Any performance/security violation check plugins or AEM OOTB feature use by Developer

[varaande]

Hi Team,

Any plugins  for performance & Security violation or AEM OOTB feature use by developer Before release to testing team/production  . Currently we are using Chrome browser extension i.e. "lighthouse" but report saying poor performance percentage not sure any standard percentage  to achieved . 

Regards

Vara

[narendragandhi]

Hi @varaande 

You can look into Sonarqube plugin for general best practices validation as part of your development process. You can refer this thread for how to get it working - https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/how-to-implement-sonarqube...

Specifically for security you can look into adding dependency check maven plugin -https://jeremylong.github.io/DependencyCheck/dependency-check-maven/ 

If you are using Cloud Manager then you can also explore using the experience audit in Cloud Manager pipelines - https://experienceleague.adobe.com/en/docs/experience-manager-cloud-service/content/implementing/usi...

Hope this helps!

Thanks

Narendra

[varaande]

Thank you Narendra

we added SonarQube  pipeline and local .

what is advantages & how to check ,  Do I need add to root pom.xml project for dependency check maven plugin  https://jeremylong.github.io/DependencyCheck/dependency-check-maven/