You might be interested in mock-with-analysis [1], mock wrapper that can run several static analyzers on unmodified SRPMs and extract the results in machine-readable format. Martin [1] https://github.com/fedora-static-analysis/mock-with-analysis