groups of files that are changed together?

CCVisu was designed to vizualize clustering in graphs, and in particular to detect files in a repository that tend to be modified together. It was applied to Mozilla's mail component; you can find an ...
1 vote

Inhibit PC-lint message 9007, MISRA

Not sure if this will solve all the issues, but it should help some if you try to include SonarQube http://sonarqube.15.x6.nabble.com/ in your lint process/report. You should be able to customize the ...
  • 1,663
1 vote

Technical debt report

SonarQube is one step in identifying common tech-debt, like code-smells or code-complexity, duplicate-code and lack of test-coverage. The second step is like Kate Paulk suggested to talk the ...

Only top scored, non community-wiki answers of a minimum length are eligible