– Motivation for Clean-Code
– Why We Create Technical Debt
– Good Code vs. Bad Code
– Writing Code for Humans

– Test-Driven Development (TDD)
– Behaviour-Driven Development (BDD)
– Junit, TestNG and Cucumber

– Control and Data Flow Analysis
– Call Graphs
– Information Architecture

– CPU Usage
– Memory Allocation (Pointers, Wild Pointers, Garbage Collectors)
– Performance Profiling

– Indentation, Nesting, Branches
– Decisions, Conditions
– Code Complexity, Cyclomatic Complexity
– Code Style Guide
– Comment Frequency
– Line Length, Declarations, Naming Conventions
– Cohesion, Coupling, Modularity

– Authentication, Authorization
– Session Management, Data Handling
– Error Handling, Logging
– Encryption

– Establishing Review Objectives
– Source Code Review Approaches
– Duration, Scope, Lines of Code
– Code Review Process
– Infinite Loops, Repeated Code, Unreachable Code, Variable Definitions

– Statement Testing
– Decision Testing
– Branch Testing
– Condition Testing
– Decision/Condition Testing
– Modified Condition/Decision Coverage
– Multiple Condition Testing

– Continuous Integration in Nutshell
– Delivery Pipeline
– Static & Dynamic Analysis in Pipeline

– Beautifier (Coding Standards)
– Beyond Compare (Comparators)
– SonarQube, CAST (Code Quality)
– HP Fortify, IBM Security Appscan, OWASP (Security Analysis)
– VeraCode, Parasoft Insure++ (Dynamic Analysis)