hashgraph / hedera-services

Crypto, token, consensus, file, and smart contract services for the Hedera public ledger
Apache License 2.0
310 stars 136 forks source link

SpotBugs reports in GH-Action #14887

Open alex-kuzmin-hg opened 2 months ago

alex-kuzmin-hg commented 2 months ago

Problem

There are example finding bu Java analyzer that must be integrated into GH-action

Solution

I'm suggesting SpotBugs: spotbugs -textui -workHard -effort:max -exclude exclude.xml -progress -html -output reportNew.html -debug find hedera-node/data/lib hedera-node/data/apps -type f \( -iname 'app-*.jar' -o -iname '*hedera*.jar' -o -iname 'hapi*.jar' -o -iname '*pbj*.jar' -o -iname '*swirlds*.jar' \) -a ! -name '*-javadoc.jar' -a ! -name '*-sources.jar'

and attached fine-tuned exclude.xml ### Alternatives _No response_
alex-kuzmin-hg commented 2 months ago

exclude.xml.zip image

alex-kuzmin-hg commented 2 months ago

.. with attached exclude.xml temaplte the number of warnings is <500