Code Reviews for Secure, Clean, and Scalable Code

• Overview of the Course Objectives

• Importance of Secure, Clean, and Scalable Code

• Importance of code reviews

• Introduction to Effective Code Review

• Impact on code quality and team collaboration

• Basic principles of code review process

• Goals of code review process

• Different types of code reviews

• Which type of code review to select

• Understanding the role of code reviewer and author

• Developing a Reviewer Mindset

• Strategies for Efficient Code Review

• Introduction to Code Review Tools

• Using Automated Tools for Code Analysis

• Integration of Tools into the Development Process

• Best Practices for Secure and Scalable Code

• What is PR and MR

• Difference between PR and MR

• Create PR

• Add collaborator to the repository

• Assignee VS Reviewer

• Different merging strategies

• Introduction to Checkstyle

• Features for Checkstyle

• Use cases

• Purpose and Benefits of Using Checkstyle

• Installation and Setup

• Configuring Checkstyle Rules

• Using Checkstyle Plugin During Development

• Integrating Checkstyle into a Sample Project

• Generating Checkstyle Report with Maven Plugin

• Analyzing Checkstyle Reports

• Using Checkstyle Plugin During Development

• Integrating Checkstyle into a Sample Project

• Generating Checkstyle Report with Maven Plugin

• Analyzing Checkstyle Reports

• What is PMD

• Features of PMD

• Benefits of PMD

• PMD Role in the Development Process

• Install PMD into Eclipse IDE

• Check code with PMD

• Analyze PMD Report

• Configure PMD Rules

• Integrate PMD checks into build process

• PMD Maven Plugin

• Establishing Code Review Guidelines and Expectations

• Example of Code Review Guidelines

• Contribution Policy

• Code Review Guidelines VS Contribution Policy

• Example of Contribution Policy

• Overview of coding standards

• Example of Coding Standards

• Setting and Enforcing Coding Standards

• Ensuring Code Quality and Consistency

• Coding Standards for Different Programming Languages

• Following Best Practices For Various Programming Languages

• Constructive Criticism Techniques (What, Why, How)

• Effective Communication During Code Review Process

• Providing Fair and Objective Feedback

• Creating a Positive Code Review Culture

• Building Trust Among Team Members

• Collaborative Code Review Process

• Importance of Security in Software Development

• Common Security Vulnerabilities

• Integrating Security Best Practices in Code Review Process

• Security Scanners

• Understanding Scalability in Software Development

• Best Practices for Scalable Code

• Identifying and Addressing Scalability Challenges

• How to identify scalability challenges during code review

• What is a metric

• Examples of metrics

• When to use metrics

• What is a KPI

• Examples of KPI

• When to use KPI

• Metric VS KPI

• What is OKR

• Examples of OKR

• When to use OKR

• KPI VS OKR

• What is RAG Status

• RAG status to present KPI

• Why we use RAG status for KPI

• What we are going to learn in this section

• Why this section is important

• Overview of Engineering Excellence Metrics Library

• Web Development related examples and use cases

• Tech Debt Ratio

• Tech Debt Index

• Cyclomatic complexity.

• Definition

• Use cases

• How to measure

• How to read values and what do they mean

• Recommended KPIs

• Recommended Actions

• Unit Testing

• How Unit Tests Work

• Benefits of Unit Tests

• Challenges and Limitations of Unit Tests

• Unit Test Run Success Rate

• Unit Test Code Coverage

• Incremental Unit Test Coverage

• Duplicate Code

• Duplicated Lines

• Duplicated Blocks

• Duplicated Files

• Density of Duplicated Lines

• Commented Code Index

• What is a Code Review

• Code Review Feedback Loop Time

• Code Reviews Amount

• Rules Compliance Index (RCI)

• Violations

• Differences between RCI and Violations

• What is Integration Testing

• What is End-to-End Testing

• Integration VS End-to-End Testing

• Integration Test Coverage

• End-to-End Test Coverage

• What are VCS

• The most popular VCS overview

• Git features overview

• Git basic pricniples overview

• Basics of Git interaction

• Where to download

• How to install git

• How to check that git installed

• Basic git configurations

• Git system, global and local configs.

• Level of configurations

• What is a git repository

• Git help command

• How to initialize local repo

• What is a branch

• Git add multiple files

• Git add with mask

• Git add all files

• First commit

• How to commit with adding to stage in one command

• Git status command

• git status -s

• git ignore

• git rm --cached

• git rm -r --cached

• git log

• nano text editor

• git log with file limits

• git log --pretty=oneline

• How to amend last commit

• Amend commit message only

• Vi console text editor

• git restore

• Removing files from the staging area

• Restoring original state of the file before changes

• Autocomplete with tab

• why do we need remote

• overview of git repository hostings

• GitHub sign up

• Creating repository in the github

• Checking remote repository

• Connecting local repository with the remote repository

• Setting upstream for the master branch

• README.md

• git clone

• What is SSH protocol

• When we need to use SSH

• SSH Keys

• How to generate SSH keys

• How to configure git repository

• Known hosts

• Changing remote repository

• How commits are stored in git in a nutshell

• What is a branch

• What is a HEAD pointer

• Create new branch

• git log for the specific branch

• git checkout

• git switch

• git branch

• Switch branches

• Detached HEAD state

• Basic linux terminal commands (cd, touch, ls)

• Push new branch to origin

• Why do we need to update the local repository?

• How often do we have to update the local repository?

• Git fetch

• git merge

• What is fast forward

• Git pull

• mkdir command

• Real-life scenario of team development and demo

• What is merge conflict

• When merge conflicts happen

• How to resolve merge conflicts

• Merge conflicts during the git pull

• new commit on merge from origin master

• What is a rebase

• pull with rebasing

• Merge conflicts during the rebasing

• git pull --rebase VS git rebase

• git rebase --continue

• rebase VS merging

• git push -f

• git push --force-with-lease

• four rules of happy work with git

• squash your commits

• change commit message

• any change in commit history requires force push

• What is git reset?

• reset VS checkout

• git reset few commits back

• git reset --soft

• git reset --mixed

• git reset --hard

• git reset to specific commit

• git reset to head

• git fetch --all and git reset origin branch

• What is stash

• When to use git stash

• How to stash changes

• How to manage multiple stashes

• How to apply stash

• Stash untracked files

• How to apply specific change from stash

• What is stack

• git stash list

• git stash pop VS git stash apply

• git stash branch

• git stash drop

• git stash clear

• What is git reflog

• When to use

• How to restore lost commits

• How to restore lost commits in the new branch

• How to restore commit on the same branch

• Filter reflog by time

• What is git cherry-pick

• When to use cherry-pick

• How to cherry-pick multiple commits

• Resolve conflicts during the cherry-picking

• Best practices

From this lesson you are going to learn how to use 'git clone' command to clone remote repository to your local computer.

• Explore git views in Eclipse

• How to add an existing git repository into eclipse

• Git bash in eclipse

• Review commit history in Eclipse

• Branch navigation in eclipse

• Creating a snapshot and pushing from eclipse

• Configuring toolbar

• Updating local repository from eclipse

• Resolving conflicts in eclipse