Static code analysis is a method of checking your source code before actually executing the program.
It’s done by analyzing a set of code against a predefined set (or multiple sets) of coding rules.
This type of analysis is used to identify weaknesses in source code that might lead to vulnerabilities.
And Of course, this may also be achieved through manual code reviews. But using automated tools is much more effective.
Static analysis is commonly used to comply with coding guidelines
Some times it is also known as white box testing
Static code analysis should be performed early in development cycle, before software testing begins.
For organizations practicing DevOps, static code analysis takes place during the “Create” phase.
So how it works
-You have a source code
-Provide your source code to the static code analyzer tool
-And this tool will then scan your code for potential bugs and defects and will generate a report for you
More Videos from our channel -
Getting Started with Jenkins : • Getting started with Jenkins & Creati...
Jenkins Pipeline using Groovy : • Jenkins Pipeline Using Groovy & How t...
Static Code Analysis with Jenkins : • Static Code Analysis with Jenkins : P...
What is Static Code Analysis : • What is Static Code Analysis?
Thanks