Re: The Case for Rust (in any system)

Am 2024-09-05 23:12, schrieb Alan Somers:
> On Thu, Sep 5, 2024 at 3:08 PM Dmitry Salychev <dsl@freebsd.org> wrote:
>> 
>> 
>> Jan Knepper <jan@digitaldaemon.com> writes:
>> 
>> > Is this used?
>> >
>> > Does anyone from the team monitor this?
>> >
>> > https://scan.coverity.com/projects/freebsd
> 
> I used to check it, years ago.  But I gave up.  The UI is too hard to
> use and false alarms are both too frequent and too hard to suppress.
> Plus, it's a real drag that I can't run the tool myself.  Instead, I
> need to wait for the next scheduled run.

We have a self-hosted multi-language static analysis engine in ports, 
devel/sonarqube-community (I'm the maintainer), the community edition 
had support for C, but lost it. That required a build-wrapper. The 
wrapper is linux code and I haven't tried to use this linux-make-wrapper 
on our build system back then. The paid versions of sonarqube don't 
require the build wrapper and support direct analysis of C/C++ code 
without the wrapper, but at the place where I have access to a paid 
version doesn't use FreeBSD at all, so I have no justification to spend 
time there on FreeBSD.

The cloud version also has support for direct analysis of C code instead 
of using a build wrapper (free for open source stuff, e.g. on github), 
but it seems FreeBSD is too big for my free sonarcloud 
(https://sonarcloud.io/project/configuration/AutoScan?id=netchild_freebsd) 
access (no error message, but the analysis never finishes). There's also 
the possibility to integrate sonarcloud with a CI system and have the 
code analyzed by this instead of via the automatic analysis, but I 
didn't take the time to check which CI system is supported and what it 
takes to have FreeBSD handled by it.

Anyone who is interested: feel free to ask questions (DM or different 
thread, not here).

Bye,
Alexander.

-- 
http://www.Leidinger.net Alexander@Leidinger.net: PGP 0x8F31830F9F2772BF
http://www.FreeBSD.org    netchild@FreeBSD.org  : PGP 0x8F31830F9F2772BF