[Closi]

What if it takes you longer to vet false positives from a static analysis tool rather than just testing your code better?

[Cthulhu_]

What if indeed. Most static analyses tools (disclaimer: anecdotal) have very little false positives these days. This may be much worse in C/C++ land though, I don't know.