What static analysis tools are integrated?

The workflow includes SpotBugs for bug detection, PMD for code style, Checkstyle for formatting, and Spotless for automated code application.

Does it support modern testing practices like Testcontainers?

Yes, it includes specific patterns for using Testcontainers to perform integration tests against real databases like PostgreSQL instead of in-memory mocks.

How does it handle security audits?

It integrates OWASP dependency checks for CVE detection, scans for hardcoded secrets in source code and git history, and checks for unsafe coding patterns like wildcard CORS.

Which build tools does this skill support?

The skill provides comprehensive commands and workflows for both Maven and Gradle, ensuring compatibility with the vast majority of Spring Boot projects.

Spring Boot Verification Cycle

Name: Spring Boot Verification Cycle
Author: affaan-m

byaffaan-m

•

112,918

•

安全与测试

Standardizes the verification lifecycle for Spring Boot projects through automated builds, multi-tier testing, security audits, and static analysis.

The springboot-verification skill provides a comprehensive, multi-stage verification loop specifically designed for Spring Boot applications. It guides Claude through a rigorous process including Maven or Gradle builds, static code analysis using SpotBugs and Checkstyle, and exhaustive testing strategies including Mockito-based unit tests, Testcontainers for integration tests, and MockMvc for API validation. By implementing a standardized 'verify-before-merge' workflow, it ensures high code quality, maintains strict test coverage thresholds, and identifies security vulnerabilities such as CVEs or hardcoded secrets before code ever reaches production.

主要功能

01Static Analysis Integration (SpotBugs, PMD, Checkstyle, Spotless)

02Automated Multi-Stage Build & Compilation (Maven/Gradle)

03Automated Security Scanning for CVEs and Hardcoded Secrets

04Deep Testing Suite (Unit, Testcontainers Integration, MockMvc API)

05Comprehensive Verification Reporting with Success/Failure Templates

06112,918 GitHub stars

使用场景

01Pre-Pull Request validation to ensure code quality and coverage thresholds

02Regression testing and security auditing after major dependency upgrades

03Final deployment verification for staging and production environments

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add affaan-m/everything-claude-code springboot-verification

For use in Claude.ai and ChatGPT

主要功能

01Static Analysis Integration (SpotBugs, PMD, Checkstyle, Spotless)

02Automated Multi-Stage Build & Compilation (Maven/Gradle)

03Automated Security Scanning for CVEs and Hardcoded Secrets

04Deep Testing Suite (Unit, Testcontainers Integration, MockMvc API)

05Comprehensive Verification Reporting with Success/Failure Templates

06112,918 GitHub stars

使用场景

01Pre-Pull Request validation to ensure code quality and coverage thresholds

02Regression testing and security auditing after major dependency upgrades

03Final deployment verification for staging and production environments

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add affaan-m/everything-claude-code springboot-verification

For use in Claude.ai and ChatGPT