针对Java的静态分析工具推荐？ [英] Static Analysis tool recommendation for Java?

问题描述

对Java世界模糊不清我正在谷歌搜索一个静态分析工具，该工具也足够聪明，可以解决它发现的问题。我在CodePro工具上运行但是，我再次成为Java社区的新手并且不了解供应商。

Being vaguely familiar with the Java world I was googling for a static analysis tool that would also was intelligent enough to fix the issues it finds. I ran at CodePro tool but, again, I'm new to the Java community and don't know the vendors.

根据上述标准，您可以推荐什么工具？

What tool can you recommend based on the criteria above?

推荐答案

FindBugs，PMD和Checkstyle都是很好的选择，特别是如果你将它们集成到你的构建过程中。

FindBugs, PMD and Checkstyle are all excellent choices especially if you integrate them into your build process.

在我上一家公司，我们也使用了 Fortify 检查潜在的安全问题。我们很幸运拥有企业许可证，因此我不知道所涉及的费用。

At my last company we also used Fortify to check for potential security problems. We were fortunate to have an enterprise license so I don't know the cost involved.

这篇关于针对Java的静态分析工具推荐？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！