Static Analysis Tools for C# Demo

•Download as PPTX, PDF•

0 likes•152 views

This document provides an overview of StyleCop and FxCop, static analysis tools for .NET code. It demonstrates how to integrate them using Roslyn analyzers to check code conventions and identify potential issues. The demo source code is covered by unit tests with 100% coverage, and contains examples of warnings that are disabled and then fixed to demonstrate how the tools work. Questions are invited at the end.

Technology

STATIC ANALYSIS DEMO
ADRIANO UEDA
adriano.ueda@gmail.com

STYLECOP & FXCOP
• PERFORMS STATIC TESTING: ANALYSIS BEFORE RUNNING THE
PROGRAM
• BASED ON THE “FRAMEWORK DESIGN GUIDELINES”
• https://tiny.cc/design-guidelines
• BOOK RELEASED IN 2008
• BY KRZYSZTOF CWALINA AND BRAD ABRAMS
• ORIGINALLY DEVELOP BY MICROSOFT

WHAT IS FXCOP?
• A STATIC CODE ANALYSIS TOOL TO LOOK FOR ISSUES IN THE
CODE
• PREVIOUSLY A VISUAL STUDIO 2017 EXTENSION
• NOW A ROSLYN ANALYZER
• EASY INTEGRATION WITH THE BUILD PROCESS
• AVAILABLE TO .NET FRAMEWORK AND .NET CORE PROJECTS

WHY TO USE FXCOP?
• INSPECT YOUR CODE BEYOND THE COMPILER SYNTAX
• FIND POSSIBLE ISSUES IN THE CODE
• (EVEN IF COMPILES FINE)

HOW TO USE?
• INSTALL THE NUGET PACKAGE
• RECOMMENDED WAY
• Install-Package Microsoft.CodeAnalysis.FxCopAnalyzers
• (OR INSTALL THE VISUAL STUDIO EXTENSION)
• BUILD YOUR PROJECT

HOW TO USE? (CONT’D)
• INSPECT THE WARNING MESSAGES:

HOW TO DISABLE WARNINGS
• USE THE SUPPRESSMESSAGE ATTRIBUTE

HOW TO DISABLE WARNINGS (CONT’D)
• OR USE THE #PRAGMA DIRECTIVE

FXCOP DEMO
• USES FXCOP
• COVERED WITH UNIT TESTS
• HAS 100% COVERAGE
• DOES NOT THROWS WARNING BY DEFAULT
• SET THE DISABLE_FIXES CONDITIONAL TO ENABLE WARNINGS
• FXCOP WILL THROW FOUR WARNINGS

DEMO: DISABLE FIXES
SET THE DISABLE_FIXES SYMBOL TO ENABLE FXCOP WARNINGS

DEMO: EMPTY INTERFACE
FXCOP WILL WARN ABOUT EMPTY INTERFACES

DEMO: WARNING MESSAGE
FXCOP WARNING MESSAGE WITH LINK TO EXPLANATION

DEMO: EXPLANATION
THE WARNING HAS A REFERENCE LINK

WHAT IS STYLECOP?
• STATIC CODE ANALYSIS TOOL TO CHECK YOU CODE AGAINST
CODE CONVENTIONS
• ROSLYN ANALYZER

WHY TO USE STYLECOP?
• INCREASE CODE READABILITY
• ENFORCE CODE CONVENTIONS

HOW TO USE?
• INSTALL THE NUGET PACKAGE
• RECOMMENDED WAY: ROSLYN ANAYLZER
• Install-Package StyleCop.Analyzers
• ADD THE stylecop.json
• BUILD YOUR PROJECT
• INSPECT THE WARNING MESSAGES

STYLECOP DEMO
https://tiny.cc/sa-demo-src

STYLECOP DEMO
• USES STYLECOP
• COVERED BY UNIT TESTS
• HAS 100% COVERAGE
• DOES NOT THROWS WARNING BY DEFAULT
• SET THE DISABLE_FIXES CONDITIONAL TO ENABLE WARNINGS
• STYLECOP WILL THROW THREE WARNINGS

DEMO: DISABLE FIXES
SET THE DISABLE_FIXES SYMBOL TO ENABLE STYLECOP WARNINGS

DEMO: SPACING
STYLECOP WILL WARN ABOUT SPACING

DEMO: FIX
ADDING SPACE WILL REMOVE THE WARNING

DEMO: PARAMETERS
MOVE EACH PARAMETER TO ITS OWN LINE

DEMO: PARAMETERS FIX
STYLECOP WILL WARN ABOUT PARAMETERS MISALIGNMENT

LINKS
Slides: https://tiny.cc/sa-demo
Source code: https://tiny.cc/sa-demo-src

THANK YOU!
Adriano Ueda
https://github.com/aueda

Many of us are using elastic stack with logstash as a way to gather logs in a central place and parse them into understandable information. Throw on Kibana for root cause analysis and Grafana for beautiful dashboards and the picture is almost complete. But there has been one thing missing: monitoring logs for issues and taking action on them in icinga. This has recently been made possible by the logstash output for icinga (https://github.com/Icinga/logstash-output-icinga). This not only allows us to raise alerts, it also allows us to do things like schedule downtimes and add comments to hosts. In this session we’ll explore the possibilities brought on by this new logstash output and show you some examples of what you can do with it.

Continuous Delivery Agile Tour Beirut 2015

Dimitri Baeli

Spinnaker at DevOpsDays Montreal

CloudOps2005

Continuous Integration for Spark Apps by Sean McIntyre

Spark Summit

StyleCop breaking down the barriers to entry

Gary Park

ASP.NET MVC Best Practices malisa ncube

Malisa Ncube

Conference session from Oracle Code One San Francisco 2018 - In the brave new world of microservices, the need for polyglot solutions is growing, making it harder to standardize continuous delivery pipelines across many different languages and runtimes. Tasks like compiling, packaging, profiling or verifying software components, are now more diverse and our toolbelt as developers does not cease to grow. Thankfully, there are ways to prescribe and standardize without losing freedom and flexibility. In this talk we will showcase. from a very pragmatic and hands-on point of view, an architectural approach based on real-world project experiences, unleashing the power of Jenkins, Jenkinsfile declarative pipelines, Jenkins libraries, Docker and Kubernetes as the universal runtime platform, for continuously delivering polyglot components at ease.

Introducing ASP.NET vNext - A tour of the new ASP.NET platform

Jeffrey T. Fritz

Introducing ASP.NET vNext – The Future of .NET on the Server | FalafelCON 2014

FalafelSoftware

In this session, ASP.NET MVP Jeff Fritz will introduce you to the next version of ASP.NET. He will show you how Microsoft is decoupling ASP.NET, making it easier to build modular applications. We’ll see how the world of NuGet and lightweight VMs enable you to build faster and simpler web applications. This session will change the way you look at ASP.NET, and you’ll be ready for the next generation of web development, today.

DataArt Odessa IT talk: Ansible use-cases and custom modules

KharchenkoKaterina

EMC World 2016 - code.02 Introduction to Immutable Infrastructure

{code}

No more artisanally hand-crafted infrastructures! Ban snowflake servers! Immutable means "unchanging over time or unable to be changed," which is great if you work in operations. Stable and predictable, but of course you will have to make changes every now and then. How do you handle changes to your infrastructure without impacting reliability, and how can you make sure the task is properly propagated over every part of the infrastructure that needs it? Handling immutable infrastructures has become much easier with modern tools. In this session we will show live demos of Vagrant, Terraform and Ansible.

Sap inside track Munich 2017

Rainer Winkler

What is the Siemens Open Library, and How it Decreased Development Time for E...

DMC, Inc.

Presenter - John Sullivan Eden Innovations is scaling up its liquid chemical admix production facility and needed to move to a more robust automation system. In an effort to keep costs of the control infrastructure down, it was decided to keep the programming in-house and utilize the freely available Open Library as a base for their control system. This session will cover the benefits gained and challenges faced utilizing and customizing the Open Library for a bespoke controls system. The system was developed with minimal time investment by an engineer with no previous experience with the Siemens platform. Through customizing the open library, Eden was able to quickly develop a library that utilizes Siemens best practices and provides building blocks for any future development

Emulators as an Emerging Best Practice for API Providers

Cisco DevNet

Modern software leverage a lot of external APIs, which raises several issues: how can development teams safely build and test their software when some components they rely on keep evolving. And what if some of these components are key for the whole software to even fire up. These are some of the challenges faced today by Cisco internal development teams, but also partner and enterprise developers using Cisco's software. The industry proposes two main strategies to circumvent these challenges: API Mocking, and Service Virtualization. Both of these strategies have pro and cons. I came up with the idea of proposing API emulators has a 3rd option. From another perspective, Serverless platforms are recognized to be unique as they are scalable and straightforward to use. It turns out that major industry vendors (Google, Amazon, Microsoft…) have invested to create Emulator as companions to their Serverless platforms, in order to attract, on-board and have developers adopt Serverless platforms. In this talk, I'll explain the motivation behind API emulators, in the perspective of DevOps, CI/CD, Development Processes, and Serverless/Microservices architectures. I'll illustrate the talk with several prototypes: - Mini-Spark: an Emulator for the Cisco Spark API which mimics the execution environment of the Cisco Spark Cloud platform - Tropo-Ready: an Emulator for Tropo Serverless Telephony platform, tied it to Visual Studio Code in order to reach to developer communities I'll dive into the details of the process to create such emulators, and elaborate on the consideration that Emulators are emerging as key components of API providers's strategy.

Philly CocoaHeads 20160414 - Building Your App SDK With Swift

Jordan Yaker

Consolidating MLOps at One of Europe’s Biggest Airports

Databricks

At Schiphol airport we run a lot of mission critical machine learning models in production, ranging from models that predict passenger flow to computer vision models that analyze what is happening around the aircraft. Especially now in times of Covid it is paramount for us to be able to quickly iterate on these models by implementing new features, retraining them to match the new dynamics and above all to monitor them actively to see if they still fit the current state of affairs. To achieve those needs we rely on MLFlow but have also integrated that with many of our other systems. So have we written Airflow operators for MLFlow to ease the retraining of our models, have we integrated MLFlow deeply with our CI pipelines and have we integrated it with our model monitoring tooling. In this talk we will take you through the way we rely on MLFlow and how that enables us to release (sometimes) multiple versions of a model per week in a controlled fashion. With this set-up we are achieving the same benefits and speed as you have with a traditional software CI pipeline.

Ranorex presentationISsoft

Effective Android Development. UA Mobile 2016.

UA Mobile

Is code review the solution?

Tiago Mendo

DevOps, CLI, APIs, Oh My! Security Gone Agile

Matt Tesauro

Enterprise Node - Code Quality

Kurtis Kemple

Sitecore development approach evolution – destination helix

Peter Nazarov

Sitecore Development Approach Evolution – Destination Helix Sitecore officially recommended Helix as a set of overall design principles and conventions for Sitecore development around 18 month ago at SUGCON 2016 alongside with an official implementation example - Habitat. Why was it necessary? What are the benefits? Has it worked in practice? Peter Nazarov will share the outlook on why and how a combination of Sitecore Helix and Habitat benefits the business and development users of Sitecore in practice.

Introducing fx copNick Harrison

Docker {at,with} SignalFx

Maxime Petazzoni

Python testing like a pro by Keith Yang

PYCON MY PLT

Docker at and with SignalFx

SignalFx

The Metaverse and AI: how can decision-makers harness the Metaverse for their...

Jen Stirrup

The Metaverse is popularized in science fiction, and now it is becoming closer to being a part of our daily lives through the use of social media and shopping companies. How can businesses survive in a world where Artificial Intelligence is becoming the present as well as the future of technology, and how does the Metaverse fit into business strategy when futurist ideas are developing into reality at accelerated rates? How do we do this when our data isn't up to scratch? How can we move towards success with our data so we are set up for the Metaverse when it arrives? How can you help your company evolve, adapt, and succeed using Artificial Intelligence and the Metaverse to stay ahead of the competition? What are the potential issues, complications, and benefits that these technologies could bring to us and our organizations? In this session, Jen Stirrup will explain how to start thinking about these technologies as an organisation.

Le nuove frontiere dell'AI nell'RPA con UiPath Autopilot™

UiPathCommunity

In questo evento online gratuito, organizzato dalla Community Italiana di UiPath, potrai esplorare le nuove funzionalità di Autopilot, il tool che integra l'Intelligenza Artificiale nei processi di sviluppo e utilizzo delle Automazioni. 📕 Vedremo insieme alcuni esempi dell'utilizzo di Autopilot in diversi tool della Suite UiPath: Autopilot per Studio Web Autopilot per Studio Autopilot per Apps Clipboard AI GenAI applicata alla Document Understanding 👨‍🏫👨‍💻 Speakers: Stefano Negro, UiPath MVPx3, RPA Tech Lead @ BSP Consultant Flavio Martinelli, UiPath MVP 2023, Technical Account Manager @UiPath Andrei Tasca, RPA Solutions Team Lead @NTT Data

Similar to Static Analysis Tools for C# Demo

Multilanguage Pipelines with Jenkins, Docker and Kubernetes (Oracle Code One ...

Jorge Hidalgo

Introducing ASP.NET vNext - A tour of the new ASP.NET platform

Jeffrey T. Fritz

Introducing ASP.NET vNext – The Future of .NET on the Server | FalafelCON 2014

FalafelSoftware

DataArt Odessa IT talk: Ansible use-cases and custom modules

KharchenkoKaterina

EMC World 2016 - code.02 Introduction to Immutable Infrastructure

{code}

Sap inside track Munich 2017

Rainer Winkler

What is the Siemens Open Library, and How it Decreased Development Time for E...

DMC, Inc.

Emulators as an Emerging Best Practice for API Providers

Cisco DevNet

Philly CocoaHeads 20160414 - Building Your App SDK With Swift

Jordan Yaker

Consolidating MLOps at One of Europe’s Biggest Airports

Databricks

Ranorex presentationISsoft

Effective Android Development. UA Mobile 2016.

UA Mobile

Is code review the solution?

Tiago Mendo

DevOps, CLI, APIs, Oh My! Security Gone Agile

Matt Tesauro

Enterprise Node - Code Quality

Kurtis Kemple

Sitecore development approach evolution – destination helix

Peter Nazarov

Introducing fx copNick Harrison

Docker {at,with} SignalFx

Maxime Petazzoni

Python testing like a pro by Keith Yang

PYCON MY PLT

Docker at and with SignalFx

SignalFx

Similar to Static Analysis Tools for C# Demo (20)

Multilanguage Pipelines with Jenkins, Docker and Kubernetes (Oracle Code One ...

Introducing ASP.NET vNext - A tour of the new ASP.NET platform

Introducing ASP.NET vNext – The Future of .NET on the Server | FalafelCON 2014

DataArt Odessa IT talk: Ansible use-cases and custom modules

EMC World 2016 - code.02 Introduction to Immutable Infrastructure

Sap inside track Munich 2017

What is the Siemens Open Library, and How it Decreased Development Time for E...

Emulators as an Emerging Best Practice for API Providers

Philly CocoaHeads 20160414 - Building Your App SDK With Swift

Consolidating MLOps at One of Europe’s Biggest Airports

Ranorex presentation

Effective Android Development. UA Mobile 2016.

Is code review the solution?

DevOps, CLI, APIs, Oh My! Security Gone Agile

Enterprise Node - Code Quality

Sitecore development approach evolution – destination helix

Introducing fx cop

Docker {at,with} SignalFx

Python testing like a pro by Keith Yang

Docker at and with SignalFx

Recently uploaded

The Metaverse and AI: how can decision-makers harness the Metaverse for their...

Jen Stirrup

Le nuove frontiere dell'AI nell'RPA con UiPath Autopilot™

UiPathCommunity

Enhancing Performance with Globus and the Science DMZ

Globus

PCI PIN Basics Webinar from the Controlcase Team

ControlCase

Quantum Computing: Current Landscape and the Future Role of APIs

Vlad Stirbu

FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf

FIDO Alliance

UiPath Test Automation using UiPath Test Suite series, part 4

DianaGray10

Welcome to UiPath Test Automation using UiPath Test Suite series part 4. In this session, we will cover Test Manager overview along with SAP heatmap. The UiPath Test Manager overview with SAP heatmap webinar offers a concise yet comprehensive exploration of the role of a Test Manager within SAP environments, coupled with the utilization of heatmaps for effective testing strategies. Participants will gain insights into the responsibilities, challenges, and best practices associated with test management in SAP projects. Additionally, the webinar delves into the significance of heatmaps as a visual aid for identifying testing priorities, areas of risk, and resource allocation within SAP landscapes. Through this session, attendees can expect to enhance their understanding of test management principles while learning practical approaches to optimize testing processes in SAP environments using heatmap visualization techniques What will you get from this session? 1. Insights into SAP testing best practices 2. Heatmap utilization for testing 3. Optimization of testing processes 4. Demo Topics covered: Execution from the test manager Orchestrator execution result Defect reporting SAP heatmap example with demo Speaker: Deepak Rai, Automation Practice Lead, Boundaryless Group and UiPath MVP

Elevating Tactical DDD Patterns Through Object Calisthenics

Dorra BARTAGUIZ

After immersing yourself in the blue book and its red counterpart, attending DDD-focused conferences, and applying tactical patterns, you're left with a crucial question: How do I ensure my design is effective? Tactical patterns within Domain-Driven Design (DDD) serve as guiding principles for creating clear and manageable domain models. However, achieving success with these patterns requires additional guidance. Interestingly, we've observed that a set of constraints initially designed for training purposes remarkably aligns with effective pattern implementation, offering a more ‘mechanical’ approach. Let's explore together how Object Calisthenics can elevate the design of your tactical DDD patterns, offering concrete help for those venturing into DDD for the first time!

Monitoring Java Application Security with JDK Tools and JFR Events

Ana-Maria Mihalceanu

Epistemic Interaction - tuning interfaces to provide information for AI support

Alan Dix

Paper presented at SYNERGY workshop at AVI 2024, Genoa, Italy. 3rd June 2024 https://alandix.com/academic/papers/synergy2024-epistemic/ As machine learning integrates deeper into human-computer interactions, the concept of epistemic interaction emerges, aiming to refine these interactions to enhance system adaptability. This approach encourages minor, intentional adjustments in user behaviour to enrich the data available for system learning. This paper introduces epistemic interaction within the context of human-system communication, illustrating how deliberate interaction design can improve system understanding and adaptation. Through concrete examples, we demonstrate the potential of epistemic interaction to significantly advance human-computer interaction by leveraging intuitive human communication strategies to inform system design and functionality, offering a novel pathway for enriching user-system engagements.

Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf

91mobiles

Pushing the limits of ePRTC: 100ns holdover for 100 days

Adtran

FIDO Alliance Osaka Seminar: Overview.pdf

FIDO Alliance

Generative AI Deep Dive: Advancing from Proof of Concept to Production

Aggregage

Removing Uninteresting Bytes in Software Fuzzing

Aftab Hussain

Imagine a world where software fuzzing, the process of mutating bytes in test seeds to uncover hidden and erroneous program behaviors, becomes faster and more effective. A lot depends on the initial seeds, which can significantly dictate the trajectory of a fuzzing campaign, particularly in terms of how long it takes to uncover interesting behaviour in your code. We introduce DIAR, a technique designed to speedup fuzzing campaigns by pinpointing and eliminating those uninteresting bytes in the seeds. Picture this: instead of wasting valuable resources on meaningless mutations in large, bloated seeds, DIAR removes the unnecessary bytes, streamlining the entire process. In this work, we equipped AFL, a popular fuzzer, with DIAR and examined two critical Linux libraries -- Libxml's xmllint, a tool for parsing xml documents, and Binutil's readelf, an essential debugging and security analysis command-line tool used to display detailed information about ELF (Executable and Linkable Format). Our preliminary results show that AFL+DIAR does not only discover new paths more quickly but also achieves higher coverage overall. This work thus showcases how starting with lean and optimized seeds can lead to faster, more comprehensive fuzzing campaigns -- and DIAR helps you find such seeds. - These are slides of the talk given at IEEE International Conference on Software Testing Verification and Validation Workshop, ICSTW 2022.

The Art of the Pitch: WordPress Relationships and Sales

Laura Byrne

Clients don’t know what they don’t know. What web solutions are right for them? How does WordPress come into the picture? How do you make sure you understand scope and timeline? What do you do if sometime changes? All these questions and more will be explored as we talk about matching clients’ needs with what your agency offers without pulling teeth or pulling your hair out. Practical tips, and strategies for successful relationship building that leads to closing the deal.

GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...

Sri Ambati

zkStudyClub - Reef: Fast Succinct Non-Interactive Zero-Knowledge Regex Proofs

Alex Pruden

This paper presents Reef, a system for generating publicly verifiable succinct non-interactive zero-knowledge proofs that a committed document matches or does not match a regular expression. We describe applications such as proving the strength of passwords, the provenance of email despite redactions, the validity of oblivious DNS queries, and the existence of mutations in DNA. Reef supports the Perl Compatible Regular Expression syntax, including wildcards, alternation, ranges, capture groups, Kleene star, negations, and lookarounds. Reef introduces a new type of automata, Skipping Alternating Finite Automata (SAFA), that skips irrelevant parts of a document when producing proofs without undermining soundness, and instantiates SAFA with a lookup argument. Our experimental evaluation confirms that Reef can generate proofs for documents with 32M characters; the proofs are small and cheap to verify (under a second). Paper: https://eprint.iacr.org/2023/1886

FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf

FIDO Alliance

Securing your Kubernetes cluster_ a step-by-step guide to success !

KatiaHIMEUR1

Today, after several years of existence, an extremely active community and an ultra-dynamic ecosystem, Kubernetes has established itself as the de facto standard in container orchestration. Thanks to a wide range of managed services, it has never been so easy to set up a ready-to-use Kubernetes cluster. However, this ease of use means that the subject of security in Kubernetes is often left for later, or even neglected. This exposes companies to significant risks. In this talk, I'll show you step-by-step how to secure your Kubernetes cluster for greater peace of mind and reliability.

Recently uploaded (20)

The Metaverse and AI: how can decision-makers harness the Metaverse for their...

Le nuove frontiere dell'AI nell'RPA con UiPath Autopilot™

Enhancing Performance with Globus and the Science DMZ

PCI PIN Basics Webinar from the Controlcase Team

Quantum Computing: Current Landscape and the Future Role of APIs

FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf

UiPath Test Automation using UiPath Test Suite series, part 4

Elevating Tactical DDD Patterns Through Object Calisthenics

Monitoring Java Application Security with JDK Tools and JFR Events

Epistemic Interaction - tuning interfaces to provide information for AI support

Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf

Pushing the limits of ePRTC: 100ns holdover for 100 days

FIDO Alliance Osaka Seminar: Overview.pdf

Generative AI Deep Dive: Advancing from Proof of Concept to Production

Removing Uninteresting Bytes in Software Fuzzing

The Art of the Pitch: WordPress Relationships and Sales

GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...

zkStudyClub - Reef: Fast Succinct Non-Interactive Zero-Knowledge Regex Proofs

FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf

Securing your Kubernetes cluster_ a step-by-step guide to success !

Static Analysis Tools for C# Demo

1. STATIC ANALYSIS DEMO ADRIANO UEDA adriano.ueda@gmail.com

2. STYLECOP & FXCOP • PERFORMS STATIC TESTING: ANALYSIS BEFORE RUNNING THE PROGRAM • BASED ON THE “FRAMEWORK DESIGN GUIDELINES” • https://tiny.cc/design-guidelines • BOOK RELEASED IN 2008 • BY KRZYSZTOF CWALINA AND BRAD ABRAMS • ORIGINALLY DEVELOP BY MICROSOFT

3. FXCOP

4. WHAT IS FXCOP? • A STATIC CODE ANALYSIS TOOL TO LOOK FOR ISSUES IN THE CODE • PREVIOUSLY A VISUAL STUDIO 2017 EXTENSION • NOW A ROSLYN ANALYZER • EASY INTEGRATION WITH THE BUILD PROCESS • AVAILABLE TO .NET FRAMEWORK AND .NET CORE PROJECTS

5. WHY TO USE FXCOP? • INSPECT YOUR CODE BEYOND THE COMPILER SYNTAX • FIND POSSIBLE ISSUES IN THE CODE • (EVEN IF COMPILES FINE)

6. HOW TO USE? • INSTALL THE NUGET PACKAGE • RECOMMENDED WAY • Install-Package Microsoft.CodeAnalysis.FxCopAnalyzers • (OR INSTALL THE VISUAL STUDIO EXTENSION) • BUILD YOUR PROJECT

7. HOW TO USE? (CONT’D) • INSPECT THE WARNING MESSAGES:

8. HOW TO DISABLE WARNINGS • USE THE SUPPRESSMESSAGE ATTRIBUTE

9. HOW TO DISABLE WARNINGS (CONT’D) • OR USE THE #PRAGMA DIRECTIVE

10. FXCOP DEMO https://tiny.cc/sa-demo-src

11. FXCOP DEMO • USES FXCOP • COVERED WITH UNIT TESTS • HAS 100% COVERAGE • DOES NOT THROWS WARNING BY DEFAULT • SET THE DISABLE_FIXES CONDITIONAL TO ENABLE WARNINGS • FXCOP WILL THROW FOUR WARNINGS

12. DEMO: DISABLE FIXES SET THE DISABLE_FIXES SYMBOL TO ENABLE FXCOP WARNINGS

13. DEMO: EMPTY INTERFACE FXCOP WILL WARN ABOUT EMPTY INTERFACES

14. DEMO: WARNING MESSAGE FXCOP WARNING MESSAGE WITH LINK TO EXPLANATION

15. DEMO: FIX INTERFACE FIXED!

16. DEMO: EXPLANATION THE WARNING HAS A REFERENCE LINK

17. STYLECOP

18. WHAT IS STYLECOP? • STATIC CODE ANALYSIS TOOL TO CHECK YOU CODE AGAINST CODE CONVENTIONS • ROSLYN ANALYZER

19. WHY TO USE STYLECOP? • INCREASE CODE READABILITY • ENFORCE CODE CONVENTIONS

20. HOW TO USE? • INSTALL THE NUGET PACKAGE • RECOMMENDED WAY: ROSLYN ANAYLZER • Install-Package StyleCop.Analyzers • ADD THE stylecop.json • BUILD YOUR PROJECT • INSPECT THE WARNING MESSAGES

21. STYLECOP DEMO https://tiny.cc/sa-demo-src

22. STYLECOP DEMO • USES STYLECOP • COVERED BY UNIT TESTS • HAS 100% COVERAGE • DOES NOT THROWS WARNING BY DEFAULT • SET THE DISABLE_FIXES CONDITIONAL TO ENABLE WARNINGS • STYLECOP WILL THROW THREE WARNINGS

23. DEMO: DISABLE FIXES SET THE DISABLE_FIXES SYMBOL TO ENABLE STYLECOP WARNINGS

24. DEMO: SPACING STYLECOP WILL WARN ABOUT SPACING

25. DEMO: FIX ADDING SPACE WILL REMOVE THE WARNING

26. DEMO: PARAMETERS MOVE EACH PARAMETER TO ITS OWN LINE

27. DEMO: PARAMETERS FIX STYLECOP WILL WARN ABOUT PARAMETERS MISALIGNMENT

28. QUESTIONS?

29. LINKS Slides: https://tiny.cc/sa-demo Source code: https://tiny.cc/sa-demo-src

30. THANK YOU! Adriano Ueda https://github.com/aueda

Editor's Notes

Framework Design Guidelines: https://docs.microsoft.com/en-us/dotnet/standard/design-guidelines/
NuGet package website: https://www.nuget.org/packages/Microsoft.CodeAnalysis.FxCopAnalyzers Visual Studio marketplace website: https://marketplace.visualstudio.com/items?itemName=VisualStudioPlatformTeam.MicrosoftCodeAnalysis2017
NuGet package website: https://www.nuget.org/packages/Microsoft.CodeAnalysis.FxCopAnalyzers Visual Studio marketplace website: https://marketplace.visualstudio.com/items?itemName=VisualStudioPlatformTeam.MicrosoftCodeAnalysis2017
NuGet package website: https://www.nuget.org/packages/Microsoft.CodeAnalysis.FxCopAnalyzers Visual Studio marketplace website: https://marketplace.visualstudio.com/items?itemName=VisualStudioPlatformTeam.MicrosoftCodeAnalysis2017
NuGet package website: https://www.nuget.org/packages/Microsoft.CodeAnalysis.FxCopAnalyzers Visual Studio marketplace website: https://marketplace.visualstudio.com/items?itemName=VisualStudioPlatformTeam.MicrosoftCodeAnalysis2017
NuGet package website: https://www.nuget.org/packages/Microsoft.CodeAnalysis.FxCopAnalyzers Visual Studio marketplace website: https://marketplace.visualstudio.com/items?itemName=VisualStudioPlatformTeam.MicrosoftCodeAnalysis2017
NuGet package website: https://www.nuget.org/packages/Microsoft.CodeAnalysis.FxCopAnalyzers Visual Studio marketplace website: https://marketplace.visualstudio.com/items?itemName=VisualStudioPlatformTeam.MicrosoftCodeAnalysis2017
GitHub: https://github.com/aueda
GitHub: https://github.com/aueda
GitHub: https://github.com/aueda

Static Analysis Tools for C# Demo

Recommended

Recommended

More Related Content

Similar to Static Analysis Tools for C# Demo

Similar to Static Analysis Tools for C# Demo (20)

Recently uploaded

Recently uploaded (20)

Static Analysis Tools for C# Demo

Editor's Notes