This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "FxCop"
From OWASP
ParanoidMike (talk | contribs) (→References: added reference to Smokey (tool similar to FxCop)) |
ParanoidMike (talk | contribs) (→References: added link to more CodePlex custom rules projects, and to Wikipedia article) |
||
| Line 10: | Line 10: | ||
* Documentation - [http://msdn.microsoft.com/library/bb429476.aspx FxCop] - MSDN documentation for FxCop | * Documentation - [http://msdn.microsoft.com/library/bb429476.aspx FxCop] - MSDN documentation for FxCop | ||
* Forum - [http://forums.microsoft.com/MSDN/ShowForum.aspx?ForumID=98&SiteID=1 Visual Studio Code Analysis and Code Metrics] - MSDN forum to discuss issues and ideas regarding FxCop and the Visual Studio Code Analysis feature | * Forum - [http://forums.microsoft.com/MSDN/ShowForum.aspx?ForumID=98&SiteID=1 Visual Studio Code Analysis and Code Metrics] - MSDN forum to discuss issues and ideas regarding FxCop and the Visual Studio Code Analysis feature | ||
| + | * Wikipedia - [http://en.wikipedia.org/wiki/Fxcop FxCop article] | ||
* Blog - [http://blogs.msdn.com/fxcop/ Microsoft Code Analysis Team blog] - addresses both the standalone FxCop tool as well as the Visual Studio Code Analysis feature | * Blog - [http://blogs.msdn.com/fxcop/ Microsoft Code Analysis Team blog] - addresses both the standalone FxCop tool as well as the Visual Studio Code Analysis feature | ||
* Blog - [http://davesbox.com/ Dave's Box] - personal blog written by a member of Microsoft's Code Analysis team | * Blog - [http://davesbox.com/ Dave's Box] - personal blog written by a member of Microsoft's Code Analysis team | ||
* CodePlex project - [http://www.codeplex.com/JSLFxCop JSL FxCop] - open-source utility to help build custom FxCop rules | * CodePlex project - [http://www.codeplex.com/JSLFxCop JSL FxCop] - open-source utility to help build custom FxCop rules | ||
| + | * CodePlex project - [http://www.codeplex.com/CSAR Community Static Analysis Rules] - "a community-based project for creating a set of static analysis rules to extend those provided by the FxCop team." | ||
* CodePlex project - [http://www.codeplex.com/LephoneFxCopRules Lephone FxCop Rules] - simple set of custom rules and the source code to create them | * CodePlex project - [http://www.codeplex.com/LephoneFxCopRules Lephone FxCop Rules] - simple set of custom rules and the source code to create them | ||
| − | * CodePlex project - [http:// | + | * CodePlex project - [http://code.msdn.microsoft.com/InfoXchange CustomFxCop] - implements "...new rule sets to check variable naming conventions in a project. This will really help projects to automate their code review process." |
* CodePlex project - [http://www.codeplex.com/fxcopdelta FxCop Delta] - "a custom check-in policy for Visual Studio Team System that runs FxCop rules before performing a check-in." | * CodePlex project - [http://www.codeplex.com/fxcopdelta FxCop Delta] - "a custom check-in policy for Visual Studio Team System that runs FxCop rules before performing a check-in." | ||
* CodePlex project - [http://www.codeplex.com/FinRadFxCopStats FinRad Statistics Collector for FxCop] - "...intended to help development teams to track the progress of an FxCop backlog cleanup effort." | * CodePlex project - [http://www.codeplex.com/FinRadFxCopStats FinRad Statistics Collector for FxCop] - "...intended to help development teams to track the progress of an FxCop backlog cleanup effort." | ||
* Google project - [http://code.google.com/p/smokey/ Smokey] - tool similar to FxCop for analysing managed code; has 220 separate rules. | * Google project - [http://code.google.com/p/smokey/ Smokey] - tool similar to FxCop for analysing managed code; has 220 separate rules. | ||
| + | * ''(CodePlex project - [http://code.msdn.microsoft.com/CustomRulesinFxcop CustomRules in FxCop] - '''DEAD project''')'' | ||
Revision as of 18:39, 20 July 2008
What is FxCop?
FxCop is a free code analysis tool developed by Microsoft, use to analyze MSIL (Microsoft Intermediate Language) generated from any managed language (including C# and VB.NET).
FxCop is a standalone .NET 2.0 application, downloadable from the locations referenced below. A modified version of the FxCop codebase is integrated into Microsoft Visual Studio 2005 and 2008. While the rulebase for each is mostly the same, there are notable differences between the two (see the Rules comparison spreadsheet below), and the compiled format for custom rules is different; thus, one cannot generally develop custom rules that can be used natively in both contexts.
References
- Download - FxCop v1.35
- Download - FxCop v1.36 (beta)
- Download - Rules comparison spreadsheet - documenting the rules differences between those shipped with FxCop and the Visual Studio Code Analysis feature
- Documentation - FxCop - MSDN documentation for FxCop
- Forum - Visual Studio Code Analysis and Code Metrics - MSDN forum to discuss issues and ideas regarding FxCop and the Visual Studio Code Analysis feature
- Wikipedia - FxCop article
- Blog - Microsoft Code Analysis Team blog - addresses both the standalone FxCop tool as well as the Visual Studio Code Analysis feature
- Blog - Dave's Box - personal blog written by a member of Microsoft's Code Analysis team
- CodePlex project - JSL FxCop - open-source utility to help build custom FxCop rules
- CodePlex project - Community Static Analysis Rules - "a community-based project for creating a set of static analysis rules to extend those provided by the FxCop team."
- CodePlex project - Lephone FxCop Rules - simple set of custom rules and the source code to create them
- CodePlex project - CustomFxCop - implements "...new rule sets to check variable naming conventions in a project. This will really help projects to automate their code review process."
- CodePlex project - FxCop Delta - "a custom check-in policy for Visual Studio Team System that runs FxCop rules before performing a check-in."
- CodePlex project - FinRad Statistics Collector for FxCop - "...intended to help development teams to track the progress of an FxCop backlog cleanup effort."
- Google project - Smokey - tool similar to FxCop for analysing managed code; has 220 separate rules.
- (CodePlex project - CustomRules in FxCop - DEAD project)
