News for hackers. Stuff that matters.

A comment on Why Don't Software Developers Use Static Analysis Tools to Find Bugs?. Parent comment

Re:Why Don't Software Developers Use Static Analysis Tools t... by frobozz on Friday June 26, 2015 @05:05AM (#9783095)
If you had static analysis in from the start, that wouldn't be a problem.

If you add static analysis to a messy project, define success thresholds based on the current violation count, and/or disable violation categories that you can live with. The rule then should be "don't make it worse, try to make it a bit better when you can", rather than "don't commit anything to main until the checker says it's perfect".

[ Parent | on HN ]
Re:Why Don't Software Developers Use Static Analysis Tools t... by AnimalMuppet on Friday June 26, 2015 @12:06PM (#9785564)
Our approach was, fix the really horrible ones now, and don't add new ones that we care about. Then, as we have time, fix the next-most-horrible ones.
[ Parent | on HN ]