Suggestion for Code Quality and CI tools

[slaff]

Do you have suggestions for open-source tools that can help us improve the code quality? Add them as comment to this issue with a short description what they do and how to use them. We will analyze the suggestions and see if it would be possible to integrate them in the CI builds.

Security and memory issue detection

• Static Code Analysis ( with coverity or other tools that are free for open-source projects). Implemented in Coverity scan to check for issues in the code. #1873
• Fuzzer. Tutorial https://github.com/google/fuzzer-test-suite/blob/master/tutorial/libFuzzerTutorial.md

[mikee47]

We need something like Catch. There are already a number of tests already written for the Arduino esp8266 platform, so adopting a standard framework means we don't have to start from scratch.

I'm not suggesting that all testing must be done using the same framework, but that it would supplement the existing applications:

HostTests

Added in #1692 to contain some tests which were written during development of the Host Emulator. Further tests have been formalised and added since. It uses a simple home-baked framework which allows the same tests to be run on real hardware.

SharedComponent

Added in #1724 when build system was restructured, specifically to check the use of local user Component repositories.