Are there any tools like Findbugs/Spotbugs/Sonarli...

# announcements

[Nezteb]

Are there any tools like Findbugs/Spotbugs/Sonarlint that work for Kotlin? Or do those 3 also work for Kotlin?

[Mike]

https://arturbosch.github.io/detekt/ or https://ktlint.github.io/. I use Detekt.

[Mike]

and there’s a channel for #C88E12QH4

[xenoterracide]

detekt doesn’t do bytecode analysis, afaik spotbugs doesn’t work on kotlin yet for some reason unknown to me.

[Mike]

I’m not sure why that’s a problem. Aren’t these all source code static analysis tools?

[xenoterracide]

findbugs and spotbugs are bytecode analysis tools, detekt is a source code analysis

[xenoterracide]

different approach’s can find different bugs

[Mike]

I didn’t realize findbugs was bytecode rather than source code, and wasn’t familiar with Spotbugs. Sonarlint though is source code, isn’t it? Since it’s basically running Sonarqube.

So Detekt could be what is required, or if nothing else, is a very valuable tool.

If they work on bytecode, then I’m surprised Findbugs and Spotbugs don’t work.

My employer uses Fortify, and we do bytecode analysis of Kotlin since Fortify doesn’t support source code analysis for Kotlin.