Ericsson / codechecker

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy
https://codechecker.readthedocs.io
Apache License 2.0
2.15k stars 357 forks source link

chore(config): [clang-tidy] Update SEI-CERT Guideline mappings #4235

Closed whisperity closed 1 month ago

whisperity commented 2 months ago

[!IMPORTANT]

:no_entry: Blocked by #4224.

Ensure that checkers that target SEI CERT C & C++ guideline rules and recommendations are appropriately labelled as such: guideline:sei-cert, profile:security, and the guideline label.

In case the checker is implemented through an alias (or even multiple aliases), apply the labels to only the main checker, and strip the profile and guidelines associations from the aliases. (Due to the lack of proper alias handling in both Clang-Tidy and CodeChecker, firing all aliases would result in multiple detections of the same match.)

Ensure, in addition, that profile:default and profile:sensitive checkers are also always in the more broad superset profiles profile:sensitive and profile:extreme.