SYSTEM AND METHOD FOR IDENTIFYING, ANALYZING AND INTEGRATING RISKS ASSOCIATED WITH SOURCE CODE

摘要

The various embodiments herein provide a system and method for identifying, analyzing and integrating the risks associated with a source code. The system comprises a code coverage module for collecting and transforming the code coverage information by a file name, a source code analyzer module for collecting and transforming source code violations information by the file name, a software configuration management module for collecting and transforming the source code commit information by the file name, a risk analyzer processing module for receiving and relating the collected code coverage information, source code violations information and source code commit information with each other by the file name and a report generation module for publishing the processed result of the collected code coverage information, source code violations information and source code commit information in a report. The report is reviewed for identifying, analyzing and integrating risks associated with source code.

主权项

1. A system for identifying, analyzing and integrating risks associated with source code, the system comprises:
a code coverage module for collecting code coverage information, and wherein the collected code coverage information is transformed by a file name; a source code analyzer module for collecting source code violation information comprising bugs and mistakes, and wherein the collected source code violation information is transformed by the file name; a software configuration management module for collecting a plurality of source code data, wherein the plurality of source code data includes a source code commit information, production code trace information, an error stack trigger location information, application monitoring and performance information, a computing system attribute information, a network bandwidth information, and wherein the software management module collects a source code commit information, and wherein the collected source code commit information is transformed by the file name: a risk analyzer processing module for receiving and processing the collected code coverage information transformed with the file name, the collected source code violation information transformed by the file name and the collected source code commit information transformed by the file name, and wherein the collected code coverage information, collected source code violation information and the collected source code commit information are related with each other by the file name; and a report generation module for publishing the processing result of the collected collect code coverage information, the collected source code violation information and the collected source code commit information in the report, and wherein risks associated with a source code is identified, analyzed and integrated by reviewing the report.