Engineering Manager - Cloud Performance | Open Source | Data center Platform Validation | DevOps | SW Security
How do i automate klocwork scanning ?
Installation happens in no time, and time to start analyzing! I created a Klocwork project for each of my VS projects. My projects were fairly small. Only about 100 files or so in the largest. The next step was to run my initial full analysis on both of my project file. Incremental analysis happens after this with each build.
Hi Vikash,
Typically, Klocwork scans* these days are automated through CI/CD pipelines and as part of the overall DevOps infrastructure. This all started 5-10 years back with the use of tools like Jenkins, Bamboo and TeamCity running on premise and managing the different project builds and pipelines. More recently, CI/CD pipelines have shifted to the cloud and now we more commonly see the cloud-based CI/CD platforms like Azure DevOps, GiLab CI and GitHub Actions as the driver. In all cases, Klocwork has two main modes of operation as part of CI/CD pipelines - either a complete milestone analysis, where the results are uploaded to a central dashboard for compliance reporting and collaboration, which is typically performed with each new commit to the master branch as a confirmation that the code is still secure, reliable and compliant to whatever standards are required, or a super-fast incremental update analysis of the changes local to the feature branch or integration branches, which is run with each commit or pull requests, and helps us to understand whether the changes meet our requirements for the code, in order to maintain security, reliability and compliance.
Fundamentally, Klocwork provides the necessary command line interfaces and open APIs in order to seamlessly integrate it into any CI/CD pipeline or DevOps automation project.
*Klocwork scans can be used for the detection of coding issues, security vulnerabilities, logic issues and coding standard compliance violations for C, C++, C#, Java, JavaScript and Python code.
If this doesn't answer your question, please contact me at creycraft@perforce.com and I'll get you in touch with one of our product experts.
Klocwork is a static code analysis and SAST tool for C, C++, C#, Java, JavaScript, Python, and Kotlin that identifies software security, quality, and reliability issues helping to enforce compliance w
With over 2.5 million reviews, we can provide the specific details that help you make an informed software buying decision for your business. Finding the right product is important, let us help.