Why Static Code Analysis? Static code analysis, or SCA, can be described as the analysis of whole-program source code without the execution of that program. A number of interpretations and even misconceptions about this technology and how it impacts or benefits you, the developer, have emerged over time. You may have heard some of them yourself.

To help tell the right story, we put this paper together to dispel some of the ‘myths’ about SCA, myths that serve mostly to distort the true value static analysis can bring to you and your software development lifecycle (SDLC).