Hi James,

I'm using the LGTM tool on Anitya and I'm pretty happy with it. It scans both javascript and python code.

Didn't tried the other two.

Michal

On 16/07/2020 15:31, James Richardson wrote:
Hi All,

Vipul and I are looking into several different tools that will allow us to better analyze our tech debt with any new code that is merged into apps in http://github.com/fedora-infra.

Currently, we have looked at the tools below, but we would love any and all input from the team and community on this.

SonarCloud
LGTM
ShiftLeft

Our goal is to find an open source tool that is easy to integrate as well as providing useful and timely feedback.
So far, SonarCloud has proved to be the one that looks best, but again, we are very open to any and all suggestions, and at this early stage, a good conversation to arrive at the best solution.

Regards,

James


--

James Richardson

Engineering Intern

He | Him | His

Red Hat Waterford

Communications House

Cork Road, Waterford City

jamricha@redhat.com    
M: +353851970521    
IM: jamricha


_______________________________________________
infrastructure mailing list -- infrastructure@lists.fedoraproject.org
To unsubscribe send an email to infrastructure-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedoraproject.org

-- 
Role: Fedora CPE Team - Software Engineer
IRC: mkonecny
FAS: zlopez