Skip to content
#

static-code-analysis

Here are 378 public repositories matching this topic...

marcandre
marcandre commented Sep 19, 2020

To load dependencies withing a gem/app, require_relative should always be preferred to require

We should check for any instance of (send nil? require `{:__dir__ :__FILE__}) and raise an offense.

I can't event think of a single instance where require should be called with an interpolated string tbh

scop
scop commented Dec 13, 2020

Would be good to automatically add a .gitignore to the output dir when creating it, e.g. with contents

# Automatically created by pytype
*

This way people wouldn't need to manually add it to their upper level gitignores. Many tools already do this for their similar dirs, mypy and pytest to name a couple.

semgrep
devd
devd commented Dec 2, 2020

Is your feature request related to a problem? Please describe.
In a minified JS file, showing the "matched line" will basically mean the whole file is printed. This is pretty painful to navigate around. And since every match in the file is a new finding, the whole file is printed again and again.

Describe the solution you'd like
Ideally, I would like to only show the matched section (

larastan
tiagof
tiagof commented Nov 22, 2020
  • Larastan Version: 0.6.1
  • --level used: 5

Description

In a project that follows DDD, there are usually multiple directories where migration files exist:

database/migrations/*
domains/<domain>/Database/Migrations/*

In these cases it is not possible to configure larastan to scan all the migrations, since the databaseMigrationsPath only accepts a string.

Is there any way to

xsser
xsser commented Jun 11, 2020

How can i run findsecbugs rules in spotbugs?

Am i right?

./spotbugs -textui -pluginList /Users/xxx/Downloads/findsecbugs-plugin-1.11.0-SNAPSHOT.jar -home . -low -output ./aaa -progress -train ./bbb -sourcepath ~/Downloads/codez/test/My-Blog/ -debug -noClassOk -progress -auxclasspath ~/Downloads/codez/test/My-Blog/target/ -choosePlugins edu.umd.cs.findbugs.plugins.core

majkaz
majkaz commented Nov 23, 2020

Rubberduck version information
Version 2.5.1.5557
OS: Microsoft Windows NT 10.0.14393.0, x64
Host Product: Microsoft Outlook x86
Host Version: 16.0.4266.1001
Host Executable: OUTLOOK.EXE

Description
The event procedures _Itemadd on some collections are marked as "Procedure not used"

To Reproduce
declare

Private WithEvents colCeka As Items
Private WithEvents colDraft

Improve this page

Add a description, image, and links to the static-code-analysis topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the static-code-analysis topic, visit your repo's landing page and select "manage topics."

Learn more

You can’t perform that action at this time.