FindBugs

What do you like best?

Easy IDE integration to fix the issues during development itself.

Integration with CI/CD

It also shows suggestions on how to ifix the issue during development itself

The number of false positive issues raised in find bugs was low when compared to other static code analyzing tools that we used.

Time taken for the source code analysis was also very much quick.

What do you dislike?

Issue explanation can be a bit more detailed like showing some common issue examples.

Will be nice if findbugs includes more features to spot performance related issues.

What problems are you solving with the product? What benefits have you realized?

Bad coding practise, security issues and correctness of the code are the issues we are trying to solve during development itself. This makes the code review a little easier to the team leads who do the review.

Customer Confidence Improves when we shows findbugs report as one of the evidence for code scanning.

The Ranking feature allows us to prioritise and focus on the high priority bugs immediately.