This slice calculates a "KPI" (METRIC.KPIIF) score by applying predefined weighted rule profiles to a given development project. The weighted rule profiles allow you to define custom sets of rules and apply weights to each rule individually. When this slice is invoked, it counts the number of rule violations for each file in the project; for each rule, it multiplies the violation count by the specified rule weight in the profile. If a rule does not have a defined weight in the profile, the count for that rule is not gathered. The sum of the weighted counts is divided by the logical lines of code (METRIC.NOLLOCIF) in the given file to yield a KPI score. This artifact ships with the Security Compliance Pack for DTP 5.4.0, but is also available in the Parasoft Marketplace as a standalone extension for your DTP environmentyou can contact Parasoft to download the artifact separately.
In this section:
| Table of Contents | ||
|---|---|---|
|
...
- DTP and DTP Enterprise Pack 5.40.
- The code analysis tool must be configured to report the Number of Logical Lines in Files metric (METRIC.NOLLOCIF) to the DTP. The tool must also be configured with the correct filter and build ID. See DTP Concepts for additional information about filter and builds, as well as the DTP Engine documentation code analysis tool for information on how to configure these settings.
- DTP must contain a build with static analysis data. Metrics will be reported to DTP in the latest build with static analysis data.
...
- See Downloading and Installing Artifacts for instructions on downloading the artifact from the marketplace and installing it on your systeminstalling artifacts.
- Choose Import> Library> Process Intelligence> Key Performance Indicator> Key Performance Indicator from the actions menu in Extension Designer to import the artifact into a service.
- Click Deploy.
...
| Scroll Table Layout | ||
|---|---|---|
|
| All Rules | This profile is a simple mapping of all the Jtest DTP Engine Static Analysis rules mapped with a weight assigns a weight to all Jtest static analysis rules equal to 100/severity (e.g., severity 1 violations are weighted a value of 100, severity 2 violations are weighted a value of 50, and so on.) | ||
|---|---|---|---|
| Recommended Rules | This profile is a simple mapping of the Jtest DTP Engine Static Analysis assigns a weight to Jtest static analysis rules that are active in the Recommended Rules test configuration. The weights are mapped calculated in the same fashion as the All Rules profile. | ||
| Flow Analysis | This profile is a simple mapping of the Jtest DTP Engine Static Analysis assigns a weight to Jtest static analysis rules that are active in the Flow Analysis test configuration. The weights are mapped in the same fashion as the All Rules profile. | Security Impact | This profile maps static analysis rules for the Jtest, C/C++ test , and dotTEST DTP Engines to the Security test configuration, which includes rules covering the CWE Top 25 guideline. The weights are mapped in the same fashion as the All Rules profile. |
...