This has been solved for over a decade. Include a linter and static analysis stage in the build pipeline. No code review until the checkbox goes green (or the developer has a specific argument for why a particular finding is a false positive)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
replies: