The Clang static analyzer has proved much more reliable than PC-Lint and other Lint variants and similar software in picking up actual issues (not surprisingly, when reading the background). The scan-build
method is nice even for automatic builds, but it lacks one important feature that I haven't found any information about. How can I figure out whether or not the latest commit worsened the overall code quality or not?! I'd have to compare the error counts from a previous run, sure thing. But parsing the HTML (also given the pseudo-random naming scheme) seems rather odd.
What ways are there to get a meaningful integration of the static analyzer in such a scenario?
Note: just running ccc-analyzer
doesn't seem to make a lot of sense here either. Although in this case the output is text-only (i.e. not HTML) and thus easier parsed. But I'm open for suggestions even if they involve running ccc-analyzer
on the individual files instead of scan-build
on the whole make
process.