Weighting static analysis alerts

A system comprising:

• one or more computers and one or more storage devices storing instructions that are operable, when executed by the one or more computers, to cause the one or more computers to perform at least:
• in response to receiving a request from a device of a user of source code of one or more software projects stored in one or more version control systems for alerts associated with coding defects in the source code, after the user lowed in a source code analysis system,
• identify the user who lowed in the source code analysis system;
• obtain the source code of the one or more software projects from respective version control systems;
• analyze the source code of the one or more software projects to identify a plurality of coding defects;
• generate an alert for each of the plurality of coding defects, wherein each alert of the plurality of alerts represents a respective coding defect and has one or more respective attribute values for one or more features of the plurality of features;
• obtain, for each feature of the plurality of features, an importance distribution, represented by P (ImportanceIA), mapping one or more feature values for the feature, represented by A, to a respective measure of importance for each alert in the plurality of alerts having the one or more feature values, wherein the importance distribution is obtained based on integration over (1) mapping between feature values and likelihoods of importance, represented by P(IIx), and (2) feature value distribution, represented by P(xIA), wherein the importance distribution is represented by P(ImportanceIA)=fP(IIx)*P(xIA)dx;
• compute, for each alert and for each feature, a respective feature value likelihood to which a corresponding feature value for each alert is mapped on the importance distribution;
• compute, for each feature of one or more respective features of the one or more alerts, a respective feature score, the respective feature score being a value to which the computed feature value likelihood for the respective feature is mapped on the importance distribution for the respective feature;
• compute, for each alert of the plurality of alerts, a respective weight for the alert by combining the respective feature score for each feature computed for the alert;
• adjust at least one respective weight based on a file that the user is involved in;
• rank the plurality of alerts according to the respective weights comprising at least one adjusted weight to indicate a priority of addressing respective coding defects represented by the alerts and by at least generating a user interface presentation that presents one or more of the alerts in an order according to the respective weights comprising at least one adjusted weight for the alerts;
• and
• cause a user-centric interface presentation to be generated at the device of the user based on the ranked plurality of alerts, the user interface presentation presenting one or more top-ranked alerts and corresponding portions of source code associated therewith that need improving for guiding the user on how to improve quality of the source code of the one or more software projects in the respective version control systems.

A computer program product comprising one or more hardware storage devices, storing encoded computer-executable instructions which are executable by one or more computers to cause the one or more computers to perform:

• in response to receiving a request from a device of a user of source code of one or more software projects stored in one or more version control system for alerts associated with coding defects in the source code, after the user lowed in a source code analysis system,
• identify the user who lowed in the source code analysis system;
• obtain the source code of the one or more software projects from respective version control systems;
• analyze the source code of the one or more software projects to identify a plurality of coding defects;
• generate an alert for each of the plurality of coding defects, wherein each alert of the plurality of alerts represents a respective coding defect and has one or more respective attribute values for one or more features of the plurality of features;
• obtain, for each feature of the plurality of features, an importance distribution, represented by P (ImportanceIA), mapping one or more feature values for the feature, represented by A, to a respective measure of importance for each alert in the plurality of alerts having the one or more feature values, wherein the importance distribution is obtained based on integration over (1) mapping between feature values and likelihoods of importance, represented by P(IIx), and (2) feature value distribution represented by P(xIA), wherein the importance distribution is represented by P(ImportanceIA)=fP(IIx)*P(xIA)dx;
• compute, for each alert and for each feature, a respective feature value likelihood to which a corresponding feature value for each alert is mapped on the importance distribution;
• compute, for each feature of one or more respective features of the one or more alerts, a respective feature score, the respective feature score being a value to which the computed feature value likelihood for the respective feature is mapped on the importance distribution for the respective feature;
• compute, for each alert of the plurality of alerts, a respective weight for the alert by combining the respective feature score for each feature computed for the alert;
• adjust at least one respective weight based on a file that the user is involved in;
• rank the plurality of alerts according to the respective weights comprising at least one adjusted weight to indicate a priority of addressing respective coding defects represented by the alerts and by at least generating a user interface presentation that presents one or more of the alerts in an order according to the respective weights comprising at least one adjusted weight for the alerts;
• and
• cause a user-centric interface presentation to be generated at the device of the user based on the ranked plurality of alerts, the user interface presentation presenting one or more top-ranked alerts and corresponding portions of source code associated therewith that need improving for guiding the user on how to improve quality of the source code of the one or more software projects in the respective version control systems.