PVS-Studio

[chennes]

No worries, the SARIF files are nicely structured, scripting the remove isn't too painful. Right now I'm just using a vim macro, but probably in the next go-round I'll write something easier-to-use and post it.

[saso]

No worries, the SARIF files are nicely structured, scripting the remove isn't too painful. Right now I'm just using a vim macro, but probably in the next go-round I'll write something easier-to-use and post it.

There are some python classes for sarif, if it can help...

https://github.com/microsoft/sarif-python-om
https://pypi.org/project/sarif-om/

https://sarifweb.azurewebsites.net/
https://docs.oasis-open.org/sarif/sarif ... -v2.0.html

[saso]

New report from build 0.20.25220 has been created...

[saso]

New report from build 0.20.28030 has been created...

[saso]

No worries, the SARIF files are nicely structured, scripting the remove isn't too painful. Right now I'm just using a vim macro, but probably in the next go-round I'll write something easier-to-use and post it.

The tool that Chris created for the sarif format...

https://github.com/chennes/CleanSARIF
https://forum.freecadweb.org/viewtopic. ... 58#p478258
https://forum.freecadweb.org/viewtopic. ... 47#p478947

[saso]

New report from build 0.21.30257 has been created...


Also a few recent blogposts from PVS-Studio, for those that have some interest in it...
https://pvs-studio.com/en/blog/posts/0908/ PVS-Studio: static code analysis technology
https://pvs-studio.com/en/blog/posts/cpp/0963/ Intermodular analysis of C and C++ projects in detail. Part 1
https://pvs-studio.com/en/blog/posts/cpp/0965/ Intermodular analysis of C and C++ projects in detail. Part 2

[saso]

New report from build 0.21.32049 has been created. Since the last CodeQL report was made public, I guess it is ok to make this also public...

https://mega.nz/file/XMYyXTpR#waMETnvmN ... 12MPY_-lWA

[chennes]

Thanks! Now that LGTM is gone, can we reconfigure this CodeQL run to also analyze the Python?

[saso]

Thanks! Now that LGTM is gone, can we reconfigure this CodeQL run to also analyze the Python?

This are the results from PVS-Studio that does not yet support python AFAIK, but results for CodeQL have also been published for this build, they are available here viewtopic.php?p=663911#p663911 and they do include both python and c++ results. What I am also looking in to is to configure CodeQL also to run as part of GitHub Actions, so it would run automatically on all PR as recommended here https://github.blog/2022-08-15-the-next ... -scanning/

[chennes]

Sorry, getting my static analyzer topics mixed up...