Automated static code security analysis with PHP CodeSniffer

Events happening in the community are now at Drupal community events on www.drupal.org.
coltrane's picture
Posted by coltrane on December 4, 2012 at 10:21pm

I'm working on using PHP Code Sniffer to do automated vulnerability scanning of Drupal code. I've started an issue in the coder module and would love to get some feedback on the approach I'm taking of building an API over phpcs to trace input to output.

http://drupal.org/node/1844870

I hope that this code could make it into Coder module and be used in automated reviews of Drupal projects.

Let me know what you think!

Code review for security advisory coverage applications

Group organizers

Group notifications

This group offers an RSS feed. Or subscribe to these personalized, sitewide feeds: