SqC Developer Guide
SqC (Software Code Quality) is a terminal-based static analysis tool that validates C code compliance with SEI CERT C Coding Standards. It implements 285 rules across 17 CERT C categories, using tree-sitter for fast AST-based analysis with cross-file context, control-flow graphs, and inter-procedural reasoning.
This guide covers advanced usage, CI/CD integration, the interactive console UI, testing methodology, project internals, and contributing.
Contents
- Advanced CLI Usage
- Suppression System
- Configuration
- CI/CD Integration
- Interactive Console UI
- Testing Methodology
- Analysis Architecture
- Benchmark Setup
- Running Benchmarks (MCP Server)
- Project Structure
- Future Rulesets Beyond CERT C
- Contributing
- Bibliography