You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@fineract.apache.org by "Ed Cable (Jira)" <ji...@apache.org> on 2020/05/20 22:52:00 UTC
[jira] [Commented] (FINERACT-712) Fineract codebase should pass
PMD, Findbugs and Checkstyle analysis
[ https://issues.apache.org/jira/browse/FINERACT-712?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17112646#comment-17112646 ]
Ed Cable commented on FINERACT-712:
-----------------------------------
[~vorburger]
Pardon my lack of technical knowledge but the following tools came up as ones that Mojaloop community were using. Would any of these also be valuable to run or are some of the one's we've already run/are running serve the same purpose?
# Jlint - http://jlint.sourceforge.net/
# TOIF (Total Output Integration Framework) - https://github.com/KdmAnalytics/toif/blob/master/README.md
These ones at the container level:
# Anchore - https://anchore.com/opensource/
# Snyk.io - https://snyk.io/
# Docker Bench for Security - https://github.com/docker/docker-bench-security
> Fineract codebase should pass PMD, Findbugs and Checkstyle analysis
> -------------------------------------------------------------------
>
> Key: FINERACT-712
> URL: https://issues.apache.org/jira/browse/FINERACT-712
> Project: Apache Fineract
> Issue Type: Improvement
> Reporter: Vishwas Babu A J
> Priority: Major
> Labels: gsoc2019
> Original Estimate: 80h
> Remaining Estimate: 80h
>
> The fineract codebase has findbugs (now spotbugs) and PMD gradle plugins, however, the ignoreFailures option is enabled on the gradle file. Disabling the same and fixing current errors is crucial for the long term maintainability of the Fineract project.
> Another good to have would be checkstyle analysis.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)