Beneficial static analysis starter tool
Use Cases and Deployment Scope
I embedded it in my Azure Devops pipelines to scan the code for any existing bugs before generating the build. I used the Yaml code editor and classic build editor to use it as a task in the azure pipeline jobs for asp .net web application that was on the azure web app for windows and iis for on premises
Pros
- Scan the code for existing bugs present
- It can detect an vulnerabilities and also show possible bad warnings
- Can help identify errors in advance to avoid code crash post deployment
Cons
- It’s documentation is not always up to date
- Difficulty in finding a prper solution when an issue arises during its configuration
- has limited features
Likelihood to Recommend
Findbugs is best suited even when you want to adapt to certain coding conventions and discover possible bugs beforehand and it's best suited for the java open source. whether you are a developer or a DevOps engineer you can even use it as a plugin in your Jenkins pipeline or any other build automation server and your developer tool such as visual studio as well.
