Path: csiph.com!eternal-september.org!feeder.eternal-september.org!aioe.org!bofh.it!news.nic.it!robomod From: Paul Wise Newsgroups: linux.debian.maint.java Subject: Re: Static code analysis tool in Debian Date: Sun, 15 Nov 2015 03:00:01 +0100 Message-ID: References: X-Original-To: Debian Java Maintainers X-Mailbox-Line: From debian-java-request@lists.debian.org Sun Nov 15 01:53:48 2015 Old-Return-Path: X-Amavis-Spam-Status: No, score=-7.577 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FOURLA=0.1, FREEMAIL_FORGED_FROMDOMAIN=0.001, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, LDO_WHITELIST=-5, MURPHY_DRUGS_REL8=0.02, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no X-Policyd-Weight: using cached result; rate:hard: -7 Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:content-type; bh=PTTKJS9xaUw+Lq/BBwVJMVMpsKrHsFvA4Ddwq88kJws=; b=0Vbcav1a3UyPrK2Y4G2w+JAknB6y9gmo81CKYDLMreMmwOv/Xb3iYlmKuyjzKksz4K 5V8bjT3qnMIuyIzlU2z6q/dNxFwO8YY2VyrfRK78qSoRBcvM/6uiFYj84fjjl1//FT6P ifHKv9w4bTyDn+GV9OUZpzOcgBZl092xtRNJWA0JNJ4fAULS7a6kPeUT+4yHPX3Bx+dm 5XmRMRZVGJFJWu7zzpDVRIuwQnD6Yrhir9i4Wy2BxBvLsD8aA+KcQeOhF33qkBoOiG+5 L2fmTw7yU5qTxENc/9rFo3X8dfgmxLc2WtwTr5wWKjsob+57XNEUlRTXWGNi+qQIHIXN K4Fg== MIME-Version: 1.0 X-Received: by 10.28.224.7 with SMTP id x7mr10773755wmg.17.1447552411323; Sat, 14 Nov 2015 17:53:31 -0800 (PST) Sender: robomod@news.nic.it X-Google-Sender-Auth: aeBXkvFHGEPzZEORNvFMs6wh6vg Content-Type: text/plain; charset=UTF-8 X-Mailing-List: archive/latest/18869 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/CAKTje6HBhG0qA4OuAaVfBVAc3Hf07Tsefkjg48VYK89EOEnjpw@mail.gmail.com Approved: robomod@news.nic.it Lines: 34 Organization: linux.* mail to news gateway X-Original-Date: Sun, 15 Nov 2015 09:53:31 +0800 X-Original-Message-ID: X-Original-References: <1447482612.3260.46.camel@dimjasevic.net> X-Original-Sender: paul.is.wise@gmail.com Xref: csiph.com linux.debian.maint.java:8550 On Sun, Nov 15, 2015 at 5:49 AM, Jonathan Yu wrote: > Other great static code analysis tools (not just for doing call-tree I'm interested in adding general Java static analysis tools to check-all-the-things: https://anonscm.debian.org/cgit/collab-maint/check-all-the-things.git/ So far I have a rule for jlint and TODO items for checkstyle, findbugs, pmd, japi-compliance-checker, error-prone and shell metacharacter injection via Runtime.getRuntime().exec(). https://anonscm.debian.org/cgit/collab-maint/check-all-the-things.git/tree/data/java If any Debian or collab-maint members on the list want to add more checks or TODO items, please checkout the README for how to contribute. I am happy to commit patches from others too. I would very much welcome packaging of more tools. https://anonscm.debian.org/cgit/collab-maint/check-all-the-things.git/tree/doc/README If you are adding new TODO items, please add them like this instead of just adding TODO comments. [cppclean] flags = todo comment = https://github.com/myint/cppclean/ -- bye, pabs https://wiki.debian.org/PaulWise