Glossary
Static Code Analysis
Without running the code, it involves analyzing program code through techniques such as lexical analysis, syntactic analysis, control flow, and data flow analysis; verifying whether the code meets indicators such as normativity, security, reliability, maintainability, and partial performance.
Analysis Scheme
An analysis scheme, also referred to as an analysis strategy, includes basic configuration, rule configuration, metric configuration, gate configuration, etc. During code analysis, corresponding code analysis will be executed based on the configuration information of the associated scheme. Currently, schemes are categorized into platform-recommended schemes, team analysis schemes, and project analysis schemes.
- Platform-recommended scheme: Users can use it directly without being able to modify the scheme configuration.
- Team analysis scheme: Only users with the corresponding permissions can create/modify team analysis schemes, which can be used by all projects within the team.
- Project analysis scheme: Only users with the corresponding permissions can create/modify project analysis schemes, which can only be used by all code repositories within the project.
Analysis Project
When a user performs analysis on a code repository, a unique analysis project is created based on the selected code repository branch, analysis path, and analysis scheme. This project serves as a carrier for managing analysis execution and viewing analysis results.
Analysis Node
An analysis node is used to execute specific analysis tasks. After a user initiates an analysis task, the task will be assigned to the corresponding node for execution based on the node pool in the analysis scheme.
Rule Package
A collection of rules organized by the official team for common scenarios, such as sensitive information scanning and WeChat Mini Program code quality inspection. Users can flexibly configure rule packages in analysis schemes based on their business usage scenarios.
Issue Owner
The git blame owner, usually the committer of the corresponding issue line.