Integrating Static Code Analysis Toolchains

Gespeichert in:

Bibliographische Detailangaben
Veröffentlicht in:	arXiv.org (Mar 9, 2024), p. n/a
1. Verfasser:	Kern, Matthias
Weitere Verfasser:	Erata, Ferhat, Iser, Markus, Sinz, Carsten, Loiret, Frederic, Otten, Stefan, Sax, Eric
Veröffentlicht:	Cornell University Library, arXiv.org
Schlagworte:	Source code Static code analysis Exchanging Tools Format
Online-Zugang:	Citation/Abstract Full text outside of ProQuest
Tags:	Tag hinzufügen Keine Tags, Fügen Sie das erste Tag hinzu!

Beschreibung
Abstract:	This paper proposes an approach for a tool-agnostic and heterogeneous static code analysis toolchain in combination with an exchange format. This approach enhances both traceability and comparability of analysis results. State of the art toolchains support features for either test execution and build automation or traceability between tests, requirements and design information. Our approach combines all those features and extends traceability to the source code level, incorporating static code analysis. As part of our approach we introduce the "ASSUME Static Code Analysis tool exchange format" that facilitates the comparability of different static code analysis results. We demonstrate how this approach enhances the usability and efficiency of static code analysis in a development process. On the one hand, our approach enables the exchange of results and evaluations between static code analysis tools. On the other hand, it enables a complete traceability between requirements, designs, implementation, and the results of static code analysis. Within our approach we also propose an OSLC specification for static code analysis tools and an OSLC communication framework.
ISSN:	2331-8422
DOI:	10.1109/COMPSAC.2019.00080
Quelle:	Engineering Database