-
As user of Spotbugs, who would like to use the annotation of Spotbugs,
I would like to know the artifact coordinates of the jar containing the annotations,
so that I can include them in my project q…
-
with spotless and a cross platform repository it is not easily possible to enable spotless for all (windows) users.
if a Windows user has `core.autocrlf=false` to disable line end conversion so the…
-
Hi, I get the following error when running the spotbugs-maven-plugin version 4.5.2.0:
[INFO] Fork Value is true
[java] The following errors occurred during analysis:
[java] Error proc…
-
## Issue Description
Since we updated our Sonar to 10.5 our call to `./gradlew sonar` fails.
We can solve the problem by using `-Dsonar.plugins.downloadOnlyRequired=false`.
Its a Kotlin only proj…
-
There are some false positives and negatives of NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE related to various combinations of custom nullables and null checks. One of them is especially nefarious, as it r…
-
This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
## Config Migration Needed
- […
-
-
## WS-2021-0419 - High Severity Vulnerability
Vulnerable Library - gson-2.8.6.jar
Gson JSON library
Library home page: https://github.com/google/gson
Path to dependency file: /packages/aws-sdk/orig/…
-
OI_OPTIONAL_ISSUES_USES_IMMEDIATE_EXECUTION is producing false positives when using static methods which are returning statically initialized fields, like `Collections.emptyList()`.
```
List list …
-
When there is a bug whose location is in an unknown source code filename, and outputting to SARIF, SpotBugs writes an exception to stderr.
Here's an example:
```
java.net.URISyntaxException: Il…