Coverity uses static code analysis, an automated process that reads the code and tries to understand it rather than executing it and watching it run.

FORBES: Google's Android Operating System Is Surprisingly Bug-Free