3 ms·
Coverity Scan is a marketing tool. As for FindBugs integration... The majority of Coverity issues I deal with are labelled as FindBugs issues.
by lowry 10y ago
Coverity Scan is a marketing tool. As for FindBugs integration... The majority of Coverity issues I deal with are labelled as FindBugs issues.
- achou 10y agoScan finds lots of bugs for open source projects at no cost. Sure it is marketing, but unlike most marketing it also has real value. Not sure I can comment on the results on your own code, but I will say that volume of results is not always correlated with value in static analysis. There are plenty of noisy rules that basically have negative utility if you factor in the time it takes to review each issue. It's a complex balancing act between finding more issues, having fewer false positives, analysis time, understandability of results, and other factors.
- zodiac 10y agoI'm curious, why don't you run findbugs directly rather than (I presume) paying Coverity?
- lowry 10y agoI would, but the business still pays Coverity and I have to regularly check Coverity reports. Simple subordination.