Klocwork code static analysis tool

“ With the help of Klocwork, We can find problems that may be missed faster than traditional manual analysis and testing . This enables us to deliver high-quality software that we are proud of , And meet customer expectations .”
— SCM System Engineering Manager

Klocwork brief introduction

Klocwork Is aimed at C,C ++,C＃ and Java One of the most accurate code analysis tools of programming language . It is a modern agile code static analysis tool , Scalable to projects of any size , And in DevOps Effective operation in the cycle . Besides , It also passed TÜV-SÜD Functional safety compliance certification , Include IEC 61508,ISO 26262,IEC 62304 and EN 50128.

Klocwork The main function

Support DevOps
We think ,Klocwork The design of the tool first considers continuous integration and continuous delivery , This makes static code analysis as CI / CD Part of the pipe becomes easier .

● Difference analysis
Use from Klocwork Server System context data , You can analyze only changed files , At the same time, it also provides the results of difference analysis , It's like analyzing the whole system . This gives you the shortest analysis time .

● Easy to automate
Klocwork It has a general command line interface , Can pass REST API visit Klocwork Defect data , And all output formats use standard formats , for example XML,JSON and PDF.

● Containerized construction
Klocwork Can run in containerized and cloud based build systems , And support the provision of machine instances on demand . Provide maximum flexibility and opportunity to use internal or external cloud services for code analysis .

control , Collaboration and reporting
Klocwork Portal The dashboard is to analyze data , trend , Centralized storage of indicators , It can be done by Web Browser access configures the code base throughout the organization .

The height of the instrument panel can be customized , Make your developers , Managers and other stakeholders can ：
● Define the overall or specific project quality evaluation 、 Security objectives and rules configuration .
● Control access rights and approve workflows .
● View trend and indicator data for project quality and compliance .
● Generate compliance and security reports .
● According to the seriousness of , Prioritize defects by location and lifecycle .
● Distinguish new problems from old code problems .
● Push the backlog to the change control system .

Designed for developers
By seamlessly integrating static code analysis with the rest of your development tools ,Klocwork Move defect detection to the left , And improve the adoption rate of developers as a tool for training and productivity .
● No user configuration is required
Klocwork Out of the box support for hundreds of compilers and cross compilers , Therefore, the integration can be built automatically .
● Easy to use
popular IDE plug-in unit （ Include Microsoft Visual Studio ,Eclipse,IntelliJ etc. ）.
● Connect desktop
The change of local code enables the plug-in that is using the desktop to connect in IDE Provide difference analysis results in time .
● Detailed feedback and help
Mark defects and code violations within the process by risk severity . For every defect and code violation , You will get detailed reason information , And provide rich context sensitive help and revision guide . This provides a very good opportunity for us to understand and learn .
● Custom rule
The graphical custom checker creation tool can be used quickly , Make it easy for a project or organization to implement specific rules , Thus further enriching learning opportunities .

Architecture analysis
Klocwork Also with architecture visualization and execution tools （ Such as Structure 101） Integrate together , To allow users to further improve the overall quality and maintainability of their code base through clean and correct dependencies .

Klocwork Quality coding standard

Use Klocwork Easy compliance with quality coding standards . You can use the following compliance taxonomy to implement coding standards throughout the code base . and , You will get fewer false positives and false negatives in the diagnostic program .

Klocwork Application field

● Aerospace and national defense
Aerospace , Defense and military organizations use embedded software every day . Ensure software security , Reliability and reliability are essential . This puts developers under pressure to develop flawless software .

Large code bases and complex systems make this a challenge . Strict compliance requirements make it more difficult . With the help of Klocwork , Airborne system developers can easily prove compliance and develop quality systems .

● Energy technology
Energy and utility product development teams need to ensure functional safety compliance , Comply with industry regulations and mitigate potential security vulnerabilities and coding errors . For effectively meeting the needs of the team , This can be a major challenge .

With the help of Klocwork, Energy and utility product development teams can easily comply with coding standards , Identify potential risks and have an understanding of compliance .

● Embedded development

Managing the growth of digital assets is essential for the effective design and development of embedded systems . All these processes must be carried out under strict compliance guidelines . Industries that are critical to quality , The code needs to meet the coding standards and industry requirements . and ,Klocwork It can prove that your code meets the requirements .

● Medical equipment

The quality of software embedded in medical devices may mean the difference between life and death . therefore , The review of equipment safety is becoming more and more strict .

By using Klocwork , You will be able to meet changing government regulations , And verify that your medical device is safe , Reliable and efficient .

● Automobile industry

Automotive software development needs more than 1 One hundred million lines of code . and , The embedded software installed is usually developed independently of the rest of the car .

therefore , The development team must be able to effectively address a unique set of challenges . Use Klocwork , The development team can collaborate on projects , And ensure that its code is of high quality and meets the requirements of laws and regulations .

Klocwork Supported functional safety standards

KlocworkSCA Industry functional safety standards and certification can be realized
IEC 61508（ General industry , The defence ）
ISO 26262（ automobile ）
EN 50128（ The railway ）
IEC 62304（ Medical Science ）
DO-178B / C（ Aerospace ）

adopt ISO,IEC and EN Compliance certification
Klocwork Independently certified , Compliance with regulatory requirements .

adopt TüV-SüD authentication
Klocwork Passed TüV-SüD authentication , Comply with functional safety standards ：
IEC 61508（ General industry ）
ISO 26262（ automobile ）
IEC 62304（ Medical Science ）
EN 50128（ The railway ）

Learn more about C,C++,C# and Java Version of Klocwork：http://www.softtest.cn