PDC 2008 Experience: Day 3: Session = "Improving Code Quality with Code Analysis"

Benefits of Code Analyst

• Bugs take more time to fix in production and cost more once they get released.
• More secure code
• Make your applications more reliable
• Make your code more maintainable
• Use good variable names
• Use spell check

Integrating into you team work flows

Tools

• Code Analyst in Visual Studio Team System
• Use FxCop

Setup Code Analysis for your team

1. Run Code Analysis
2. Fix or baseline your issues
3. Create work items for future tracking
4. Setup Code Analysis check-in policy
5. Setup Team Build with Code Analysis.
6. Expanding Analysis by customizing rules.

Best Practice

• Focus on the most critic issues
• Run Code Analysis with Microsoft Minimum Recommended rules and dial it up from there
• Get into a known state
• Fix or baseline and track deferred work
• Use Code Analysis early and often
• Prevent new issues
• Don't defer potential security issues
• Enable code analysis is Team Builds
• Drive Quality Upstream!