Poster - Rapid Adjudication of Static Analysis Meta-Alerts During Continuous Integration

November 4, 2020 • Poster

By

Lori Flynn

CMU SEI is conducting research to enable static analysis meta-alerts to be adjudicated quickly during continuous integration.

Publisher

Software Engineering Institute

Topic or Tag

Secure Coding

Abstract

It takes too much time to adjudicate alerts from static analysis (SA) tools during continuous integration (CI). In Department of Defense (DoD) development projects, SA is incompletely integrated into CI, and the selection of SA tools is limited to those with very few false positives. The current practice is too labor intensive. Through this research and development, CMU SEI is automating that adjudication.

Software Engineering Institute