Code quality inspection method, system and equipment, medium and program product

Abstract

The invention discloses a code quality review method, system and device, a medium and a program product, and belongs to the technical field of software code quality review. According to the code quality examination method provided by the invention, interference factors in the codes are removed through the preprocessing step, so that subsequent analysis is more concentrated and efficient; by combining static analysis and dynamic analysis, potential defects in the codes are comprehensively and deeply found, and the accuracy and comprehensiveness of code quality review are improved by combining the static analysis and the dynamic analysis; by constructing a classifier model based on supervised learning, continuously collecting examined codes and defect tags thereof as a data set, and using the data to train and optimize the classifier model, the accuracy and generalization ability of the model can be continuously improved. According to the continuous learning and optimization mechanism, the code quality review method can be evolved continuously along with accumulation of data and experience, and a set of efficient, accurate and sustainable code quality review solution is provided for a software development team.

Description

Technical Field

[0001] The present invention relates to the technical field of software code quality testing, and in particular to a code quality review method, system, equipment, medium and program product. Background Art

[0002] As the scale of software development continues to expand, the amount of code has shown a blowout growth, and the management of code quality has become increasingly critical. As a core link in ensuring software quality, the importance of code review is self-evident. It can not only reveal defects that are difficult to find in later tests at an early stage, but also promote the improvement of team programming skills and the unification of coding styles, thereby significantly improving code quality and maintainability, and ensuring the robustness of software products.

[0003] However, traditional manual code review methods are unable to cope with such a large code base. This process is not only time-consuming and laborious, requiring reviewers to go deep into the code line by line to gain insight into its logic and structure, but also prone to fatigue, which can lead to a decrease in attention and affect the accuracy of the review. Under the rapid iterative development rhythm, this inefficient method often becomes a bottleneck for project progress, leading to code backlogs and delayed delivery time. In addition, differences in understanding and subjective judgments between different reviewers may also lead to inconsistent review results and increase communication costs.

[0004] What is more noteworthy is that manual review often fails to achieve comprehensive coverage. Reviewers may overlook certain potential problems due to time constraints or knowledge limitations. In addition, for complex interactions and dependencies in large projects, manual review is even more difficult to grasp the overall situation and is prone to missing key information. Traditional manual review methods often lack systematic recording and management mechanisms. Review results and discussion content may only exist in the reviewer's memory or scattered documents, making it difficult to track and trace them later. This is not conducive to the timely discovery and resolution of problems, and also affects the continuous improvement of project quality. With the continuous development and updating of software development technology, new programming paradigms, frameworks, and tools emerge in an endless stream. Traditional manual review methods may find it difficult to adapt to these changes, resulting in a significant reduction in the effectiveness of the review. For example, for projects that adopt agile development methods, frequent iterations and changes make traditional manual review methods even more stretched.

[0005] With the continuous advancement of technology, automated code review tools have emerged as a new option to improve review efficiency and quality. More and more companies have begun to explore and adopt automated code review tools to assist or replace manual review work. These tools automatically analyze code, identify potential problems, and provide improvement suggestions, such as static code analysis tools and dynamic code analysis tools. Among them, static code analysis tools mainly focus on the static structure of the code, and have limited support for the dynamic characteristics of code execution. This limits its ability to detect certain types of errors and vulnerabilities. It cannot fully simulate the running environment of the code. It may mistakenly report some problems that do not actually exist, that is, "false positives", and cannot detect errors that rely on the dynamic characteristics of code execution, such as dynamic type errors, dynamic method call errors, etc.; dynamic code analysis tools can capture the state changes of the program during runtime and provide more detailed code behavior information, thereby helping developers find potential problems. However, since dynamic code analysis tools rely on the actual runtime execution process, they can usually only cover those code paths triggered by test cases. For those code paths that are not covered by test cases, dynamic analysis tools cannot detect them. Therefore, it may not be able to find problems that only occur under specific conditions, resulting in limited comprehensiveness of the test.

[0006] Therefore, how to further optimize the automated code review process and improve the intelligence and accuracy of code review has become a technical problem that needs to be solved urgently. Summary of the invention

[0007] The purpose of the present invention is to provide a code quality review method, system, device, medium and program product to overcome the limitations of static code analysis tools and dynamic code analysis tools when performing code review.

[0008] The present invention solves the above technical problems through the following technical solutions: A code quality review method includes the following steps: Step 1: Collect the code to be reviewed, pre-process the code format to be reviewed, remove interference factors, and obtain the pre-processed code; Step 2: Apply static analysis technology to detect the syntax of the preprocessed code, and perform abstract syntax tree (AST) analysis on the preprocessed code structure to obtain the first analysis result; in the running environment, execute the preprocessed code, obtain the behavior information of the code execution through dynamic analysis, record relevant logs, and obtain the second analysis result; Step 3: Combine the first analysis result and the second analysis result to generate a code quality report including defect labels; Step 4. Obtain a dataset of reviewed codes and their corresponding defect labels, and divide the dataset into a training set and a test set; build a classifier model based on a supervised learning algorithm; use the training set to train the constructed classifier model to obtain a trained classifier model, and use the test set to test and optimize the trained classifier model to obtain the optimal classifier model; use the optimal classifier model to review the code to be reviewed and generate a code quality report.

[0009] Furthermore, the code to be reviewed is all modified codes extracted from the code base within a specified time period.

[0010] Furthermore, the code is in Java format.

[0011] Furthermore, the code format to be reviewed is preprocessed, including: removing comments and formatting.

[0012] Furthermore, the syntax of the preprocessed code is checked, including: unused variables, redundant code, and complex conditional logic; the operating environment is a test environment or an online environment; and the behavioral information includes code execution exceptions and memory leaks.

[0013] Furthermore, step three specifically includes: scoring and sorting the first analysis result and the second analysis result according to predefined standards and rules, and displaying the code quality problems, impact degree and cause analysis according to the sorting, and at the same time, giving targeted suggestions for user reference.

[0014] A code quality review system, including: A preprocessing unit is used to collect the code to be reviewed, preprocess the code format to be reviewed, remove interference factors, and obtain the preprocessed code; A static analysis unit, used for applying static analysis technology to detect the syntax of the preprocessed code, and performing an abstract syntax tree (AST) analysis on the preprocessed code structure to obtain a first analysis result; A dynamic analysis unit is used to execute the preprocessed code in the running environment, obtain the behavior information of the code during execution through dynamic analysis, record relevant logs, and obtain a second analysis result; A comprehensive evaluation unit, configured to combine the first analysis result and the second analysis result to generate a code quality report including defect labels; The intelligent detection unit is used to obtain the data set of reviewed codes and their corresponding defect labels, continuously learn historical data, obtain the optimal classifier model, and generate a code quality report through the optimal classifier model.

[0015] An electronic device includes a memory, a processor, and a computer program stored in the memory and executable on the processor. The above-mentioned code quality review method is implemented when the processor executes the program.

[0016] A computer-readable storage medium stores a computer program, which implements the above-mentioned code quality review method when executed by a processor.

[0017] A computer program product includes a computer program, and when the computer program is executed by a processor, the above-mentioned code quality review method is implemented.

[0018] Compared with the prior art, the positive and progressive effects of the present invention are: The code quality review method provided by the present invention utilizes automated tools and techniques to conduct code review, thereby reducing the workload of manual review and improving the efficiency and consistency of the review. The interference factors in the code are removed through the preprocessing step, making the subsequent analysis more centralized and efficient; combined with static analysis and dynamic analysis, the potential defects in the code are comprehensively and deeply discovered, wherein static analysis focuses on the structure and syntax of the code, while dynamic analysis focuses on the actual running behavior of the code, and the combination of the two improves the accuracy and comprehensiveness of the code quality review; a classifier model based on supervised learning is constructed, making the review of code quality more objective and scientific, and code quality reports can also be automatically generated, further improving the degree of automation of the review process. By continuously collecting the reviewed code and its defect labels as a data set, and using these data to train and optimize the classifier model, the accuracy and generalization ability of the model can be continuously improved. This continuous learning and optimization mechanism enables the code quality review method to evolve continuously with the accumulation of data and experience.

[0019] Furthermore, the generated code quality report displays the code quality problems, impact and cause analysis in order, and gives targeted suggestions for users to refer to, which not only points out the problems in the code, but also provides developers with improvement directions and suggestions. Through regular code quality review, the team can continuously improve code quality and reduce potential technical debt.

[0020] The code quality review system provided by the present invention combines static analysis and dynamic analysis, introduces machine learning technology, achieves high automation, continuous optimization and improvement, and promotes team collaboration and knowledge sharing, thereby providing software development teams with a set of efficient, accurate and sustainable code quality review solutions. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] The drawings in the specification are used to provide further understanding of the present invention and constitute a part of the present invention. The schematic embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute improper limitations on the present invention.

[0022] Figure 1 It is a schematic diagram of the process of the present invention. DETAILED DESCRIPTION

[0023] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Generally, the components of the embodiments of the present invention described and shown in the drawings here can be arranged and designed in various different configurations.

[0024] Therefore, the following detailed description of the embodiments of the present invention provided in the accompanying drawings is not intended to limit the scope of the invention claimed for protection, but merely represents selected embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0025] It should be noted that similar reference numerals and letters denote similar items in the following drawings, and therefore, once an item is defined in one drawing, further definition and explanation thereof is not required in subsequent drawings.

[0026] In the description of the embodiments of the present invention, it should be noted that if the terms "upper", "lower", "horizontal", "inner", etc. indicate an orientation or positional relationship based on the orientation or positional relationship shown in the drawings, or the orientation or positional relationship in which the product of the invention is usually placed when in use, it is only for the convenience of describing the present invention and simplifying the description, and does not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation on the present invention. In addition, the terms "first", "second", etc. are only used to distinguish the description, and cannot be understood as indicating or implying relative importance.

[0027] In addition, if the term "horizontal" appears, it does not mean that the component must be absolutely horizontal, but can be slightly tilted. For example, "horizontal" only means that its direction is more horizontal than "vertical", which does not mean that the structure must be completely horizontal, but can be slightly tilted.

[0028] In the description of the embodiments of the present invention, it is also necessary to explain that, unless otherwise clearly specified and limited, the terms "set", "install", "connect", and "connect" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be indirectly connected through an intermediate medium, or it can be the internal connection of two components. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0029] The present invention is further described in detail below in conjunction with the accompanying drawings and specific embodiments, which are intended to explain the present invention rather than to limit it.

[0030] See also Figure 1 , a code quality review method, including the following steps: Step 1: Collect the code to be reviewed, pre-process the code format to be reviewed, remove interference factors, and obtain the pre-processed code; Step 2: Apply static analysis technology to detect the syntax of the preprocessed code, and perform abstract syntax tree (AST) analysis on the preprocessed code structure to obtain the first analysis result; in the running environment, execute the preprocessed code, obtain the behavior information of the code execution through dynamic analysis, record relevant logs, and obtain the second analysis result; Step 3: Combine the first analysis result and the second analysis result to generate a code quality report including defect labels; Step 4: Obtain a data set of reviewed codes and their corresponding defect labels, and divide the data set into a training set and a test set; construct a classifier model based on a supervised learning algorithm; use the training set to train the constructed classifier model to obtain a trained classifier model, and use the test set to test and optimize the trained classifier model to obtain an optimal classifier model; use the optimal classifier model to review the code to be reviewed and generate a code quality report.

[0031] This method integrates advanced automation tools and technologies to build an efficient, comprehensive and intelligently evolving code quality review system. First, a preprocessing step is adopted to remove non-core interference factors in the code, such as comments, formatting differences, etc., to ensure that the subsequent analysis process is more focused and efficient, and to improve the initial efficiency and accuracy of the review; second, the two major technical paths of static analysis and dynamic analysis are integrated. Static analysis deeply analyzes the code structure and syntax to capture potential design defects and coding errors; dynamic analysis simulates the actual operating environment to reveal problems and performance bottlenecks in the code execution process. The two complement each other and achieve a comprehensive and in-depth review of code quality; third, based on the supervised learning algorithm, a high-precision code quality classifier model is constructed. The model continuously optimizes its own algorithm by continuously learning a large data set of reviewed codes and their defect labels, and improves the accuracy and generalization ability of identifying code defects. This intelligent design makes the review process more objective and scientific, and effectively reduces the interference of human factors; fourth, thanks to the machine learning mechanism, the code quality review method of the present invention has a strong ability of continuous learning and self-optimization. With the continuous accumulation and updating of review data, the system performance will continue to improve, ensuring that it always maintains a leading position in the field of code quality review.

[0032] In some specific embodiments of the present invention, the code to be reviewed is all modified codes extracted from a code library within a specified time period.

[0033] In some specific embodiments of the present invention, the code is in Java format.

[0034] In some specific embodiments of the present invention, the preprocessing of the code format to be reviewed specifically includes: removing comments and formatting.

[0035] In certain specific embodiments of the present invention, the detection of the preprocessed code syntax specifically includes: unused variables, redundant code and complex conditional logic; the operating environment is a test environment or an online environment; the behavioral information includes code execution exceptions and memory leaks.

[0036] In certain specific embodiments of the present invention, step three specifically includes: scoring and sorting the first analysis result and the second analysis result according to predefined standards and rules, and displaying the code quality problems, impact degree and cause analysis according to the sorting, and at the same time, giving targeted suggestions for user reference; in this embodiment, the method can automatically summarize the review results and generate a detailed code quality report. The report content covers code defect details, improvement suggestions and priority sorting, providing an intuitive and convenient reference for the software development team; Based on the same inventive concept, the embodiment of the present application provides a code quality review system, including a preprocessing unit, which is used to collect the code to be reviewed, preprocess the code format to be reviewed, remove interference factors, and obtain the preprocessed code; A static analysis unit, used for applying static analysis technology to detect the syntax of the preprocessed code, and performing an abstract syntax tree (AST) analysis on the preprocessed code structure to obtain a first analysis result; A dynamic analysis unit is used to execute the preprocessed code in the running environment, obtain the behavior information of the code during execution through dynamic analysis, record relevant logs, and obtain a second analysis result; A comprehensive evaluation unit, configured to combine the first analysis result and the second analysis result to generate a code quality report including defect labels; The intelligent detection unit is used to obtain the data set of reviewed codes and their corresponding defect labels, continuously learn historical data, obtain the optimal classifier model, and generate a code quality report through the optimal classifier model.

[0037] The code quality review system provided by the present invention combines static analysis and dynamic analysis, introduces machine learning technology, achieves high automation, continuous optimization and improvement, and promotes team collaboration and knowledge sharing, thereby providing software development teams with a set of efficient, accurate and sustainable code quality review solutions.

[0038] Based on the same inventive concept, an embodiment of the present application provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, and the processor implements the steps of a code quality review method when executing the computer program, wherein the memory may include a memory, such as a high-speed random access memory, and may also include a non-volatile memory, such as at least one disk memory, etc.; the processor, the network interface, and the memory are interconnected through an internal bus, and the internal bus may be an industrial standard architecture bus, a peripheral component interconnection standard bus, an extended industrial standard structure bus, etc., and the bus may be divided into an address bus, a data bus, a control bus, etc. The memory is used to store programs, and specifically, the program may include a program code, and the program code includes computer operation instructions. The memory may include a memory and a non-volatile memory, and provide instructions and data to the processor.

[0039] Based on the same inventive concept, an embodiment of the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the code quality review method are implemented. Specifically, the computer-readable storage medium includes, but is not limited to, for example, volatile memory and / or non-volatile memory. The volatile memory may include a random access memory (RAM) and / or a cache memory (cache), etc. The non-volatile memory may include a read-only memory (ROM), a hard disk, a flash memory, an optical disk, a magnetic disk, etc.

[0040] Based on the same inventive concept, an embodiment of the present application provides a computer program product, which includes a computer program stored on a computer-readable storage medium, and the computer program includes program instructions. When the program instructions are executed by a computer device, the computer device executes the steps of the above-mentioned code quality review method.

[0041] It will be appreciated by those skilled in the art that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Furthermore, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0042] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0043] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0044] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process in the computer or other programmable device. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0045] Finally, it should be noted that the above-listed embodiments exist only as one or more specific forms of expression of the technical solution of the present invention. Their purpose is to clearly explain the concept, principle and application of the present invention through specific examples, and it is by no means intended to limit the protection scope of the present invention to these specific embodiments. In fact, the real value of the present invention lies in the technical ideas and innovations it proposes, rather than its form of expression or means of implementation.

[0046] For ordinary technicians in the relevant technical field, after in-depth reading and understanding of the technical solution of the present invention, they are fully capable of making various forms of changes, modifications or equivalent substitutions to the specific implementation methods of the invention based on their own professional knowledge and skills. These changes may include but are not limited to: adjusting the value range of technical parameters, optimizing algorithm processes to improve efficiency, replacing some technical components to achieve better compatibility or reduce costs, etc. As long as these changed technical solutions still substantially maintain the technical features claimed for protection by the original invention, that is, they can still achieve the core functions and effects of the present invention, then these changes should be deemed to fall within the scope of protection of the pending claims of the present invention.

[0047] In addition, with the continuous progress and development of technology, new technical means and methods continue to emerge, which also provides broad space for further improvement and perfection of the present invention. Therefore, the protection scope of the present invention should also include those reasonably foreseeable improvements and extensions based on the existing technology. As long as these improvements and extensions do not deviate from the basic principles and core concepts of the present invention, they should be regarded as equivalents of the present invention and are also protected by patent rights.

Claims

1. A code quality review method, characterized in that: The following steps are involved: Step 1: Collect the code to be reviewed, pre-process the code format to be reviewed, remove interference factors, and obtain the pre-processed code; Step 2: Apply static analysis technology to detect the syntax of the preprocessed code, and perform abstract syntax tree (AST) analysis on the preprocessed code structure to obtain a first analysis result; In the running environment, the preprocessed code is executed, the behavior information of the code during execution is obtained through dynamic analysis, and relevant logs are recorded to obtain the second analysis result; Step 3: Combine the first analysis result and the second analysis result to generate a code quality report including defect labels; Step 4: Obtain a dataset of reviewed codes and their corresponding defect labels, divide the dataset into a training set and a test set; build a classifier model based on a supervised learning algorithm; The constructed classifier model is trained using the training set to obtain a trained classifier model, and the trained classifier model is tested and optimized using the test set to obtain an optimal classifier model; the code to be reviewed is reviewed using the optimal classifier model to generate a code quality report.

2. A code quality review method according to claim 1, characterized in that: The code to be reviewed is all modified codes extracted from the code base within a specified time period.

3. A code quality review method according to claim 1, characterized in that: The code is in Java format.

4. A code quality review method according to claim 1, characterized in that: The preprocessing of the code format to be reviewed specifically includes: removing comments and formatting.

5. A code quality review method according to claim 1, characterized in that: The detection is performed on the syntax of the preprocessed code, specifically including: unused variables, redundant code and complex conditional logic; the operating environment is a test environment or an online environment; the behavior information includes code execution exceptions and memory leaks.

6. A code quality review method according to claim 1, characterized in that: Step three specifically includes: scoring and sorting the first analysis result and the second analysis result according to pre-defined standards and rules, and displaying the code quality problems, impact degree and cause analysis according to the sorting, and at the same time, giving targeted suggestions for user reference.

7. A code quality review system, characterized in that: include: A preprocessing unit is used to collect the code to be reviewed, preprocess the code format to be reviewed, remove interference factors, and obtain the preprocessed code; A static analysis unit, used for applying static analysis technology to detect the syntax of the preprocessed code, and performing an abstract syntax tree (AST) analysis on the preprocessed code structure to obtain a first analysis result; A dynamic analysis unit is used to execute the preprocessed code in the running environment, obtain the behavior information of the code during execution through dynamic analysis, record relevant logs, and obtain a second analysis result; A comprehensive evaluation unit, configured to combine the first analysis result and the second analysis result to generate a code quality report including defect labels; The intelligent detection unit is used to obtain the data set of reviewed codes and their corresponding defect labels, continuously learn historical data, obtain the optimal classifier model, and generate a code quality report through the optimal classifier model.

8. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein: When the processor executes the program, the code quality review method as described in any one of claims 1 to 6 is implemented.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the code quality review method as described in any one of claims 1 to 6 is implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the code quality review method as described in any one of claims 1 to 6 is implemented.

Images