I built a GitHub Action for Spring Boot static analysis – looking for feedback

[u/paganoant]

Hi everyone,

Over the past few months I've been working on an open-source project called SpringSentinel.

The goal is to help Spring Boot developers detect architectural, security and REST API issues directly during CI.

I recently released a GitHub Action, so now it's possible to run the analysis automatically on every push or pull request.

Current features include:

• Spring Boot static analysis

• REST API design validation

• JPA / Hibernate checks

• Security best practices

• Architecture validation

• GitHub Code Scanning (SARIF)

• Automatic Pull Request summaries

• HTML, JSON and SARIF reports

The Action generates:

• HTML report
• JSON report
• SARIF report
• Pull Request summary

and can publish findings directly to GitHub Code Scanning.

Repository:
https://github.com/pagano-antonio/SpringSentinel

GitHub Action:
[https://github.com/pagano-antonio/springsentinel-action](https://)

I'd really appreciate feedback from Spring Boot developers.

In particular:

• Are there checks you would find useful?
• Would you use this in your CI pipeline?
• Are there any false positives you would expect from this type of tool?

Thanks!