What problem does it solve?
It prevents broken or insecure Spring Boot releases by enforcing a repeatable verification loop that catches build failures, code quality issues, insufficient test coverage, and common security vulnerabilities before changes reach PRs or deployment.
Core Features & Use Cases
- Build validation: Runs a full build (Maven/Gradle) to ensure compilation and integration steps succeed before anything else proceeds.
- Static analysis checks: Executes SpotBugs, PMD, and Checkstyle to detect bugs, code smells, and style violations early.
- Tests with coverage reporting: Runs unit tests and generates coverage reports (e.g., JaCoCo) to confirm coverage thresholds and test health.
- Security scanning: Performs dependency vulnerability checks (OWASP dependency-check) and includes lightweight secrets scanning and risky pattern detection (e.g., debug logs, wildcard CORS).
- Diff review gate: Produces a PR-friendly checklist view (what changed, whether quality/security gates passed) to reduce review risk.
Quick Start
Run the Spring Boot verification loop for your repository by executing it before creating a PR so you can publish a clear pass/fail report covering build, static analysis, tests/coverage, security scans, and diff review.
