-
I will use this thread to share stats from [SonaType Nexus](https://oss.sonatype.org/#central-stat).
It seems that SpotBugs is not actively used, let's ask community to have a try with SpotBugs.
#…
-
## Environment
| Component | Version |
| ------------------ | ------- |
| Java | 1.8 |
| SpotBugs | 4.5.3.0+ |
| FindSecBugs |1.12 |
## Probl…
-
## Environment
| Component | Version |
| ------------------ | ------- |
| Java | 1.8 |
| SpotBugs | 4.5.3.0+ |
| FindSecBugs |1.12 |
## Probl…
-
What?
Investigate adding more static code analysis (SCA) tools to repos.
Why?
SCA tool scans improve code quality and security, and it give confidence the code in the repo when the community sees suc…
-
```
(node:3767) UnhandledPromiseRejectionWarning: HttpError: Resource not accessible by integration
at /home/runner/work/test-spotbugs/test-spotbugs/bot/node_modules/@octokit/request/dist-node/i…
-
After having switched to Tycho 4, I noticed that the spotbugs plug-in complained about missing classes in the EGit builds:
From https://ci.eclipse.org/egit/job/egit.gerrit/2856/consoleFull :
```
…
-
Is there a way to use a wildcard when specifying exclude files with `` for the spotbugs maven plug-in?
When I was using the findbugs ant task, I could select exclude filter files with the following…
-
Hello, the spotbugs-maven-plugin is working, but adding the FindSecBugs plugin is having no effect. Here is my pom file
``
com.github.spotbugs
spotbugs-maven-plugin
3.1.12.2
…
-
Instead of bundling a fixed version of Spotbugs, the Spotbugs IntelliJ plugin should be able to pickup the Spotbugs implementation from the current Gradle/Maven project. This should be made an option.…
-
```
true
false
${spotbugs.excludeFilterFile}
true
true
false
false
Max
Default
…