skills.rest
Femad-6
Femad-6COMMUNITY
Explore all skills by this author →
WebsiteGitHub

springboot-verification

Runs build, static analysis, tests, security scans, and diff review for Spring Boot projects.

Updated Mar 25, 2026
Search Tags:#code quality#testing#verification#security scan#maven#spring boot#jacoco
One-click install
npx skills add https://github.com/Femad-6/my-skills --skill springboot-verification-femad-6
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: springboot-verification
Source: https://github.com/Femad-6/my-skills/tree/main/.github/skills/springboot-verification
Command: npx skills add https://github.com/Femad-6/my-skills --skill springboot-verification-femad-6

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Spring Boot changes often reach pull requests or production without a consistent quality gate, letting build failures, low test coverage, CVEs, and leftover debug code slip through. This Skill enforces a repeatable verification loop before PRs and deployments. ## Core Features & Use Cases - Phased Verification Pipeline: Runs build, static analysis (SpotBugs, PMD, Checkstyle), tests with JaCoCo coverage, OWASP dependency checks, and diff review in sequence. - Test Patterns Included: Provides ready-to-use examples for Mockito unit tests, Testcontainers integration tests, and MockMvc API tests. - Structured Report Output: Produces a PASS/FAIL verification report with coverage percentages, CVE counts, and a list of issues to fix. - Use Case: Before opening a PR for a Spring Boot service, run the full loop to confirm the build passes, coverage meets the 80% threshold, no dependency CVEs exist, and the diff contains no debug logging. ## Quick Start Run the Spring Boot verification loop on my project and report build, test coverage, and security scan results before I open a pull request.

Frequently Asked Questions about springboot-verification

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify a Spring Boot project before a pull request?▼

Run a phased loop: build with mvn clean verify, run SpotBugs/PMD/Checkstyle checks, execute tests with JaCoCo coverage, scan dependencies with OWASP dependency-check, and review the git diff. Stop and fix failures at each phase before proceeding.

How to check test coverage in a Spring Boot Maven project?▼

Run mvn test followed by mvn jacoco:report to generate a coverage report showing line and branch percentages. The verification loop targets 80% or higher coverage before marking tests as passing.

Should I use Testcontainers or H2 for Spring Boot integration tests?▼

Testcontainers runs tests against a real database like PostgreSQL in a Docker container, matching production behavior more closely than H2. Use @DynamicPropertySource to inject the container's JDBC URL, username, and password into the Spring context.

How do I scan Spring Boot dependencies for CVEs?▼

Run mvn org.owasp:dependency-check-maven:check for Maven or ./gradlew dependencyCheckAnalyze for Gradle. The scan reports known vulnerabilities in project dependencies, which should be reviewed before release.

What should I check in a Spring Boot code diff before merging?▼

Check for leftover System.out.println or unguarded debug logs, raw exception messages in responses, wildcard CORS origins, missing transactions or validation, and undocumented configuration changes. Use git diff --stat and git diff to review all changes.

Related Skills

Explore More Software Engineering Skills→
codelablycodelably
41

springboot-verification

Verify Spring Boot projects with build, static analysis, tests, and security checks.

Official
Advanced
raghavbadhwarraghavbadhwar

land-and-deploy

Merges pull requests, waits for CI and deploy, and verifies production health via canary checks.

Community
Advanced
richardcbrichardcb
15

code-review

Audit implemented code against technical plans and AI-specific risks.

Community
Advanced
tiweentiween

bmad-testarch-ci

Automate CI/CD pipeline setup with test execution and quality gates.

Official
Advanced