misra-compliance-agent

Automate MISRA-C 2023 suppressions by analyzing violation reports and using the isir.py tool to apply predefined suppressions and manage PR workflows via a two-branch git strategy. This reduces manual toil and maintains compliance evidence.

Analyze CERT-CPP compliance violations by running a dry-run with the isir.py tool. This allows you to understand violations, prioritize remediation needs, and review compliance results before applying targeted suppressions.

Targeted suppressions with custom justifications are supported for remaining MISRA rules. After applying predefined suppressions, process remaining violations with targeted suppression and manage the git workflow per repository references.

The MISRA compliance workflow supports build verification and review. It generates compliance results, provides guidance for build verification, and manages the complete workflow from analysis to PR creation using a two-branch strategy.

Run a dry-run to understand MISRA violations by executing ./isir.py -m <module> -c MISRA -d. This command analyzes the module and reports violations, helping you prioritize remediation and suppression needs before making changes.

Automating CERT-CPP compliance suppressions requires predefined suppressions for common violations first, followed by targeted suppression with custom justification for remaining rules. Complex or unique violations may still need manual review and custom handling.