Static code analysis is the process of analyzing code without executing it. Static code analysis can detect a wide range of issues, including:
Syntax errors, such as missing semicolons or brackets
Code smells, such as duplicated code or excessive complexity
Security vulnerabilities, such as buffer overflows or SQL injection
Violations of coding standards or best practices, such as naming conventions or formatting