[
https://issues.apache.org/jira/browse/FINERACT-712?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17112646#comment-17112646
]
Ed Cable commented on FINERACT-712:
-----------------------------------
[~vorburger]
Pardon my lack of technical knowledge but the following tools came up as ones
that Mojaloop community were using. Would any of these also be valuable to run
or are some of the one's we've already run/are running serve the same purpose?
# Jlint - http://jlint.sourceforge.net/
# TOIF (Total Output Integration Framework) -
https://github.com/KdmAnalytics/toif/blob/master/README.md
These ones at the container level:
# Anchore - https://anchore.com/opensource/
# Snyk.io - https://snyk.io/
# Docker Bench for Security - https://github.com/docker/docker-bench-security
> Fineract codebase should pass PMD, Findbugs and Checkstyle analysis
> -------------------------------------------------------------------
>
> Key: FINERACT-712
> URL: https://issues.apache.org/jira/browse/FINERACT-712
> Project: Apache Fineract
> Issue Type: Improvement
> Reporter: Vishwas Babu A J
> Priority: Major
> Labels: gsoc2019
> Original Estimate: 80h
> Remaining Estimate: 80h
>
> The fineract codebase has findbugs (now spotbugs) and PMD gradle plugins,
> however, the ignoreFailures option is enabled on the gradle file. Disabling
> the same and fixing current errors is crucial for the long term
> maintainability of the Fineract project.
> Another good to have would be checkstyle analysis.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
