Scala : Analyze Static Code

Question
1

Hi everyone,

I would like to know if it is possible to analyze the static code with a tool? Indeed, I found a topic around the scala plugin with Sonar (SonarQube) that would seem obsolete. Is there really a plugin? Thank you in advance for your help.

Sry if this question is already asked. Iā€™m new here :slight_smile:

2

Hi!

There are quite a few:

https://www.wartremover.org/

https://pmd.github.io/

1 Like
3

Thx

4

There was also this one to which I used to contribute when I cared about SonarQube.
Nowadays what I do is use sbt-tpolecat.

Anyways, you may start contributing to sonar-scala and get it back to life :slight_smile:

5

What is sonar-scala like? does it detect vulnerable code such as SQLi or inline plaintext secrets?