Fixing legacy code, one pull request at a time
summary
Modernize a tiny Flask Pokedex by onboarding SonarCloud, running SonarCloud automatic analysis then switching to CI-based Sonar scan with GitHub Actions to import coverage; the process flags concrete bugs and vulnerabilities like SQL injection and reflected XSS, shows new-code coverage percentages, and attaches issues to the pull request. SonarLint connects to sync rules and silence decisions. The demo builds and runs the CI scan, computes coverage XML, and demonstrates one-at-a-time cleanup without a huge upfront rewrite.
AI-written summary · about
chapters (5)
related talks
29mManaging the code quality of your project. Leave the past behind: Focus on new code.
30mAutomating Code Quality
08mA Simple, Yet Powerful Approach to Clean Code!
12mAutomating Code Fixes with SonarQube Remediation Agent
16mShift Left with GitHub Copilot: Enforcing Code Quality Before the Commit
44mClean as You Code Your Projects
14mWhich Code Issues Actually Matter? | Prioritizing SonarQube Findings
06mWith great AI power comes great responsibility