InfluxDB is the Time Series Platform where developers build real-time applications for analytics, IoT and cloud-native services. Easy to start, it is available in the cloud or on-premises. Learn more →
Top 10 Ruby Static Analysis Projects
-
Project mention: How do you guys integrate automated security checks in your CI/CD pipelines? | reddit.com/r/rails | 2023-01-21
You might find brakeman interesting: https://brakemanscanner.org
-
$ reek app/controllers/erp/orders_controller.rb Inspecting 1 file(s): S app/controllers/erp/orders_controller.rb -- 1 warning: [91]:UncommunicativeVariableName: Erp::OrdersController#create has the variable name 'e' [https://github.com/troessner/reek/blob/v6.1.1/docs/Uncommunicative-Variable-Name.md]
-
InfluxDB
Build time-series-based applications quickly and at scale.. InfluxDB is the Time Series Platform where developers build real-time applications for analytics, IoT and cloud-native services. Easy to start, it is available in the cloud or on-premises.
-
You should consider using RubyCritic if you want a single place to review code improvements for your project. Including RubyCritic in your development process will certainly reduce the time a development team spends working on technical debts. Most technical debts will be mapped out at development time.
-
Project mention: How To Use Code Climate To Improve Software Quality | reddit.com/r/DevOpsAuthority | 2022-07-05
Want to know how to enforce allowing only high-quality software into production? Check out this post on how to use CodeClimate can help you do just that! #DevOps #SoftwareDeveloper #softwaredevelopment #SoftwareEngineering #webdevelopment #codequality
-
There's a pretty good Ruby gem I've used for this before:
-
The first great step regarding any solution would be https://github.com/glebm/i18n-tasks
-
If you use CDK, you should implement CDK nag; otherwise, use cfn-nag.
-
SonarQube
Static code analysis for 29 languages.. Your projects are multi-language. So is SonarQube analysis. Find Bugs, Vulnerabilities, Security Hotspots, and Code Smells so you can release quality code every time. Get started analyzing your projects today for free.
-
-
Project mention: Data and System Visualization Tools That Will Boost Your Productivity | dev.to | 2022-06-13
Krane is a tool that can generate graph showing relationships between all roles and subjects. Krane also has many more features, including RBAC risk assessment, reporting and alerting, as well as querying/interrogating RBAC rules with CypherQL.
-
Project mention: MetricsController, a gem for RoR to automate some routine procedures at an outsourcing company | reddit.com/r/rubyonrails | 2022-08-05
That solution suits our needs perfectly, we will keep maintaining the tool in the future. It's open source so you can check the project in our official repository.
Ruby Static Analysis related posts
- Improve Code in Your Ruby Application with RubyCritic
- Managing I18n yml files
- Github Pre-commit Hook Setup In Ruby On Rails for maintaining coding standards and productive.
- Is this query vulnerable to SQL injections?
- How To Use Code Climate To Improve Software Quality
- Adding coverage to CI pipeline?
- Review Pull Requests 3x faster, ... then 10x faster
-
A note from our sponsor - InfluxDB
www.influxdata.com | 8 Feb 2023
Index
What are some of the best open-source Static Analysis projects in Ruby? This list will help you:
Project | Stars | |
---|---|---|
1 | Brakeman | 6,566 |
2 | Reek | 3,863 |
3 | Rubycritic | 3,100 |
4 | CodeClimate | 2,366 |
5 | mutant | 1,878 |
6 | i18n-tasks | 1,854 |
7 | cfn_nag | 1,112 |
8 | rubocop-rspec | 732 |
9 | krane | 557 |
10 | metrics_collector | 4 |