静态代码分析可以帮助你找出你软件中可能的代码错误。
Static code analysis can help you to figure out the possible coding errors in your software.
代码复查：一个静态代码分析工具可以分析你的代码并报告其中的错误。
Code Review: a static code analysis tool that analyzes your code and reports problems.
在测量工具部分，Jaibeer解释了使用静态代码分析工具的理由。
In the Measurement tools part, Jaibeer explains the reasons to use static code analysis tools.
演练：创作SQL的自定义静态代码分析规则程序集中所示。
Walkthrough: Authoring a Custom Static Code Analysis Rule Assembly for SQL.
微软也在为他们提供越来越多的支持，让他们更好地在静态代码分析上做投入。
Microsoft is adding support for contracts, which combine asserts with static code analysis.
静态代码分析，在Windows平台上长期受到忽视，近几年却变得越来越重要。
Static code analysis, long neglected on the Windows platform, has been becoming more and more import in the last few years.
“配置”列表中，单击在生成项目时要对其启用或禁用静态代码分析的配置。
Configuration list, click the configuration for which you want to enable or disable static code analysis when the project is built.
第一步，利用静态代码分析器浏览代码并搜索反模式，以确保遵循良好的编码实践。
As a first step, employ static code analyzers that will go through your code and search for anti-patterns to ensure that good coding practices have been followed.
“解决方案资源管理器”中，单击要对其启用或禁用静态代码分析的数据库项目。
Solution Explorer, click the database project for which you want to enable or disable static code analysis.
SQLite使用全面覆盖的测试来保证质量，而不是依靠编译器警告或静态代码分析工具。
Quality assurance in SQLite is done using full-coverage testing, not by compiler warnings or other static code analysis tools.
这种类型的残留代码也可以通过静态代码分析工具如pmd和FindBugs找到。
This sort of vestigial code can also be found by static code analysis tools like PMD and FindBugs.
静态代码分析使您能够评审代码基础——全部或者任何一个部分——满足一定标准的代码的出现。
Static code analysis allows you to review the code base — all of it or any part — for the occurrence of code that meets certain criteria.
FxCop是一个广泛使用的静态代码分析器和策略优化工具，最近微软发布了该产品的1.36版本。
Microsoft has released version 1.36 of FxCop, the popular static code analysis and policy enforcement tool.
我们的组织认证的PCIDSS，我们需要解决安全问题的工具，我们使用了安全的静态代码分析。
Our organization is certifying for PCI DSS and we need to address security issues raised by a tool we used for Security Static Code Analysis.
为静态代码分析工具(如FindBugs)编写自定义bug检测器可以显著提高代码质量，并且有许多乐趣。
Writing custom bug detectors for a static code analysis tool such as FindBugs can offer tremendous leverage in improving code quality, and it can be a lot of fun.
RationalApplication Developer中还有一个静态代码分析特性，通过它可以查看您现有的代码是否违背最佳实践。
There is also a static code analysis feature in Rational Application Developer that will look at your existing code for best practice violations.
不得不提的两个插件是进行源代码控制的RationalClearCase插件以及静态代码分析工具FindBugs,eBay使用FindBugs来部分验收其所有源代码。
Two which get a mention are the Rational ClearCase plug-in for source-code control and static code analysis tool FindBugs which is used by eBay as part of their acceptance of any source code.
你可以使用fxcop，或者StyleCop、clonedetective、ndepend、 Visual Studio 2008 附带的codemetricsfeature, 或者其他自选的静态代码分析工具。
Use fxcop, or StyleCop, clone detective, ndepend, the code metrics feature of VS 2008, or any other static analysis tool of your choice.
静态分析工具是提供总体代码质量的唯一途径。
Static analysis tools are one way of improving overall code quality.
这种技术保持使系统安全的一种有效的方法，但是因为并没有真正地清除数据(仅仅以它作为条件)，那么当前的静态分析工具就不能适当地分析这样的代码。
This technique is a valid way to keep the system secure, but because there is no real sanitization of the data (only conditions on it), current static analysis tools do not properly analyze such code.
静态分析中的挑战来自它对没明白或者理解的单元和代码没有可视性的事实。
The challenges in static analysis come from the fact that it has no visibility into modules and code that it does not see or understand.
对它可理解的代码的局限性：例如，静态分析工具需要构建所使用的每种语言以及每个开发平台的完全支持。
Limited to code it can understand: for example, static analysis tools need to build dedicated support for each language and every development platform used.
静态分析工具对于保证代码质量来说非常有用，特别是如果这些工具被统一在一个可以自动构建过程中时。
Static analysis tools are very useful to keep an eye on code quality, particularly if they're integrated in an automatic build process.
相反的，研究确实发现代码长度和静态分析漏洞数量的线形关系。
By contrast, research did find a strong linear relationship between code base size and static analysis defect count.
静态分析是许多企业都使用的很有价值的工具，可以帮助管理大型代码库。
Static analysis is a valuable tool used by many organizations to help manage large code bases.
CPD是流行的开源静态分析工具pmd的一部分，它报告代码基中重复行的数量。
CPD, which is part of the popular open source static analysis tool PMD, reports the number of duplicate lines in a code base.
在清单8中，我调用PMD静态分析工具来搜索代码库中的长方法。
In Listing 8, I'm calling the PMD static analysis tool to search for long methods in the code base.
我坚信本文的例子也有助于您使用静态分析工具来查找本文未涉及到代码味道。
I'm confident that the examples in this article will help you use static analysis tools to find other types of code smells than the ones I've demonstrated.
FindBugs就是一个能够查找代码中可能的缺陷模式的开源静态分析工具。
FindBugs is an open source static analysis tool that looks for likely bug patterns in code.
此外，CDT目前还有Codan用于对代码执行静态分析并指出错误发生的可能位置。
In addition, CDT has now gained Codan to perform static analysis of code and suggest places where errors may occur.
应用推荐