Industry: MedTech
Static code analysis is state of the art in software development. Various tools are available on the market. They check coding rules (e.g., MISRA) and scan the source code for errors, vulnerabilities, and code smells.
However, things are not always that simple. On the one hand, different development projects use different programming languages and IDEs. Legacy code leads to dependencies that are not necessarily compatible with the current environment. On the other hand, the tools used for static code analysis should be easy to use. Ideally, all source code projects should be scanned with the same commands, even if different tools are used.
The challenge was to develop a single tool environment for static code analysis of source code in C and C#, taking all these constraints into account.
Due to the special requirements mentioned above, different scan tools were selected for C and C#. The results of the C scan are integrated into the tool used to scan C# where they are then managed and assessed.
For each programming language, a default rule set was defined, taking the proprietary coding guidelines at Sequana Medical into account. In addition, the reporting function was extended to be able to generate audit-proof scan reports.
The tool environment was validated according to the requirements of ISO 13485 chapter 7.6 and 21 CFR 820.70(i).
To improve usability and to facilitate automation, the scan is performed using a scan script. The scripts are parameterized in a way that they are easy to adapt to new projects. The handling is strictly identical for C and C#.
The built-in reporting features were extended to align the terminology with Sequana processes and to comply with good documentation practices.
Tool validation was performed using a risk- and workflow-based approach.
Sequana Medical is a commercial stage medical device company developing the alfapump® platform for the treatment of fluid overload in liver disease, malignant ascites and heart failure where diuretics are no longer effective. The alfapump® is a fully implantable, programmable, wirelessly charged, battery-powered system that is CE-marked for the treatment of refractory ascites due to liver cirrhosis and malignant ascites.
The alfapump® system is not currently approved in the United States or Canada. In the United States and Canada, the alfapump® system is currently under clinical investigation (POSEIDON Study) and is being studied in adult patients with refractory or recurrent ascites due to cirrhosis.
The DSR® therapy is still in development, and it should be noted that any statements regarding safety and efficacy arise from ongoing pre-clinical and clinical investigations which have yet to be completed. The DSR® therapy is not currently approved for clinical research in the United States or Canada. There is no link between the DSR® therapy and ongoing investigations with the alfapump® system in Europe.
Firstname:
Lastname:
E-Mail Address:
Phone:
Subject:
Your message:
Yes, I consent to my personal data being collected and stored electronically. My data will only be used for the purpose of responding to my inquiry. I have taken note of the privacy policy.