Consider adding dynamic analysis tools

sandialabs / reverse_argparse

A Python library to determine what exactly the user ran at the command line, along with default values, and any transformations that happened after parsing arguments.

https://reverse-argparse.readthedocs.io

BSD 3-Clause "New" or "Revised" License

38 stars 3 forks source link

Consider adding dynamic analysis tools #37

Open jmgate opened 1 year ago

jmgate commented 1 year ago

Description

From the OpenSSF Best Practices badge program:

Screenshot 2023-07-25 at 12 24 11 PM

Perhaps we should consider adding some dynamic code analysis tools to our CI.

Tasks

[ ] Investigate potential tools.
[ ] Determine which ones to adopt.
[ ] Add each to CI.

jmgate commented 1 year ago

It may be that using the Hypothesis library in unit testing would be sufficient.

jmgate commented 1 year ago

Or perhaps DynaPyt is worth looking into.