affaan-m avatar

Quarkus Verification

This is a comprehensive pre-merge and pre-deploy checklist that runs your Quarkus project through ten verification phases: compilation, static analysis with Checkstyle and SpotBugs, JaCoCo coverage enforcement at 80%, OWASP dependency scanning, native image compilation, and container security checks with Trivy. It includes working code snippets for Panache unit tests, REST Assured API tests, and Testcontainers integration tests. The native compilation phase is especially useful since GraalVM compatibility issues are easier to catch in CI than production. You'll want this before opening PRs on microservices or before any staging deploy. It's opinionated about thresholds and tooling, but that's better than reinventing the wheel each time.

skills.sh installs
5.4K
GitHub stars
300.3K
last updated
Aug 21, 2026

Install

$ npx -y skills add affaan-m/ecc --skill quarkus-verification --agent claude-code

Installs into .claude/skills of the current project.

Files

Quarkus Verification Loop

Run before PRs, after major changes, and pre-deploy.

When to Activate

  • Before opening a pull request for a Quarkus service
  • After major refactoring or dependency upgrades
  • Pre-deployment verification for staging or production
  • Running full build → lint → test → security scan → native compilation pipeline
  • Validating test coverage meets thresholds (80%+)
  • Testing native image compatibility

Phase 1: Build

# Maven
mvn clean verify -DskipTests

# Gradle
./gradlew clean assemble -x test

If build fails, stop and fix compilation errors.

Phase 2: Static Analysis

Checkstyle, PMD, SpotBugs (Maven)

mvn checkstyle:check pmd:check spotbugs:check

SonarQube (if configured)

mvn sonar:sonar \
  -Dsonar.projectKey=my-quarkus-project \
  -Dsonar.host.url=http://localhost:9000 \
  -Dsonar.login=${SONAR_TOKEN}

Common Issues to Address

  • Unused imports or variables
  • Complex methods (high cyclomatic complexity)
  • Potential null pointer dereferences
  • Security issues flagged by SpotBugs

Phase 3: Tests + Coverage

# Run all tests
mvn clean test

# Generate coverage report
mvn jacoco:report

Sponsors

Details

Repository
github.com/affaan-m/ecc
Categories
Testing & QA, Security, DevOps & CI/CD, Git & Pull Requests, Code Review & Quality, Release Management, Java & JVM
First seen
Jul 14, 2026

More from affaan-m/ecc

All 263
1cursor avatarinterrogatecursor/pluginsUse for \"interrogate\", \"adversarial review\", \"multi-model review\", \"challenge this\", \"stress test this code\", \"find blind spots\", or \"tear this apa5.3Kskills.sh installs
2claude-office-skills avatarnews-monitorclaude-office-skills/skillsSet up news monitoring strategies, analyze news coverage, and synthesize current events. Create news digests and media analysis reports.5.3Kskills.sh installs
3dotnet avatarfilter-syntaxdotnet/skillsReference data for test filter syntax across all platform and framework combinations: VSTest --filter expressions, MTP filters for MSTest/NUnit/xUnit v3/TUnit, 5.2Kskills.sh installs
4dpearson2699 avatarios-accessibilitydpearson2699/swift-ios-skillsBuild and audit SwiftUI, UIKit, and AppKit accessibility for VoiceOver, Voice Control, Switch Control, Full Keyboard Access, Dynamic Type, focus restoration, la5.2Kskills.sh installs
5dotnet avatardotnet-webapidotnet/skillsGuides creation and modification of ASP.NET Core Web API endpoints with correct HTTP semantics, OpenAPI metadata, and error handling. USE FOR: adding new API en5.2Kskills.sh installs
6samber avatarsnyk-agent-scan-compliancesamber/cc-skillsCompliance expert for snyk-agent-scan — the agent skill file scanner — NOT for other Snyk CLI tools (snyk test, snyk code SAST, snyk iac, snyk container). Fixes5.1Kskills.sh installs