Assess quality and risk

Surface code quality flaws, outdated third-party components, environmental impact, and sensitive data

Overview

This section helps you find where your application carries risk: structural quality flaws, outdated or vulnerable third-party components, inefficient code that increases environmental impact, and objects that handle sensitive data.

When to use this

Use these features when you need to answer questions such as:

  • Where are the structural quality flaws, and how does the application measure against ISO-5055?
  • Which third-party components are outdated or carry known vulnerabilities?
  • Which parts of the code have the greatest environmental impact?
  • Where does the application store or process sensitive data?

Workflow

  1. Review structural quality. Use Improving code quality and ISO-5055 compliance to find structural flaws and see how the application scores against the ISO-5055 standard.
  2. Check third-party components. Use Dealing with outdated third-party components to identify components that are out of date or carry known vulnerabilities.
  3. Assess environmental impact. Use How green is your application? to find code patterns that increase resource consumption.
  4. Locate sensitive data. Use Finding data sensitive objects to identify objects that handle confidential or regulated data.
  5. Plan the work. Tag and annotate the objects you find, then track them with the Global search and Compare features.