Should static analysis warnings fail the CI build?

Posted by Cara on Stack Overflow See other posts from Stack Overflow or by Cara
Published on 2010-03-08T10:53:17Z Indexed on 2010/03/08 11:21 UTC
Read the original article Hit count: 861

Filed under:

static-analysis

|

continuous-integration

Our team is investigating various options for static analysis in our project, and have mixed opinions about whether we want our Continuous Integration build to fail because of warnings from static analysis.

The argument against failing the build is that there are often exceptions to the rules, and attempting to work around them just to make the build succeed reduces productivity. A better approach would be to generate reports with the build, and regularly dedicate developer time to addressing the reported issues.

The counter-argument is that it is easy for the technical debt to build up if the bugs are not addressed immediately. Also, if the build fails when a potential bug is introduced, the amount of time required to fix it is reduced.

What are your thoughts?

© Stack Overflow or respective owner

Related posts about static-analysis

Should static analysis warnings fail the CI build?

as seen on Stack Overflow - Search for 'Stack Overflow'
Our team is investigating various options for static analysis in our project, and have mixed opinions about whether we want our Continuous Integration build to fail because of warnings from static analysis. The argument against failing the build is that there are often exceptions to the rules, and… >>> More
What static analysis tool do you prefer?

as seen on Stack Overflow - Search for 'Stack Overflow'
Ideally, I'm looking for something to integrate into visual studio 2005, but if i could run it on the command line on windows or on linux for gcc, that would be okay also. I'm looking for something in the $1000 range so I understand I wont get the best tools available. But I also prefer something… >>> More
Static analysis of multiple if statements (conditions)

as seen on Stack Overflow - Search for 'Stack Overflow'
I have code similar to: if conditionA(x, y, z) then doA() else if conditionB(x, y, z) then doB() ... else if conditionZ(x, y, z) then doZ() else throw ShouldNeverHappenException I would like to validate two things (using static analysis): If all conditions conditionA, conditionB, ..., conditionZ… >>> More
Why some consider static analysis a testing and some do not?

as seen on Programmers - Search for 'Programmers'
Preparing myself also to ISTQB certification, I found they call static analysis actually as a static testing, while some engineering book distinct between static analysis and testing, which is the dynamic activity. I tent to think that static analysis is not a testing in the true sense as it does… >>> More
Static analysis tool customization for any language

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi, We are using a Tool in our project. This tool has its own language which is similar to Java. I am looking for a static analysis tool which can be applied to the new language. Are there any static analysis tools which can be customized to any languages? or Is there any document or any reference… >>> More

Related posts about continuous-integration

List of resources for database continuous integration

as seen on Simple Talk - Search for 'Simple Talk'
Because there is so little information on database continuous integration out in the wild, I've taken it upon myself to aggregate as much as possible and post the links to this blog. Because it's my area of expertise, this will focus on SQL Server and Red Gate tooling, although I am keen to include… >>> More
CruiseControl [.Net] vs TeamCity for continuous integration?

as seen on Stack Overflow - Search for 'Stack Overflow'
i would like to ask you which automated build environment you consider better, based on practical experience. i'm planning to do some .Net and some Java development, so i would like to have a tool that supports both these platforms. i've been reading around and found out about CruiseControl.NET,… >>> More
Tech Article: Oracle ADF Essentials - Continuous Integration with Hudson

as seen on Oracle Technology Network - Search for 'Oracle Technology Network'
The basics of installing and configuring the Hudson integration engine to continuously build and test Oracle ADF applications >>> More
Continuous Integration with TeamCity

as seen on Dot net Slackers - Search for 'Dot net Slackers'
TeamCity is a CI server that has been gaining popularity in the .NET community for the last few years. It is packed with handy futures which we will discuss in a minute and has a free version suitable for smaller teams. >>> More
Continuous Integration with Hudson

as seen on Oracle Technology Network - Search for 'Oracle Technology Network'
New technical article >>> More