khiops
khiops copied to clipboard
Consider Adding Code Auditing Tooling
Description
Several tools could be used to this end, in the GitHub CI and locally:
- Valgrind (memcheck,
--leak-check=yes, ...), - ASan (gcc or clang with
--fsanitize=address) - UBSan (gcc or clang with
--fsanitize=undefined), - Checkmarx,
- SonarQube,
- etc.
The goal of this issue is to come with:
- a set of auditing tools to be used,
- their appropriate configuration (to reduce reporting noise),
- their automation in the GitHub CI
Context
- Khiops version: >= 11
Adding Snyk (free) to the candidates list. For an example of usage of ASan/UBSan you may take a look at the driver repos.