ballerina-platform / static-code-analysis-tool

Tool for performing static code analysis for Ballerina projects.
Apache License 2.0
3 stars 5 forks source link

Implement Ballerina Scan Tool for Static Code Analysis #1

Closed Xenowa closed 9 months ago

Xenowa commented 9 months ago

Purpose

The purpose of this PR is to develop a Ballerina tool that performs static code analysis for Ballerina projects for identifying potential bugs, security vulnerabilities, and style violations and report analysis issues to static code analysis platforms like SonarQube.

Fixes #42256

Goals

Approach

The initial release introduces the bal scan command. Current implementation uses the project API to retrieve syntax trees of all Ballerina files in a project for performing core analysis and generating an analysis report. However the generated report will have no issues as core rules are not implemented yet. As core analysis rules are reviewed and implemented, the scan tool will progressively gain the ability to identify and report potential issues and further features will be added iteratively as outlined in task #42260

Check List

CLAassistant commented 9 months ago

CLA assistant check
All committers have signed the CLA.

Xenowa commented 9 months ago

Since this PR is too large, will be breaking it down to smaller parts and send them