In this section, we will highlight the tools and processes used to ensure the overall quality and security of the application. Through SonarCloud, we perform static code analysis to identify potential bugs, vulnerabilities, and areas for improvement, while Snyk Security Test helps us detect security risks in dependencies. Together, these tools provide a comprehensive approach to maintaining high-quality, secure code throughout the development lifecycle.
The following screenshots demonstrates the CI/CD pipeline in action, where code changes are automatically built, tested, and deployed through GitHub Actions successfully. The pipeline ensures that every commit and pull request is validated for quality and functionality before being deployed to production.
The following screenshots shows the integration of SonarCloud into the CI/CD pipeline, where the code is analyzed for quality, bugs, vulnerabilities, and code smells. SonarCloud provides a detailed report to ensure that the application meets high-quality standards throughout the development lifecycle.
The following screenshots display the results from the security test performed using Snyk, a tool designed to identify and mitigate vulnerabilities in application dependencies and code. The test was conducted to ensure the security and integrity of the project, and the results highlight any potential risks that could compromise the application.
One specific issue identified was the presence of hardcoded secrets, which pose a security risk. This issue is being addressed by transitioning to environment variables and secure secrets management practices to enhance the security of the application.
below are all the references for our code attribution: CodexCreator, 2023. Youtube, How to Load Images From URL Using Picasso in Android Studio. [Online] Available at: https://www.youtube.com/watch?v=4o6MGyrKBgg [Accessed 03 October 2024].
CodingTutorials, 2023. Youtube, Google Map in Android Studio | Google Map API Tutorial. [Online] Available at: https://www.youtube.com/watch?v=_gpreGNtNCM [Accessed 04 October 2024].
DevLanding, 2017. Youtube, Android Kotlin MutableList VS List. [Online] Available at: https://www.youtube.com/watch?v=_SgmgA7Kz2g [Accessed 01 October 2024].
EasyCodes, 2023. Youtube ,How to Send Notification in Android. [Online] Available at: https://www.youtube.com/watch?v=vyt20Gg2Ckg [Accessed 01 October 2024].
EasyTutorial, 2024. Youtube, How to Integrate Google Sign In in Android | 2024. [Online] Available at: https://www.youtube.com/watch?v=suVgcrPwYKQ [Accessed 04 October 2024].
Kumar, J., 2017. Youtube, Lambda Function in Android for Click Listeners. [Online] Available at: https://www.youtube.com/watch?v=saZhriuOTqk [Accessed 04 October 2024].
Lackner, P., 2022. Youtube, How to Observe Internet Connectivity in Android - Android Studio Tutorial. [Online] Available at: https://www.youtube.com/watch?v=TzV0oCRDNfM [Accessed 01 October 2024].
Media, G., 2023. Youtube, Credit Card in Kotlin - Android Studio Tutorial | #2023 #kotlintutorial. [Online] Available at: https://www.youtube.com/watch?v=txlvj2o0sGk [Accessed 05 October 2024].
ProgrammerWorld, 2022. Youtube, How to enable “Allow all the time” location permission option for your Android App?. [Online] Available at: https://www.youtube.com/watch?v=IFKsBpblYKw [Accessed 01 October 2024].
Shukert, T., 2023. Youtube, Getting started with Android and Supabase. [Online] Available at: https://www.youtube.com/watch?v=_iXUVJ6HTHU [Accessed 02 October 2024].
SNATech, 2022. Youtube, How to send Android Push Notifications with Firebase Cloud Messaging. [Online] Available at: https://www.youtube.com/watch?v=GDxj8KTmLrI [Accessed 04 October 2024].
TechinalCoding, 2023. Youtube, How to use Date and Time Picker Dialogs in android || Android Studio Tutorial. [Online] Available at: https://www.youtube.com/watch?v=guTycx3L9I4&t=237s [Accessed 04 October 2024]. TechWorld, 2023. Youtubre, SIGN-IN WITH GOOGLE || FIREBASE || ANDROID STUDIO KOTLIN TUTORIAL || STEP BY STEP IMPLEMENTATION. [Online] Available at: https://www.youtube.com/watch?v=H_maapn4Q3Q [Accessed 05 October 2024].