The latest articles on DEV Community by Arsalan Khan (@asalan316). https://dev.to/asalan316 https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F763713%2Fc2553b6c-0f44-4dad-9b50-4b4a59e7ee23.png https://dev.to/asalan316 en Arsalan Khan Sun, 05 Dec 2021 19:13:39 +0000 https://dev.to/asalan316/improve-code-quality-static-analyzer-3770 https://dev.to/asalan316/improve-code-quality-static-analyzer-3770 <h3> My Workflow </h3> <p>As a developer, I am looking to improve my code quality and wants to receive fast feedback for my code changes. Specially, when a change comes in the Pull Request (PR) which can be overlooked. In such cases, automated static code analysis can be helpful, which list code coverage, potential bugs, code smells, vulnerabilities and security issues in the form of reports.</p> <p>One popular tool, SonarCloud by SonarSource helped me to detect bugs and list code coverage detail on the PR. In the workflow, I have used an existing Github Action from sonar cloud to automatically analysis my changes (in a PR) and post the results on the PR itself.</p> <p><strong>GitHub Action used</strong>[<a href="https://github.com/SonarSource/sonarcloud-github-action" rel="noopener noreferrer">https://github.com/SonarSource/sonarcloud-github-action</a>]</p> <p><a href="https://media.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2F4jctb5wpyxiis81nunag.png" class="article-body-image-wrapper"><img src="https://media.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2F4jctb5wpyxiis81nunag.png" alt="SonarCloud Results on PR"></a></p> <p><strong>Results on SonarCloud.io</strong><br> <a href="https://media.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fdad3p4oxrfruqw29tw90.png" class="article-body-image-wrapper"><img src="https://media.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fdad3p4oxrfruqw29tw90.png" alt="Results on SonarCloud.io"></a></p> <h3> Submission Category: </h3> <p>Maintainer Must-Haves</p> <h3> Yaml File or Link to Code </h3> <p>[<a href="https://github.com/asalan316/spring-boot-camunda-bpm-example/actions/runs/1541515266/workflow" rel="noopener noreferrer">https://github.com/asalan316/spring-boot-camunda-bpm-example/actions/runs/1541515266/workflow</a>]</p> <h3> Additional Resources / Info </h3> <p><strong>Sample PR</strong><br> [<a href="https://github.com/asalan316/spring-boot-camunda-bpm-example/pull/1" rel="noopener noreferrer">https://github.com/asalan316/spring-boot-camunda-bpm-example/pull/1</a>]</p> <p><strong>Master Branch</strong> <br> [<a href="https://github.com/asalan316/spring-boot-camunda-bpm-example/runs/4422734786?check_suite_focus=true" rel="noopener noreferrer">https://github.com/asalan316/spring-boot-camunda-bpm-example/runs/4422734786?check_suite_focus=true</a>]</p> <p><strong>Project</strong> <br> [<a href="https://github.com/asalan316/spring-boot-camunda-bpm-example" rel="noopener noreferrer">https://github.com/asalan316/spring-boot-camunda-bpm-example</a>]</p> actionshackathon21 codequality monitoring