Identification of strategies over tools for static code analysis

Static code analysis tools are being increasingly used to improve code quality. The source code’s quality is a key factor in any software product and requires constant inspection and supervision. Static code analysis is a valid way to infer the behavior of a program without executing it. Many tools...

Full description

Saved in:
Bibliographic Details
Published in:IOP conference series. Materials Science and Engineering 2021-08, Vol.1163 (1), p.12012
Main Authors: Stefanović, Darko, Nikolić, Danilo, Havzi, Sara, Lolić, Teodora, Dakić, Dušanka
Format: Article
Language:English
Subjects:
Inspection
Programming languages
Source code
Static code analysis
Citations: Items that this one cites
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Static code analysis tools are being increasingly used to improve code quality. The source code’s quality is a key factor in any software product and requires constant inspection and supervision. Static code analysis is a valid way to infer the behavior of a program without executing it. Many tools allow static analysis in different frameworks, different programming languages, and detecting different defects in the source code. Different strategies of using static code analysis tools are often used, and these strategies are not classified. In this paper, an experiment was conducted on different tools and their use in relation to the standard code review cycle. The identified strategies for using static code analysis tools and the steps required to implement them are presented. When using the tool, users should choose one of the identified strategies to implement following the defined steps for successful implementation.
ISSN:1757-8981
1757-899X
DOI:10.1088/1757-899X/1163/1/012012