BACKGROUND

Static code analysis is a technique of debugging a computer application that includes analyzing an application's source code before a program is run. This analysis is usually done by analyzing the code against a given set of rules or coding standards, and can address code vulnerabilities, code smells, and adherence to commonly accepted coding standards. Statis code analysis is commonly performed at various points of the software development life cycle, often occurring at various stages after a “code development” phase though before “unit” or “integration” testing phases. By way of example, in some continuous integration (CI) and continuous delivery (CD) pipelines, static analysis is incorporated as part of a quality gate for code promotion. Among other benefits, the ability to identify weaknesses in code and to ensure the code adheres to strict development standards helps to reduce potential bugs or regressions in production environments.

