Статический анализ кода с отслеживанием регрессий
★ 6.5 · testing
static-analysis is a Claude Code skill that runs the Clang Static Analyzer (scan-build) over a CMake build of Z3, parses the resulting plist diagnostics, and logs each finding with file, line, category, and description into z3agent.db for regression tracking. The workflow covers three steps: invoking `scan-build cmake` and `scan-build make`, grouping output by category — null dereferences, dead stores, use-after-free, and others — for quick triage, then querying z3agent.db to compare results across prior runs and pinpoint which commit introduced new issues. Runtime options include `--build-dir`, `--output-dir`, `--timeout` (default 1200 s), and `--debug`. It is aimed at teams that need a reproducible, historically tracked static analysis pipeline for the Z3 SMT solver's C++ codebase.
- #static-analysis
- #clang
- #z3
- #code-quality
- #security-analysis
- #cve-detection
- #bug-finding