정적 분석 도구 실전 가이드 - clang-tidy, cppcheck, SonarQube

sudo apt-get install clang-tidy

sudo yum install clang-tools-extra

brew install llvm

clang-tidy --version

clang-tidy test.c -- -Iinclude

clang-tidy -list-checks

clang-tidy test.c -checks='-*,bugprone-*,cert-*'

---
Checks: '-*,
  bugprone-*,
  cert-*,
  cppcoreguidelines-*,
  modernize-*,
  performance-*,
  readability-*,
  -modernize-use-trailing-return-type'
WarningsAsErrors: ''
HeaderFilterRegex: ''
FormatStyle: none

clang-tidy test.c -fix -checks='readability-braces-around-statements'

cmake -DCMAKE_EXPORT_COMPILE_COMMANDS=ON ..

cp build/compile_commands.json .

clang-tidy src/*.c

sudo apt-get install cppcheck

sudo yum install cppcheck

brew install cppcheck

cppcheck --version
# Cppcheck 2.19

cppcheck test.c

cppcheck src/

cppcheck --enable=all src/

cppcheck -Iinclude -Ilib src/

cppcheck --enable=warning,performance src/

cppcheck --xml --xml-version=2 src/ 2> cppcheck-result.xml

// cppcheck-suppress nullPointer
int *p = NULL;
*p = 10;

cppcheck --suppressions-list=suppressions.txt src/

cppcheck --addon=misra src/

docker run -d --name sonarqube -p 9000:9000 sonarqube:community

wget https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/sonar-scanner-cli-4.8.0.2856-linux.zip
unzip sonar-scanner-cli-4.8.0.2856-linux.zip
export PATH=$PATH:$PWD/sonar-scanner-4.8.0.2856-linux/bin

sonar.projectKey=my-project
sonar.projectName=My C Project
sonar.projectVersion=1.0
sonar.sources=src
sonar.language=c
sonar.sourceEncoding=UTF-8

sonar-scanner \
  -Dsonar.host.url=http://localhost:9000 \
  -Dsonar.login=YOUR_TOKEN

wget http://localhost:9000/static/cpp/build-wrapper-linux-x86.zip
unzip build-wrapper-linux-x86.zip

build-wrapper-linux-x86/build-wrapper-linux-x86-64 --out-dir bw-output make clean all

sonar-scanner \
  -Dsonar.cfamily.build-wrapper-output=bw-output

name: Static Analysis
 
on: [push, pull_request]
 
jobs:
  clang-tidy:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      
      - name: Install clang-tidy
        run: sudo apt-get install -y clang-tidy
      
      - name: Run clang-tidy
        run: clang-tidy src/*.c -- -Iinclude
  
  cppcheck:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      
      - name: Install cppcheck
        run: sudo apt-get install -y cppcheck
      
      - name: Run cppcheck
        run: cppcheck --enable=all --xml --xml-version=2 src/ 2> cppcheck-result.xml
      
      - name: Upload results
        uses: actions/upload-artifact@v3
        with:
          name: cppcheck-results
          path: cppcheck-result.xml

#!/bin/bash
 
echo "Running clang-tidy..."
clang-tidy --quiet $(git diff --cached --name-only --diff-filter=ACM | grep '\\.c$') -- -Iinclude
 
if [ $? -ne 0 ]; then
    echo "clang-tidy found issues. Aborting commit."
    exit 1
fi
 
echo "Running cppcheck..."
cppcheck --quiet --enable=warning $(git diff --cached --name-only --diff-filter=ACM | grep '\\.c$')
 
if [ $? -ne 0 ]; then
    echo "cppcheck found issues. Aborting commit."
    exit 1
fi
 
echo "Static analysis passed!"
exit 0

chmod +x .git/hooks/pre-commit

# clang-tidy
find_program(CLANG_TIDY_EXE NAMES "clang-tidy")
if(CLANG_TIDY_EXE)
    set(CMAKE_C_CLANG_TIDY 
        ${CLANG_TIDY_EXE};
        -checks=-*,bugprone-*,cert-*;
    )
endif()
 
# cppcheck
find_program(CPPCHECK_EXE NAMES "cppcheck")
if(CPPCHECK_EXE)
    set(CMAKE_C_CPPCHECK 
        ${CPPCHECK_EXE};
        --enable=warning,performance;
        --inconclusive;
    )
endif()

find src -name '*.c' | xargs -P$(nproc) -n1 clang-tidy

git diff --name-only HEAD | grep '\\.c$' | xargs clang-tidy