Production sampling for determining code coverage

A non-transitory machine-readable storage medium encoded with instructions executable by a processor for determining code coverage based on production sampling, the machine-readable storage medium comprising instructions to:

• obtain a production execution data set that comprises a plurality of metrics for a plurality of code units of a software application, wherein the plurality of metrics comprises input and output values for each of the plurality of code units and an average execution count for each of the plurality of code units;
• track application code execution during a testing procedure of the software application to determine a plurality of executed lines of code;
• and
• determine production code coverage of the software application based on the production execution data set and the plurality of executed lines of code.

A method for assessing dynamic security scans using runtime analysis and static code analysis, the method comprising:

• obtaining a production execution data set that comprises a plurality of metrics for a plurality of code units of a software application, wherein the plurality of metrics comprises input and output values for each of the plurality of code units, an average execution count for each of the plurality of code units, and a plurality of production execution sequences for the software application;
• tracking application code execution during a testing procedure of the software application to determine a plurality of executed lines of code and a plurality of testing execution sequences for the testing procedure;
• determining production code coverage of the software application based on the production execution data set and the plurality of executed lines of code;
• and
• determining execution sequence coverage of the software application based on the plurality of production execution sequences and a plurality of testing execution sequences for the testing procedure.