Tag

static-code-analysis

0 views collected around this technical thread.

DeWu Technology
DeWu Technology
May 28, 2021 · Fundamentals

Static Code Analysis Tools Introduction

Static code analysis tools such as Checkstyle, FindBugs/SpotBugs, PMD, QAPlug, Alibaba Code Guidelines Plugin, SonarLint, and SonarQube help Java developers enforce style, detect bugs, security flaws, and code smells early, reducing costs, improving reliability, and enabling continuous quality monitoring throughout the software development lifecycle.

Best Practicescode qualitysoftware development
0 likes · 13 min read
Static Code Analysis Tools Introduction
HomeTech
HomeTech
Apr 1, 2020 · Fundamentals

Static Code Scanning: Principles, Tools, and Three Years of Practice in a Dealer Technology Department

This article explains the fundamentals of static code scanning, reviews popular analysis tools such as Checkstyle, FindBugs, PMD and SonarQube, and details a three‑year evolution of a dealer technology department’s CI/CD integration, automation, metrics, and key success factors for effective code quality assurance.

CI/CDJenkinscode quality
0 likes · 10 min read
Static Code Scanning: Principles, Tools, and Three Years of Practice in a Dealer Technology Department
360 Quality & Efficiency
360 Quality & Efficiency
Dec 4, 2017 · Operations

How to Install and Configure the Fireline Jenkins Plugin for Static Code Scanning

This tutorial walks you through installing the Fireline Jenkins plugin, configuring a Jenkins job to run Android static code analysis for security, memory‑leak, and Alibaba P3C rule checks, and displaying the generated HTML report directly within Jenkins.

AndroidCI/CDFireline
0 likes · 9 min read
How to Install and Configure the Fireline Jenkins Plugin for Static Code Scanning
360 Quality & Efficiency
360 Quality & Efficiency
May 15, 2017 · Fundamentals

Special Cases in Java Resource Closing: Utilities, Return Patterns, Non‑Closeable Streams, Nested Streams, JDBC Statements, and Sockets

This article, the fifth in a static code scanning series, explains six special scenarios—custom close utilities, methods returning resources, streams that need not be closed, nested stream closures, JDBC statement/result set relationships, and socket streams—that complicate determining whether Java resources have been properly closed.

Best PracticesJDBCJava
0 likes · 9 min read
Special Cases in Java Resource Closing: Utilities, Return Patterns, Non‑Closeable Streams, Nested Streams, JDBC Statements, and Sockets
Baidu Intelligent Testing
Baidu Intelligent Testing
Mar 24, 2016 · Mobile Development

Using Clang Static Analyzer for iOS Projects: Setup, Common Issues, and Report Generation

Clang Static Analyzer, integrated in Xcode, provides static code analysis for C, C++ and Objective‑C, and this guide explains its core checkers, common warning types such as null‑pointer dereference and division‑by‑zero, and demonstrates how to run it via scan‑build on an iOS project to generate HTML reports.

Clang Static AnalyzerObjective-CXcode
0 likes · 3 min read
Using Clang Static Analyzer for iOS Projects: Setup, Common Issues, and Report Generation