Research on static code analysis tools

[SelinaBuff]

Research on static code analysis tools

Description/Goal: We need research on static code analysis tools that focus on identifying security vulnerabilities. The goal is to select a tool that improves code quality and enhances software security, ensuring compliance with security standards.

Identify Relevant Tools:

• Research available static code analysis tools on the market (e.g., SonarQube, Checkmarx, Veracode, Fortify, etc.)
• Talk to other people (e.g. Simon)

Criteria/Provide a Recommendation:

• Security detection capabilities, ease of use, integration options (e.g., CI/CD pipelines), supported programming languages and frameworks
• Pros and cons of each tool
• Justify the recommendation based on the analysis.