Costas Voliotis (CodeWeTrust) – An AI-driven approach to source code evaluation
- 1. Source code Inspection An AI-driven approach to source code quality evaluation BI focusing on the efficiency of SDLC Costas Voliotis 5/13/21 1
- 2. Source code Inspection “The ability for engineering teams to deliver high quality software at velocity is the difference between companies that gain a competitive edge versus those that fall behind” Undo CEO, Barry Morris Today, every company is a software company
- 3. Source code Inspection The Source Code Quality? What is this?
- 4. Source code Inspection Why we should care about it?
- 5. Source code Inspection the sooner the cheaper!
- 6. Source code Inspection … quick take-away!
- 7. Source code Inspection … we propose an AI-driven process that helps reduce the technical debt burden Time, and resources are limited ...
- 8. Source code Inspection AI-driven SDLC management 8
- 9. Source code Inspection The c2m SQA evaluation process
- 10. Source code Inspection … digging a little bit deeper 10 Reduce the cost maintenance Reduce the cost of integration Improve the defence against web attacks. Simplify License Compliance resolution Classify the level of maintenance required per version (Classification) Reduce the size of code requires maintenance (Clustering) Optimise and Standardize maintenance process (Rules Based Workflows) Detect Version Similarities (K-Means-), Suggest Eliminate/Merge of versions ( Recommendations), Reduce False-Positives, (Learning), Classify tech stacks (Classification) reduce downtime (Predictive analytics) Detect Vulnerabilities(Pattern Matching)-Identify Hotspots (Rule based recommendations). Classify Business Risk (Rule based/Classification) Identify vulnerabilities based on dependencies (Learning/Matching) Detect Licenses (Name matching/Pattern Matching), Licenses Resolution (Rules based recommendations). Classify Business Risk (Rule based/Classification). Reduce false-positives (Learning) AI ML
- 11. Source code Inspection How does c2m look like? Dashboard view
- 12. Source code Inspection Issues distribution-Interactive heatmaps
- 13. Source code Inspection Technical Reports and Code Viewer Web Interface - visualizes all the aspects of SW quality Code Viewer - enables detailed inspection of the findings
- 14. Source code Inspection Our vision:Optimization of the SDLC’s efficiency Input : dev team alignment + Continuous SQA assessment Process : Federation, SQA part of CI/CD + Flexibility Monitoring + Learning Output : Profitable, sustainable, flexible, evolving sw development process 14
- 15. Source code Inspection Resources Code we trust website: https://www.codewetrust.com/ Freemium Server + CI/CD download page: https://www.codewetrust.com/download Live demo / test cases : https://www.codewetrust.com/test-cases
- 16. Source code Inspection THANK YOU!