Static code analysis is a way of analyzing source code without building or executing the program. The analysis is either performed on the source code files as they are written by the software developers, or on the object code that is produced by the compiler. This has the advantage that in most cases no build or runtime environment is required for the analysis.
This is opposed to analyzing the program during its runtime (“dynamic analysis”).
