This document discusses an AI-driven approach to source code quality evaluation called source code inspection. It aims to reduce technical debt and the costs of maintenance, integration, and license compliance by continuously evaluating source code quality as part of the software development lifecycle. The proposed approach uses machine learning and analytics to classify issues, detect vulnerabilities, analyze dependencies, and provide recommendations to optimize the development process.

1. Source code Inspection
An AI-driven approach to source
code quality evaluation
BI focusing on the efficiency of SDLC
Costas Voliotis
5/13/21
1

2. Source code Inspection
“The ability for engineering teams to deliver high
quality software at velocity is the difference between
companies that gain a competitive edge versus those
that fall behind” Undo CEO, Barry Morris
Today, every company is a software company

3. Source code Inspection
The Source Code Quality? What is this?

4. Source code Inspection
Why we should care about it?

5. Source code Inspection
the sooner the cheaper!

6. Source code Inspection
… quick take-away!

7. Source code Inspection
… we propose an AI-driven process that helps
reduce the technical debt burden
Time, and resources are limited ...

8. Source code Inspection
AI-driven SDLC management
8

9. Source code Inspection
The c2m SQA evaluation process

10. Source code Inspection
… digging a little bit deeper
10
Reduce the cost
maintenance
Reduce the cost of
integration
Improve the defence
against web attacks.
Simplify License
Compliance
resolution
Classify the level of maintenance required per version (Classification)
Reduce the size of code requires maintenance (Clustering)
Optimise and Standardize maintenance process (Rules Based Workflows)
Detect Version Similarities (K-Means-), Suggest Eliminate/Merge of
versions ( Recommendations), Reduce False-Positives, (Learning),
Classify tech stacks (Classification) reduce downtime (Predictive analytics)
Detect Vulnerabilities(Pattern Matching)-Identify Hotspots (Rule based
recommendations). Classify Business Risk (Rule based/Classification)
Identify vulnerabilities based on dependencies (Learning/Matching)
Detect Licenses (Name matching/Pattern Matching), Licenses Resolution
(Rules based recommendations). Classify Business Risk (Rule
based/Classification). Reduce false-positives (Learning)
AI ML

11. Source code Inspection
How does c2m look like? Dashboard view

12. Source code Inspection
Issues distribution-Interactive heatmaps

13. Source code Inspection
Technical Reports and Code Viewer
Web Interface -
visualizes all the
aspects of SW
quality
Code Viewer -
enables detailed
inspection of the
findings

14. Source code Inspection
Our vision:Optimization of the SDLC’s efficiency
Input : dev team alignment +
Continuous SQA
assessment
Process : Federation, SQA
part of CI/CD + Flexibility
Monitoring + Learning
Output : Profitable,
sustainable, flexible, evolving
sw development process
14

15. Source code Inspection
Resources
Code we trust website: https://www.codewetrust.com/
Freemium Server +
CI/CD download page: https://www.codewetrust.com/download
Live demo / test cases : https://www.codewetrust.com/test-cases

16. Source code Inspection
THANK YOU!