{"id":414,"date":"2015-05-03T00:00:00","date_gmt":"2015-05-03T00:00:00","guid":{"rendered":"http:\/\/www.scmgalaxy.com\/tutorials\/2015\/05\/03\/source-code-analysis-tools-evaluation-criteria\/"},"modified":"2021-02-27T09:50:57","modified_gmt":"2021-02-27T09:50:57","slug":"source-code-analysis-tools-evaluation-criteria","status":"publish","type":"post","link":"https:\/\/www.scmgalaxy.com\/tutorials\/source-code-analysis-tools-evaluation-criteria\/","title":{"rendered":"Source code analysis tools: Evaluation criteria"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-3468 size-full\" src=\"https:\/\/www.scmgalaxy.com\/tutorials\/wp-content\/uploads\/2015\/05\/source-code-analysis-tools-.png\" alt=\"code-analysis-tools-evaluation-criteria\" width=\"600\" height=\"400\" srcset=\"https:\/\/www.scmgalaxy.com\/tutorials\/wp-content\/uploads\/2015\/05\/source-code-analysis-tools-.png 600w, https:\/\/www.scmgalaxy.com\/tutorials\/wp-content\/uploads\/2015\/05\/source-code-analysis-tools--300x200.png 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p><strong>Source code analysis tools: Evaluation criteria<\/strong><\/p>\n<p><strong>Support<\/strong>\u00a0for the programming languages you use. Some companies support mobile devices, while others concentrate on enterprise languages like Java, .Net, C, C++ and even Cobol.<\/p>\n<p><strong>Good bug-finding performance<\/strong>, using a proof of concept assessment. Hint: Use an older build of code you had issues with and see how well the product catches bugs you had to find manually. Look for both thoroughness and accuracy. Fewer false positives means less manual work.<\/p>\n<p><strong>Internal knowledge bases<\/strong>\u00a0that provide descriptions of vulnerabilities and remediation information. Test for easy access and cross-referencing to discovered findings.<\/p>\n<p><strong>Tight integration<\/strong>\u00a0with your development platforms. Long-term, you&#8217;ll likely want developers to incorporate security analysis into their daily routines.<\/p>\n<p><strong>A robust finding-suppression mechanism<\/strong>\u00a0to prevent false positives from reoccurring once you&#8217;ve verified them as a non-issue.<\/p>\n<p><strong>Ability to easily define additional rules<\/strong>\u00a0so the tool can enforce internal coding policies.<\/p>\n<p><strong>A centralized reporting component<\/strong>\u00a0if you have a large team of developers and managers who want access to findings, trending and overview reporting<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Source code analysis tools: Evaluation criteria Support\u00a0for the programming languages you use. Some companies support mobile devices, while others concentrate [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":3468,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_joinchat":[],"footnotes":""},"categories":[515],"tags":[517,328,1590,1003,1092,1700,1699,1702,832,545,1703,302,872,1704,1698,1701,311,1452,670],"class_list":["post-414","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-source-code-analysis-tools","tag-analysis","tag-bug","tag-choose","tag-code","tag-code-analysis-tools","tag-criteria","tag-evaluation","tag-evaluation-criteria","tag-find","tag-how","tag-how-to-evaluate-source-code-analysis-tools","tag-issue","tag-performance","tag-points","tag-source","tag-source-code-analysis-tools","tag-tools","tag-ways","tag-what"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Source code analysis tools: Evaluation criteria - scmGalaxy<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.scmgalaxy.com\/tutorials\/source-code-analysis-tools-evaluation-criteria\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Source code analysis tools: Evaluation criteria - scmGalaxy\" \/>\n<meta property=\"og:description\" content=\"Source code analysis tools: Evaluation criteria Support\u00a0for the programming languages you use. Some companies support mobile devices, while others concentrate [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.scmgalaxy.com\/tutorials\/source-code-analysis-tools-evaluation-criteria\/\" \/>\n<meta property=\"og:site_name\" content=\"scmGalaxy\" \/>\n<meta property=\"article:published_time\" content=\"2015-05-03T00:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-02-27T09:50:57+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.scmgalaxy.com\/tutorials\/wp-content\/uploads\/2015\/05\/source-code-analysis-tools-.png\" \/>\n\t<meta property=\"og:image:width\" content=\"600\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"scmgalaxy K\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"scmgalaxy K\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.scmgalaxy.com\\\/tutorials\\\/source-code-analysis-tools-evaluation-criteria\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.scmgalaxy.com\\\/tutorials\\\/source-code-analysis-tools-evaluation-criteria\\\/\"},\"author\":{\"name\":\"scmgalaxy K\",\"@id\":\"https:\\\/\\\/www.scmgalaxy.com\\\/tutorials\\\/#\\\/schema\\\/person\\\/fc12ad190f540e79460243c81148d102\"},\"headline\":\"Source code analysis tools: Evaluation criteria\",\"datePublished\":\"2015-05-03T00:00:00+00:00\",\"dateModified\":\"2021-02-27T09:50:57+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.scmgalaxy.com\\\/tutorials\\\/source-code-analysis-tools-evaluation-criteria\\\/\"},\"wordCount\":179,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/www.scmgalaxy.com\\\/tutorials\\\/source-code-analysis-tools-evaluation-criteria\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.scmgalaxy.com\\\/tutorials\\\/wp-content\\\/uploads\\\/2015\\\/05\\\/source-code-analysis-tools-.png\",\"keywords\":[\"analysis\",\"bug\",\"Choose\",\"Code\",\"Code analysis tools\",\"Criteria\",\"Evaluation\",\"Evaluation criteria\",\"Find\",\"How\",\"How to Evaluate Source code analysis Tools\",\"issue\",\"Performance\",\"Points\",\"Source\",\"Source code analysis Tools\",\"Tools\",\"Ways\",\"What\"],\"articleSection\":[\"source code analysis tools\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.scmgalaxy.com\\\/tutorials\\\/source-code-analysis-tools-evaluation-criteria\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.scmgalaxy.com\\\/tutorials\\\/source-code-analysis-tools-evaluation-criteria\\\/\",\"url\":\"https:\\\/\\\/www.scmgalaxy.com\\\/tutorials\\\/source-code-analysis-tools-evaluation-criteria\\\/\",\"name\":\"Source code analysis tools: Evaluation criteria - scmGalaxy\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.scmgalaxy.com\\\/tutorials\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.scmgalaxy.com\\\/tutorials\\\/source-code-analysis-tools-evaluation-criteria\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.scmgalaxy.com\\\/tutorials\\\/source-code-analysis-tools-evaluation-criteria\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.scmgalaxy.com\\\/tutorials\\\/wp-content\\\/uploads\\\/2015\\\/05\\\/source-code-analysis-tools-.png\",\"datePublished\":\"2015-05-03T00:00:00+00:00\",\"dateModified\":\"2021-02-27T09:50:57+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.scmgalaxy.com\\\/tutorials\\\/#\\\/schema\\\/person\\\/fc12ad190f540e79460243c81148d102\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.scmgalaxy.com\\\/tutorials\\\/source-code-analysis-tools-evaluation-criteria\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.scmgalaxy.com\\\/tutorials\\\/source-code-analysis-tools-evaluation-criteria\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.scmgalaxy.com\\\/tutorials\\\/source-code-analysis-tools-evaluation-criteria\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.scmgalaxy.com\\\/tutorials\\\/wp-content\\\/uploads\\\/2015\\\/05\\\/source-code-analysis-tools-.png\",\"contentUrl\":\"https:\\\/\\\/www.scmgalaxy.com\\\/tutorials\\\/wp-content\\\/uploads\\\/2015\\\/05\\\/source-code-analysis-tools-.png\",\"width\":600,\"height\":400,\"caption\":\"code-analysis-tools-evaluation-criteria\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.scmgalaxy.com\\\/tutorials\\\/source-code-analysis-tools-evaluation-criteria\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.scmgalaxy.com\\\/tutorials\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Source code analysis tools: Evaluation criteria\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.scmgalaxy.com\\\/tutorials\\\/#website\",\"url\":\"https:\\\/\\\/www.scmgalaxy.com\\\/tutorials\\\/\",\"name\":\"scmGalaxy\",\"description\":\"A Platform for Software Engineers\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.scmgalaxy.com\\\/tutorials\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.scmgalaxy.com\\\/tutorials\\\/#\\\/schema\\\/person\\\/fc12ad190f540e79460243c81148d102\",\"name\":\"scmgalaxy K\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4b902ea8c77ee0a326c112f29d0edf51b7c3e1cd05c4fb92a810177e9c3f12a9?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4b902ea8c77ee0a326c112f29d0edf51b7c3e1cd05c4fb92a810177e9c3f12a9?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4b902ea8c77ee0a326c112f29d0edf51b7c3e1cd05c4fb92a810177e9c3f12a9?s=96&d=mm&r=g\",\"caption\":\"scmgalaxy K\"},\"sameAs\":[\"http:\\\/\\\/www.DevOpsSchool.com\"],\"url\":\"https:\\\/\\\/www.scmgalaxy.com\\\/tutorials\\\/author\\\/scmgalaxy\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Source code analysis tools: Evaluation criteria - scmGalaxy","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.scmgalaxy.com\/tutorials\/source-code-analysis-tools-evaluation-criteria\/","og_locale":"en_US","og_type":"article","og_title":"Source code analysis tools: Evaluation criteria - scmGalaxy","og_description":"Source code analysis tools: Evaluation criteria Support\u00a0for the programming languages you use. Some companies support mobile devices, while others concentrate [&hellip;]","og_url":"https:\/\/www.scmgalaxy.com\/tutorials\/source-code-analysis-tools-evaluation-criteria\/","og_site_name":"scmGalaxy","article_published_time":"2015-05-03T00:00:00+00:00","article_modified_time":"2021-02-27T09:50:57+00:00","og_image":[{"width":600,"height":400,"url":"https:\/\/www.scmgalaxy.com\/tutorials\/wp-content\/uploads\/2015\/05\/source-code-analysis-tools-.png","type":"image\/png"}],"author":"scmgalaxy K","twitter_card":"summary_large_image","twitter_misc":{"Written by":"scmgalaxy K","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.scmgalaxy.com\/tutorials\/source-code-analysis-tools-evaluation-criteria\/#article","isPartOf":{"@id":"https:\/\/www.scmgalaxy.com\/tutorials\/source-code-analysis-tools-evaluation-criteria\/"},"author":{"name":"scmgalaxy K","@id":"https:\/\/www.scmgalaxy.com\/tutorials\/#\/schema\/person\/fc12ad190f540e79460243c81148d102"},"headline":"Source code analysis tools: Evaluation criteria","datePublished":"2015-05-03T00:00:00+00:00","dateModified":"2021-02-27T09:50:57+00:00","mainEntityOfPage":{"@id":"https:\/\/www.scmgalaxy.com\/tutorials\/source-code-analysis-tools-evaluation-criteria\/"},"wordCount":179,"commentCount":0,"image":{"@id":"https:\/\/www.scmgalaxy.com\/tutorials\/source-code-analysis-tools-evaluation-criteria\/#primaryimage"},"thumbnailUrl":"https:\/\/www.scmgalaxy.com\/tutorials\/wp-content\/uploads\/2015\/05\/source-code-analysis-tools-.png","keywords":["analysis","bug","Choose","Code","Code analysis tools","Criteria","Evaluation","Evaluation criteria","Find","How","How to Evaluate Source code analysis Tools","issue","Performance","Points","Source","Source code analysis Tools","Tools","Ways","What"],"articleSection":["source code analysis tools"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.scmgalaxy.com\/tutorials\/source-code-analysis-tools-evaluation-criteria\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.scmgalaxy.com\/tutorials\/source-code-analysis-tools-evaluation-criteria\/","url":"https:\/\/www.scmgalaxy.com\/tutorials\/source-code-analysis-tools-evaluation-criteria\/","name":"Source code analysis tools: Evaluation criteria - scmGalaxy","isPartOf":{"@id":"https:\/\/www.scmgalaxy.com\/tutorials\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.scmgalaxy.com\/tutorials\/source-code-analysis-tools-evaluation-criteria\/#primaryimage"},"image":{"@id":"https:\/\/www.scmgalaxy.com\/tutorials\/source-code-analysis-tools-evaluation-criteria\/#primaryimage"},"thumbnailUrl":"https:\/\/www.scmgalaxy.com\/tutorials\/wp-content\/uploads\/2015\/05\/source-code-analysis-tools-.png","datePublished":"2015-05-03T00:00:00+00:00","dateModified":"2021-02-27T09:50:57+00:00","author":{"@id":"https:\/\/www.scmgalaxy.com\/tutorials\/#\/schema\/person\/fc12ad190f540e79460243c81148d102"},"breadcrumb":{"@id":"https:\/\/www.scmgalaxy.com\/tutorials\/source-code-analysis-tools-evaluation-criteria\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.scmgalaxy.com\/tutorials\/source-code-analysis-tools-evaluation-criteria\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.scmgalaxy.com\/tutorials\/source-code-analysis-tools-evaluation-criteria\/#primaryimage","url":"https:\/\/www.scmgalaxy.com\/tutorials\/wp-content\/uploads\/2015\/05\/source-code-analysis-tools-.png","contentUrl":"https:\/\/www.scmgalaxy.com\/tutorials\/wp-content\/uploads\/2015\/05\/source-code-analysis-tools-.png","width":600,"height":400,"caption":"code-analysis-tools-evaluation-criteria"},{"@type":"BreadcrumbList","@id":"https:\/\/www.scmgalaxy.com\/tutorials\/source-code-analysis-tools-evaluation-criteria\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.scmgalaxy.com\/tutorials\/"},{"@type":"ListItem","position":2,"name":"Source code analysis tools: Evaluation criteria"}]},{"@type":"WebSite","@id":"https:\/\/www.scmgalaxy.com\/tutorials\/#website","url":"https:\/\/www.scmgalaxy.com\/tutorials\/","name":"scmGalaxy","description":"A Platform for Software Engineers","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.scmgalaxy.com\/tutorials\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.scmgalaxy.com\/tutorials\/#\/schema\/person\/fc12ad190f540e79460243c81148d102","name":"scmgalaxy K","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/4b902ea8c77ee0a326c112f29d0edf51b7c3e1cd05c4fb92a810177e9c3f12a9?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/4b902ea8c77ee0a326c112f29d0edf51b7c3e1cd05c4fb92a810177e9c3f12a9?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4b902ea8c77ee0a326c112f29d0edf51b7c3e1cd05c4fb92a810177e9c3f12a9?s=96&d=mm&r=g","caption":"scmgalaxy K"},"sameAs":["http:\/\/www.DevOpsSchool.com"],"url":"https:\/\/www.scmgalaxy.com\/tutorials\/author\/scmgalaxy\/"}]}},"_links":{"self":[{"href":"https:\/\/www.scmgalaxy.com\/tutorials\/wp-json\/wp\/v2\/posts\/414","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.scmgalaxy.com\/tutorials\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.scmgalaxy.com\/tutorials\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.scmgalaxy.com\/tutorials\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.scmgalaxy.com\/tutorials\/wp-json\/wp\/v2\/comments?post=414"}],"version-history":[{"count":2,"href":"https:\/\/www.scmgalaxy.com\/tutorials\/wp-json\/wp\/v2\/posts\/414\/revisions"}],"predecessor-version":[{"id":3469,"href":"https:\/\/www.scmgalaxy.com\/tutorials\/wp-json\/wp\/v2\/posts\/414\/revisions\/3469"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.scmgalaxy.com\/tutorials\/wp-json\/wp\/v2\/media\/3468"}],"wp:attachment":[{"href":"https:\/\/www.scmgalaxy.com\/tutorials\/wp-json\/wp\/v2\/media?parent=414"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.scmgalaxy.com\/tutorials\/wp-json\/wp\/v2\/categories?post=414"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.scmgalaxy.com\/tutorials\/wp-json\/wp\/v2\/tags?post=414"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}