Can it run integration tests with real databases?

Absolutely. The skill provides specific patterns for using Testcontainers to run integration tests against real database instances like PostgreSQL instead of H2.

Does this skill support both Maven and Gradle?

Yes, the Spring Boot Verification Loop includes standardized commands and configurations for both Maven and Gradle build systems.

What kind of verification report does it generate?

It produces a standardized summary covering Build status, Static Analysis (SpotBugs/PMD), Test results (pass/fail and coverage %), and Security findings.

How does it handle security scanning?

It performs dependency CVE checks using OWASP tools and scans source code and git history for hardcoded secrets, System.out logs, and unsafe CORS configurations.

Spring Boot Verification Loop

Name: Spring Boot Verification Loop
Author: unju-ai

byunju-ai

0•

安全与测试

Automates a comprehensive verification pipeline for Spring Boot applications including builds, static analysis, testing, and security scanning.

This skill provides a structured, multi-phase verification loop designed specifically for Spring Boot developers to ensure code quality and security before pull requests or deployments. It guides Claude through executing build commands, running static analysis tools like SpotBugs and Checkstyle, performing isolated unit tests and containerized integration tests, and scanning for common security vulnerabilities. By providing standardized report templates and best practices for Testcontainers and MockMvc, it helps teams maintain high test coverage and robust, production-ready backend services.

主要功能

010 GitHub stars

02Detailed verification reports summarizing build status, test coverage, and security findings.

03Automated build and static analysis using Maven or Gradle configurations.

04Code diff review checklists to ensure clean, documented, and production-ready commits.

05Security vulnerability scanning for dependencies and hardcoded secrets detection.

06Comprehensive testing strategies including Unit, Integration (Testcontainers), and API tests (MockMvc).

使用场景

01Validating a Spring Boot service before opening a pull request to catch regressions early.

02Ensuring 80%+ test coverage and dependency safety after major refactoring or upgrades.

03Performing a final pre-deployment verification gate for staging or production environments.

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add unju-ai/ecc springboot-verification

For use in Claude.ai and ChatGPT

主要功能

010 GitHub stars

02Detailed verification reports summarizing build status, test coverage, and security findings.

03Automated build and static analysis using Maven or Gradle configurations.

04Code diff review checklists to ensure clean, documented, and production-ready commits.

05Security vulnerability scanning for dependencies and hardcoded secrets detection.

06Comprehensive testing strategies including Unit, Integration (Testcontainers), and API tests (MockMvc).

使用场景

01Validating a Spring Boot service before opening a pull request to catch regressions early.

02Ensuring 80%+ test coverage and dependency safety after major refactoring or upgrades.

03Performing a final pre-deployment verification gate for staging or production environments.