Based on our record, Checkstyle should be more popular than Checkmarx. It has been mentiond 5 times since March 2021. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.
PMD and Checkstyle are static analysis tools that check your code on each project build. Gradle allows to apply them easily. - Source: dev.to / over 1 year ago
AFAIK, you can't use it with nvim-jdtls, but here you shave a list of checkstyle plugins and there are a Gradle and a Maven one that your could use. Source: over 1 year ago
The generated classes should be put into .gitignore. Otherwise, if you have Checkstyle, PMD, or SonarQube in your project, then generated classes can violate some rules. Besides, if you don't put them into .gitignore, then each pull request might become huge due to the fact that even a slightest fix can lead to lots of changes in the generated classes. - Source: dev.to / over 1 year ago
Speaking of code style there aren't many differences. You can try Checkstyle plugin. It automatically fails a build that violates any of the stated requirements. For example, the code might have an unused import. Besides you can look at cloud services that run the code analysis and shows the result as a bunch of charts (SonarCloud can also do that). - Source: dev.to / over 2 years ago
Java developers use powerful IDEs that lint code in realtime. Powerful as they are, they are not enough. Quality checks must also be part of the CI pipeline. We can use checkstyle to add a linting job. - Source: dev.to / about 3 years ago
Automate security testing: Use tools such as OWASP ZAP, SonarQube, or Checkmarx to automate security testing. This will help you identify security issues early in the development process and reduce the risk of vulnerabilities being introduced into your code. - Source: dev.to / about 1 year ago
Application Security (AppSec) is the forte of Checkmarx, which is an award-winning AppSec Testing tool that integrates security policies into the DevOps workflow and ensures security across the application lifecycle. Checkmarx scans all your code and provides actionable insights for critical vulnerabilities. Checkmarx also offers developer-friendly AppSec training that makes the transition to DevSecOps more... - Source: dev.to / over 2 years ago
SonarQube - SonarQube, a core component of the Sonar solution, is an open source, self-managed tool that systematically helps developers and organizations deliver Clean Code.
ReSharper - ReSharper is a productivity tool for visual studio that provides tools and features to help you manage your code.
Coverity Scan - Find and fix defects in your Java, C/C++ or C# open source project for free
Veracode - Veracode's application security software products are simpler and more scalable to increase the resiliency of your application infrastructure.
Codacy - Automatically reviews code style, security, duplication, complexity, and coverage on every change while tracking code quality throughout your sprints.
Appknox - Appknox is a cloud-based mobile app security solution to detect threats and vulnerabilities in the app.