Can I customize the test coverage threshold?

While the default guidance suggests an 80% coverage goal using JaCoCo, Claude can adapt the verification loop to match your specific project requirements.

What tools are used for static analysis?

The skill utilizes industry-standard tools including Spotbugs, PMD, and Checkstyle to identify bugs and maintain code style consistency.

How does it handle security vulnerabilities?

It runs the OWASP Dependency-Check to identify known CVEs in your libraries and scans for exposed secrets using git secrets.

Does this skill work with both Maven and Gradle?

Yes, the skill includes specific command patterns for both Maven and Gradle, allowing it to adapt to your project's build system automatically.

Spring Boot Verification Loop

Name: Spring Boot Verification Loop
Author: affaan-m

byaffaan-m

•

43,117

Security & Testing

Automates a comprehensive quality gate for Spring Boot projects including builds, static analysis, security scans, and test coverage.

About

The Spring Boot Verification skill provides a standardized, multi-phase workflow to ensure Java applications are production-ready before deployment or pull request submission. It orchestrates complex tasks across the development lifecycle, from initial Maven or Gradle builds to advanced static analysis using Spotbugs and PMD. By integrating JaCoCo for test coverage and OWASP for dependency security, this skill helps developers maintain high-quality codebases with minimal manual overhead, providing a structured verification report as a final output.

Key Features

Automates static analysis using Spotbugs, PMD, and Checkstyle
Performs security audits via OWASP dependency checks and git secret scanning
Supports both Maven and Gradle build systems for flexible project integration
Provides a standardized verification report with pass/fail status for all phases
Generates JaCoCo test coverage reports to ensure 80%+ line/branch coverage
43,117 GitHub stars

Use Cases

Pre-pull request validation to catch regressions and style violations early
Continuous quality auditing during long development sessions to prevent technical debt
Security and dependency scanning before releasing new versions to production

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add affaan-m/everything-claude-code springboot-verification

For use in Claude.ai and ChatGPT

Download Skill

GitHub