[ 
https://issues.apache.org/jira/browse/KAFKA-1722?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14281981#comment-14281981
 ] 

Don Bosco Durai commented on KAFKA-1722:
----------------------------------------

Ashish, Coverity is another option. They are free for open source projects. I 
have been scanning for most of the Hadoop projects.

There is already a project created for Kafka 
(https://scan.coverity.com/projects/1340). I am not sure who is the owner, but 
if you want I can investigate that path. 

I had checked with Coverity before and they don't support Scala yet. So it will 
be only for the java components.


> static analysis code coverage for pci audit needs
> -------------------------------------------------
>
>                 Key: KAFKA-1722
>                 URL: https://issues.apache.org/jira/browse/KAFKA-1722
>             Project: Kafka
>          Issue Type: Bug
>          Components: security
>            Reporter: Joe Stein
>            Assignee: Ashish Kumar Singh
>             Fix For: 0.9.0
>
>
> Code coverage is a measure used to describe the degree to which the source 
> code of a product is tested. A product with high code coverage has been more 
> thoroughly tested and has a lower chance of containing software bugs than a 
> product with low code coverage. Apart from PCI audit needs, increasing user 
> base of Kafka makes it important to increase code coverage of Kafka. 
> Something just can not be improved without being measured.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to