NaiveSystems Analyze – FOSS static analyzer for MISRA C/C++, AUTOSAR C++14, etc.
1–10 of 16 posts
Re: NaiveSystems Analyze – FOSS static analyzer for MISRA C/C++, AUTOSAR C++14, etc.
#2I'm sure this is lovely software, and I'll probably try it, but...
Why is software so difficult to install these days? Why on earth should one need docker to build and run some C code? Why can't one just download an executable?
Re: NaiveSystems Analyze – FOSS static analyzer for MISRA C/C++, AUTOSAR C++14, etc.
#3Oh gosh, AUTOSAR... shudder
The MISRA analysis seems neat -- It's GPLv3 from what the LICENSE suggests, does that cause problems when being used to scan proprietary code?
Re: NaiveSystems Analyze – FOSS static analyzer for MISRA C/C++, AUTOSAR C++14, etc.
#4Oh gosh, AUTOSAR... shudder The MISRA analysis seems neat -- It's GPLv3 from what the LICENSE suggests, does that cause problems when being used to scan proprietary code?
No. Using GPL software has nothing to do with the code processed by it. Think about the GCC compiler :)
Re: NaiveSystems Analyze – FOSS static analyzer for MISRA C/C++, AUTOSAR C++14, etc.
#5I'm sure this is lovely software, and I'll probably try it, but... Why is software so difficult to install these days? Why on earth should one need docker to build and run some C code? Why can't one just download an executable?
If you build it from source it's actually a bunch of regular executables. Running as a container is for the purpose of making the environments hermetic/reproducible so that it's easier to support users.
Re: NaiveSystems Analyze – FOSS static analyzer for MISRA C/C++, AUTOSAR C++14, etc.
#6I'm sure this is lovely software, and I'll probably try it, but... Why is software so difficult to install these days? Why on earth should one need docker to build and run some C code? Why can't one just download an executable?
If you build it from source it's actually a bunch of regular executables. Running as a container is for the purpose of making the environments hermetic/reproducible so that it's easier to support users.
How do you conclude that? The instructions here:
https://github.com/naivesystems/analyze/wiki/How-to-run-on-m...
say docker is required.
Re: NaiveSystems Analyze – FOSS static analyzer for MISRA C/C++, AUTOSAR C++14, etc.
#7Earlier quoted context omitted.
If you build it from source it's actually a bunch of regular executables. Running as a container is for the purpose of making the environments hermetic/reproducible so that it's easier to support users.
How do you conclude that? The instructions here: https://github.com/naivesystems/analyze/wiki/How-to-run-on-m... say docker is required.
That's running the prebuilt container image. The README has instructions on how to build from source.
Re: NaiveSystems Analyze – FOSS static analyzer for MISRA C/C++, AUTOSAR C++14, etc.
#8Earlier quoted context omitted.
How do you conclude that? The instructions here: https://github.com/naivesystems/analyze/wiki/How-to-run-on-m... say docker is required.
That's running the prebuilt container image. The README has instructions on how to build from source.
The README says "To build from source, follow the steps below on Fedora 36 or 37. Other versions may also work but are not officially supported" So it seems on Mac and Windows docker is the only way. :(
Re: NaiveSystems Analyze – FOSS static analyzer for MISRA C/C++, AUTOSAR C++14, etc.
#9Oh gosh, AUTOSAR... shudder The MISRA analysis seems neat -- It's GPLv3 from what the LICENSE suggests, does that cause problems when being used to scan proprietary code?
[deleted]
Re: NaiveSystems Analyze – FOSS static analyzer for MISRA C/C++, AUTOSAR C++14, etc.
#10Recent and related:
Misra C++:2023 - https://news.ycombinator.com/item?id=38674158 - Dec 2023 (85 comments)