continuous integration with static analysis tools
summary
Rogue Wave launches Clockwork 2016, a static-analysis suite that adds continuous static analysis into CI by shipping CI plugins that run analysis on changed files inside Jenkins/Bamboo/TeamCity. It adds targeted security and quality rules including CWE checkers, performs incremental analysis inside the CI pipeline, and claims faster detection and turnaround of security and quality defects so teams can find fewer surprises and remediate problems more quickly.
AI-written summary · about
related talks
58mSecurity Static Analysis - Avoiding an Angry Mob of Engineers
42mSecure or Insecure Code, That Is the Question
32mBuilding Confidence Together: Continuous Integration & Testing
44mImproving Software Quality with Jenkins
51mReal World Static Analysis For Real Humans
47mComputer Says No — Static analysis and CI in a Kotlin world
44mUsing Static Analysis Tools to Become A Superhero Programmer
41mContinuous Integration Tips & Tricks