It provides a nice pie chart (for the entire codebase and for individual files) showing relative proportions of code, whitespace, comments, ‘ToDo’ style comments and bad code It attempts to find a range of around 20 phrases within comments that can indicate broken code (“ToDo”, “FixMe”, “Kludge”, etc.)ģ.
In addition to performing some more complex checks it also has a config file for each language that basically allows you to add any bad functions (or other text) that you want to search forĢ. It has a few features that should hopefully make it useful to anyone conducting code security reviews, particularly where time is at a premium:ġ. VCG is an automated code security review tool that handles C/C++, Java, C#, VB, PL/SQL, PHP and COBOL.
0 kommentar(er)
