Static Code Analysis
-
Static Code Analysis is used to analyze the code written by developers against various areas of Software Best Practices
- Architecture and Design
- Comments
- Coding Rules
- Bugs
- Duplications
- Unit Tests
- Complexity (line coverge and branch coverage, symbol coverage)
-
To perform Static Code Analysis there are many tools as part of this course we will be covering SonarQube (Open Platform)
-
SonarQube can work with many programming languages
-
For our purposes, we will be installing sonarqube Community Edition Refer Here
-
Basic steps of installation: Refer Here
-
Steps for installation Refer Here
-
Once you login into sonar qube try to generate the token
Using SonarQube with Jenkins
-
Refer Here for configuring sonar qube with jenkins
-
Install SonarQube Scanner for jenkins using plugins
-
Configure the SonarQube Server by using Configure System
-
Next Steps:
- Configuring Sonar Scanner
- withEnv pipeline
- Installing Remote Repository to store night build artifacts into jfrog artifactory
- stash and unstash in pipelines
- Azure DevOps Pipelines
- AWS DevOps Tools (* conditions apply)
- .net build
- Activity: manual steps of python/nodejs deployment
- Git Branching Strategies
- Git Releases
- GitHub Pull requests
- Stash (fifth area of git)
- git hooks & Github webhooks
- AWS Code Commit & Azure Source Repos
-
Json and YAML Tutorial: Refer Here
