Code Quality Flow and Process
Sonarqube report is published on https://ctc-sonar.azurewebsites.net/dashboard with every build execution (for PR or after merge)
Vera code scans are executed on demand
Junit tests results and code coverage included in the build report on Azure DevOps
ODP Code standards: Development Standards for CCV2
Code review checklist: Code Review Checklist
Engineering Excellence Code quality template : Code Quality Testing
Quality Engineering Code quality : Test Strategy
Quality Metrics
Track |
AEM |
Hybris |
FED |
CDS |
---|---|---|---|---|
Reliability |
A |
E |
A |
|
Security - SonarQube |
A |
A |
A |
|
Security Hotspots to be reviewed - SonarQube |
A |
E( 3 – Medium) |
A |
|
Security - Static Veracode |
0 |
0 |
0 |
|
Maintainability |
A |
A |
A |
|
Sonar Code Smells |
Blocker-7 |
Blocker- 19 |
|
|
Sonar Bugs |
0 |
Blocker - 6 |
0 |
|
Code Coverage - Lines |
89% |
90.80% |
86.90% |
|
Code Coverage - Branch |
55% |
72.50% |
70% |
|
Code Duplication |
0% |
1.1% |
1.80% |
|