ballerina-platform/static-code-analysis-tool

Issues somebody may already be working on are listed last. List everything by date

• Restructure the `bal scan` help text

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Improvement

  Difficulty 2/5 1-3 hours Newbie friendliness 68/100

  ballerina-platform/static-code-analysis-tool#140 · Opened Oct 27, 2026

  Maintainers usually reply within 1 day

• Support `bal scan --version`

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Improvement

  Difficulty 2/5 1-3 hours Newbie friendliness 72/100

  ballerina-platform/static-code-analysis-tool#139 · Opened Oct 27, 2026

  Maintainers usually reply within 1 day

• Add a `--module` option to scan a single module

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Improvement

  Difficulty 3/5 1-2 days Newbie friendliness 62/100

  ballerina-platform/static-code-analysis-tool#138 · Opened Oct 27, 2026

  Maintainers usually reply within 1 day

• Resolve `--target-dir` against the current directory and reject report flags for single files

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Improvement

  Difficulty 3/5 1-2 days Newbie friendliness 63/100

  ballerina-platform/static-code-analysis-tool#137 · Opened Oct 27, 2026

  Maintainers usually reply within 1 day

• Resolve the scan target with the project loader instead of path checks

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Improvement

  Difficulty 3/5 1-2 days Newbie friendliness 62/100

  ballerina-platform/static-code-analysis-tool#136 · Opened Oct 27, 2026

  Maintainers usually reply within 1 day

• Add a human-readable text output and an `--output-format <text|json>` option

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Improvement

  Difficulty 4/5 3-5 days Newbie friendliness 55/100

  ballerina-platform/static-code-analysis-tool#135 · Opened Oct 27, 2026

  Maintainers usually reply within 1 day

• Use a consistent format for `bal scan` errors and warnings

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Improvement

  Difficulty 4/5 3-5 days Newbie friendliness 45/100

  ballerina-platform/static-code-analysis-tool#134 · Opened Oct 27, 2026

  Maintainers usually reply within 1 day

• Fail on unknown rule IDs in `--include-rules` and `--exclude-rules`

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Improvement

  Difficulty 3/5 1-2 days Newbie friendliness 64/100

  ballerina-platform/static-code-analysis-tool#133 · Opened Oct 27, 2026

  Maintainers usually reply within 1 day

• Rename `--format` to `--report-format` and align its values and default

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Improvement

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  ballerina-platform/static-code-analysis-tool#132 · Opened Oct 27, 2026

  Maintainers usually reply within 1 day

• Exit with a non-zero code when `bal scan` fails

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Improvement

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  ballerina-platform/static-code-analysis-tool#131 · Opened Oct 27, 2026

  Maintainers usually reply within 1 day

• Write only the scan result to stdout and send progress, warnings and errors to stderr

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Improvement

  Difficulty 3/5 1-2 days Newbie friendliness 70/100

  ballerina-platform/static-code-analysis-tool#130 · Opened Oct 27, 2026

  Maintainers usually reply within 1 day

• Support excluding files and directories from bal scan

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/New Feature

  Difficulty 5/5 Over a week Newbie friendliness 45/100

  ballerina-platform/static-code-analysis-tool#129 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• Report secret-named values passed to log functions, not only configurables

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/New Feature

  Difficulty 4/5 3-5 days Newbie friendliness 49/100

  ballerina-platform/static-code-analysis-tool#128 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• Add a rule to detect SQL identifiers interpolated as query parameters in `ballerina/sql`

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/New Feature

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  ballerina-platform/static-code-analysis-tool#127 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• Add a rule to report the obsolete `@tainted` and `@untainted` annotations

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/New Feature

  Difficulty 3/5 1-2 days Newbie friendliness 57/100

  ballerina-platform/static-code-analysis-tool#126 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• Add a rule to detect `toString()` calls on optional values

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/New Feature

  Difficulty 4/5 3-5 days Newbie friendliness 52/100

  ballerina-platform/static-code-analysis-tool#125 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• Add a rule to detect type casts that can panic

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/New Feature

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  ballerina-platform/static-code-analysis-tool#124 · Opened Oct 26, 2026

  Maintainers usually reply within 1 day

• `bal scan` `--platforms` skips the requested report and applies inconsistently across workspace members

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Bug

  Difficulty 3/5 1-2 days Newbie friendliness 72/100

  ballerina-platform/static-code-analysis-tool#114 · Opened Oct 20, 2026

  Maintainers usually reply within 1 day

• Add partialFingerprints to the results in the SARIF report

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Improvement

  Difficulty 5/5 Over a week Newbie friendliness 45/100

  ballerina-platform/static-code-analysis-tool#113 · Opened Oct 20, 2026

  Maintainers usually reply within 1 day

• Report a finding-specific message for each result

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Improvement

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  ballerina-platform/static-code-analysis-tool#112 · Opened Oct 20, 2026

  Maintainers usually reply within 1 day

• Add a `--fail-on-severity` option so that `bal scan` can fail a build on findings

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Improvement

  Difficulty 5/5 Over a week Newbie friendliness 43/100

  ballerina-platform/static-code-analysis-tool#111 · 1 comment · Opened Oct 20, 2026

  Maintainers usually reply within 1 day

• Add an `--exclude-tests` option to bal scan

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Improvement

  Difficulty 4/5 3-5 days Newbie friendliness 52/100

  ballerina-platform/static-code-analysis-tool#110 · Opened Oct 20, 2026

  Maintainers usually reply within 1 day

• Stop reporting ballerina:13 and ballerina:14 for values that are not secrets

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Bug

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  ballerina-platform/static-code-analysis-tool#109 · 1 comment · Opened Oct 15, 2026

  Maintainers usually reply within 1 day

• Improve the level of detail shown for `bal scan` results in the SonarQube plugin

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Improvement

  Difficulty 3/5 1-2 days Newbie friendliness 66/100

  ballerina-platform/static-code-analysis-tool#108 · 2 comments · Opened Oct 6, 2026

  Maintainers usually reply within 1 day

• False positive for `ballerina:14` when a secret-named variable is assigned the result of a function call

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Bug

  Difficulty 3/5 1-2 days Newbie friendliness 58/100

  ballerina-platform/static-code-analysis-tool#105 · Opened Oct 2, 2026

  Maintainers usually reply within 1 day

• False positive for ballerina:14 (Non configurable secrets) when a secret-named parameter defaults to nil ()

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Bug

  Difficulty 3/5 1-2 days Newbie friendliness 68/100

  ballerina-platform/static-code-analysis-tool#104 · Opened Oct 2, 2026

  Maintainers usually reply within 1 day

• Add data-flow analysis based rules to detect dead stores and redundant variable assignments

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Improvement

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  ballerina-platform/static-code-analysis-tool#96 · Opened Sep 29, 2026

  Maintainers usually reply within 1 day

• Rule ballerina:12 (Invalid range expression) not reported for hexadecimal integer literals

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Bug

  Difficulty 3/5 1-2 days Newbie friendliness 72/100

  ballerina-platform/static-code-analysis-tool#88 · Opened Sep 2, 2026

  Maintainers usually reply within 1 day

• Rule ballerina:8 not reported when the constant is on the left-hand side of the comparison

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Bug

  Difficulty 3/5 1-2 days Newbie friendliness 68/100

  ballerina-platform/static-code-analysis-tool#87 · Opened Sep 2, 2026

  Maintainers usually reply within 1 day

• Migrate Rule Severity and AI Hints from VS Code Client to Scanner Core

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Improvement

  Difficulty 4/5 3-5 days Newbie friendliness 45/100

  ballerina-platform/static-code-analysis-tool#83 · Opened May 10, 2026

  Maintainers usually reply within 1 day

• Add local exclusions for the security scanner

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Improvement

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  ballerina-platform/static-code-analysis-tool#82 · 1 comment · Opened May 5, 2026

  Maintainers usually reply within 1 day

• Returning zero exit code for scans with rule violations

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Bug

  Difficulty 3/5 1-2 days Newbie friendliness 50/100

  ballerina-platform/static-code-analysis-tool#73 · Opened Aug 30, 2025

  Maintainers usually reply within 1 day

• Refactor scan tool to retrieve rule metadata directly from `Rule` instance instead of `rules.json`

  May be free again A pull request for this issue was closed without being merged. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Improvement

  Difficulty 4/5 3-5 days Newbie friendliness 45/100

  ballerina-platform/static-code-analysis-tool#66 · Opened Jun 3, 2025

  Maintainers usually reply within 1 day

• Use a `Reporter` reference instead of a `ReporterImpl` reference in `ProjectAnalyzer`.

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Improvement

  Difficulty 2/5 1-3 hours Newbie friendliness 48/100

  ballerina-platform/static-code-analysis-tool#64 · Opened Jun 2, 2025

  Maintainers usually reply within 1 day

• Implement new rules to align with OWASP Top 10 Vulnerabilities

  May be free again @nureka-rodrigo claimed this 399 days ago, and no pull request is open. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Task

  ballerina-platform/static-code-analysis-tool#62 · 2 comments · 1 assignee · Opened May 19, 2025

  Maintainers usually reply within 1 day

• Integrate the scan tool with the package build

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  ballerina-platform/static-code-analysis-tool#59 · 1 comment · Opened Apr 25, 2025

  Maintainers usually reply within 1 day

• Provide opinionated rules with the scan tool

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  ballerina-platform/static-code-analysis-tool#58 · 1 comment · Opened Apr 24, 2025

  Maintainers usually reply within 1 day

• Linting functionality for Ballerina with the scan tool

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  ballerina-platform/static-code-analysis-tool#57 · Opened Apr 24, 2025

  Maintainers usually reply within 1 day

• Static code analysis upcoming tasks

  May be free again @gayaldassanayake claimed this 567 days ago, and no pull request is open. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Task

  ballerina-platform/static-code-analysis-tool#54 · 14 comments · 1 assignee · Opened Apr 8, 2025

  Maintainers usually reply within 1 day

• Update the rules assertion logic in lang static rules

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Improvement

  Difficulty 4/5 3-5 days Newbie friendliness 30/100

  ballerina-platform/static-code-analysis-tool#47 · Opened Mar 14, 2025

  Maintainers usually reply within 1 day

• Create a static code analysing rule for `int:range` expressions

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Improvement

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  ballerina-platform/static-code-analysis-tool#46 · Opened Feb 25, 2025

  Maintainers usually reply within 1 day

• Checkstyle links of the gradle fils should change to the java 21

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Bug

  Difficulty 2/5 1-3 hours Newbie friendliness 35/100

  ballerina-platform/static-code-analysis-tool#41 · Opened Feb 20, 2025

  Maintainers usually reply within 1 day

• Structure the tests for single rule tests

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Improvement

  Difficulty 3/5 1-2 days Newbie friendliness 45/100

  ballerina-platform/static-code-analysis-tool#40 · Opened Feb 20, 2025

  Maintainers usually reply within 1 day

• Ballerina version for static code analysis is picked from BALLERINA_HOME env variable

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Bug

  Difficulty 3/5 1-2 days Newbie friendliness 30/100

  ballerina-platform/static-code-analysis-tool#39 · 2 comments · Opened Feb 20, 2025

  Maintainers usually reply within 1 day

• Decouple the rule implementation from the NodeVisitor

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Improvement

  Difficulty 5/5 Over a week Newbie friendliness 30/100

  ballerina-platform/static-code-analysis-tool#36 · Opened Feb 18, 2025

  Maintainers usually reply within 1 day

• Allow suppressing analysis in specific places

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Improvement

  Difficulty 5/5 Over a week Newbie friendliness 42/100

  ballerina-platform/static-code-analysis-tool#20 · 4 comments · 1 reaction · Opened Jul 26, 2024

  Maintainers usually reply within 1 day

• Add functionality to exclude all analysis issues of an analyzer compiler plugin using the "*" operator

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Improvement

  Difficulty 3/5 1-2 days Newbie friendliness 45/100

  ballerina-platform/static-code-analysis-tool#19 · Opened Jun 29, 2024

  Maintainers usually reply within 1 day

• Adding functionality to trigger platform plugins from the console.

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  Type/Improvement

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  ballerina-platform/static-code-analysis-tool#18 · Opened Jun 29, 2024

  Maintainers usually reply within 1 day