adam/znc
1
0 Fork 0
mirror of https://github.com/znc/znc.git synced 2026-10-31 01:32:02 +01:00
Code Issues 362 Packages Projects Releases Wiki Activity

Enable LGTM for code analysis (Semmle) #933

New Issue
Closed
opened 2026-10-05 04:53:52 +02:00 by adam · 2 comments
adam commented 2026-10-05 04:53:52 +02:00
Owner
Copy link
Copy source

Will help to eliminate obvious errors, along with Coverity - they do report different issues. C/C++ is supported. See:

Their main focus is the security, which is important for a network service like ZNC. You can read many good articles on how the found various vulnerabilities using their engine and query language (QL) in their blog.

image

Will help to eliminate obvious errors, along with Coverity - they do report different issues. C/C++ is supported. See: - https://lgtm.com/ - https://github.com/marketplace/lgtm Their main focus is the security, which is important for a network service like ZNC. You can read many good articles on how the found various vulnerabilities using their engine and query language (QL) in [their blog](https://blog.semmle.com/). ![image](https://user-images.githubusercontent.com/203261/69871982-2f673c80-12ef-11ea-85bd-ff273782cf90.png) <!-- github-sync-id:531724011 -->
adam closed this issue 2026-10-05 04:53:52 +02:00
adam commented 2026-10-05 04:53:53 +02:00
Author
Owner
Copy link
Copy source

I'm a fan of LGTM/Semmle analysis, but it's worth mentioning that its PR jobs can take quite a while to run—at least, they do for the sizable Python project I use it on. 15 minutes, usually, which is more than 6x the longest CI build/test run we've had in recent memory.

Obviously, YMMV, as the projects are in different languages and of different sizes, but I hope my experience is helpful in making a decision!

I'm a fan of LGTM/Semmle analysis, but it's worth mentioning that its PR jobs can take quite a while to run—at least, they do for the sizable Python project I use it on. 15 minutes, usually, which is more than 6x the longest CI build/test run we've had in recent memory. Obviously, YMMV, as the projects are in different languages and of different sizes, but I hope my experience is helpful in making a decision! <!-- github-comment-id:561004203 -->
adam commented 2026-10-05 04:53:54 +02:00
Author
Owner
Copy link
Copy source

I enabled something, let's see what happens.

I enabled something, let's see what happens. <!-- github-comment-id:562388009 -->
Sign in to join this conversation.
No Branch/Tag Specified
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
adam (Adam Wojcieszonek)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/znc#933