Static analysis tools in CI chain

ITUDevUps / devUps

For the course DevOps at ITU

MIT License

1 stars 1 forks source link

Closed anderswagner closed 1 year ago

JensFastrup commented 1 year ago

isn't this covered by SonarCube already?

anderswagner commented 1 year ago

@JensFastrup No, static analysis tools are something that checks if things af compileable for example (see task 1 here https://github.com/itu-devops/lecture_notes/blob/master/sessions/session_07/README_TASKS.md)

JensFastrup commented 1 year ago

Static analysis tools, that check

Code quality
Maintainability
Security
Technical debt
etc. has been integrated with tools in the CI with Sonarcloud, Code Climate, Snyk