Function Overview
Tencent Cloud Code Analysis (TCA) was initiated in 2012 (with the internal codename CodeDog). It is a cloud-native, distributed, high-performance integrated code analysis, tracking, and management platform that aggregates numerous code analysis tools. Its primary functions include continuously tracking and analyzing code, monitoring project code quality, and supporting teams in inheriting and promoting code culture.
Dedicated to tracking every line of code iteration, it helps maintain an excellent code culture!
It precisely tracks and manages code quality defects, code specifications, code security vulnerabilities, invalid code identified through analysis, as well as measures code complexity, duplicate code, and code statistics.
Code analysis is a technical process that examines program code using techniques such as lexical analysis, syntactic analysis, control flow analysis, and data flow analysis. It verifies whether the code meets criteria such as normativity, security, reliability, maintainability, and partial performance, and conducts comprehensive analysis and measurement of code metrics.
Important
This document is a help guide for Tencent Cloud Code Analysis. The content is for reference only; the actual content provided by the platform shall prevail!
Brief Architecture
TCA consists of a TCA platform side and a TCA client side:
The platform side is primarily used for configuration management and storing analysis results.
The client side hosts code analysis tasks and executes analysis on its host machine. TCA adopts a distributed client architecture, allowing flexible deployment of clients to any region (with access to the TCA platform side required), such as using them as one-time temporary nodes or permanent nodes.
Core Functions
Tips
代码库分析：是指在平台点击接入代码库，登记代码库地址、凭证等信息，启动分析时，客户端节点会获取分析任务，通过 git 命令拉取代码执行代码分析。如代码库在企业内网，但需要在 TCA SAAS 上执行代码分析，可参考内网仓库分析。
源码包分析：是指在平台点击接入源码包，上传源码包（将代码库压缩成源码包），启动分析时会解压源码包执行代码分析。
制品库分析：是指在平台点击接入制品库，上传二进制制品（如 docker image、apk 等），启动分析时会启发式解包执行二进制组件成分分析（SCA）
| 主要功能 | 代码库分析 | 源码包分析 | 制品库分析 |
|---|---|---|---|
| 代码检查 | ✅ | ✅ | ❌ |
| 圈复杂度 | ✅ | ✅ | ❌ |
| 重复代码 | ✅ | ✅ | ❌ |
| 代码统计 | ✅ | ✅ | ❌ |
| 历史趋势 | ✅ | ❌ | ❌ |
| 源码组件成分 | ✅ | ✅ | ❌ |
| 二进制组件成分 | ❌ | ❌ | ✅ |
Code Inspection
Through code inspection, it precisely tracks and manages code quality defects, code specifications, code security vulnerabilities, invalid code, and other issues identified during analysis.
Currently, TCA integrates numerous in-house developed and well-known open-source analysis tools, and adopts a hierarchical and separated architecture to enable teams to quickly and self-servingly manage tools.
Code Measurement
It includes measurement information such as code cyclomatic complexity, code duplication rate, and code statistics.
Code Cyclomatic Complexity
Cyclomatic complexity, also known as conditional complexity or loop complexity, measures the complexity of a module's decision structure. A high cyclomatic complexity indicates complex decision logic in the program code, which may lead to low code quality and difficulty in testing and maintenance.
Regularly analyzing the cyclomatic complexity of code in engineering projects can effectively help developers and testers gradually optimize code quality.
Code Duplication Rate
Regularly analyzing duplicate code in engineering projects helps developers identify redundant code, perform code abstraction and refactoring, reduce code risks, and facilitate better management and maintenance of the code.
Code Statistics
It supports full and incremental display of code line count statistics, including code lines, comment lines, and blank lines. This enables effective tracking of continuous changes in code volume within engineering projects and allows viewing the proportion of each programming language.