SonarQube Analysis of ResumRank-AI Codebase

🔍 Analyzed my own code with SonarQube — here's what I found. As part of my Software Engineering course (4th Semester) at Dawood University of Engineering & Technology, I applied SonarQube to ResumRank-AI, my AI-powered resume screening app built with Python, Flask, spaCy, and pdfplumber. Instead of a textbook demo, I ran it on real production-intended code. The results were eye-opening: 🔴 8 Security Hotspots — CSRF vulnerabilities & sensitive data exposure in Flask routes 🟠 58 Maintainability violations — Cognitive Complexity exceeding threshold in ranking logic 🟡 60 Total issues — consistency, reliability & maintainability across 3.7k lines ⚡ 11 Reliability issues — unhandled edge cases in backend processing 📊 7 hours of Technical Debt estimated ✅ Quality Gate: Passed The biggest takeaway: code that works is not the same as code that's secure and maintainable. SonarQube flagged real vulnerabilities in my own codebase that I hadn't noticed — proving why static analysis belongs in every developer's workflow. 🔗 GitHub Repo: https://lnkd.in/d6MKMhU4 📄 Full Analysis Report: https://lnkd.in/gMgW-avE #SonarQube #Python #SoftwareEngineering #CodeQuality #StaticAnalysis #DUET #ArtificialIntelligence #Flask #OpenSource

  • graphical user interface, application, Teams

To view or add a comment, sign in

Explore content categories