Using FindBugs in Anger
TS-6590

This presentation describes how to effectively incorporate static analysis tools such as FindBugs into your software development process, in a way that won't scare your manager and won't upset your developers. There are four keys to effective use:

• Focus on the issues and bug patterns that matter for YOUR project.
• Catch issues when they are first introduced, and lower the priority or postpone issues that have existed in your code base for a substantial period of time and slipped through QA without causing observed problems.
• Give developers the tools and information they need for quickly and effectively reviewing issues.
• Establish a feedback loop to continuously improve your use of static analysis tools.

The presentation discusses experiences with FindBugs at Google, at eBay, and on the GlassFish project. It describes how to use FindBugs in a continuous build and integration framework, how to exclude the bug patterns not relevant to your project, how to perform differential analysis to report just the issues introduced in a particular build or since the last release, and how to handle false positives. The session focuses on how these tasks are accomplished with FindBugs, but many of the concepts and techniques are applicable to other static analysis tools as well.

Watch The Session
You need to be a registered Sun Developer Network member to view this multimedia session. If you are a registered SDN member, please click on "Watch Multimedia" button to log-in to view the multimedia session. If you wish to join SDN, please click here.