You can't rely on one tool, different ones catch different things. No one tool is best. I usually use "-Wall -Wextra -Wpedantic", the GCC static analyser "-fan

You can't rely on one tool, different ones catch different things. No one tool is best. I usually use "-Wall -Wextra -Wpedantic", the GCC static analyser "-fanalyzer", cppcheck, and Clang scan-build. That's good enough for my personal projects. I have a couple of blog posts about this: https://superjamie.github.io/2022/05/24/c-static-analysis-tools https://superjamie.github.io/2022/05/24/c-static-analysis-to... https://superjamie.github.io/2022/11/04/c-static-analysis-tools-part-2 https://superjamie.github.io/2022/11/04/c-static-analysis-to...