search

spotbugs / discuss

SpotBugs mailing list
6 stars 1 forks source link

Running Spotbugs On Java Libraries Question #70

Closed danmartinj closed 3 years ago

danmartinj commented 5 years ago

Hello,

First forgive my noob question as I do not know where else to turn for my question. Anyhow, I am working with a Java application where I do not have the actual source code. I do have directories with several shared libraries and I am contemplating trying to decompile the java apps. My main goal is to find a tool that can list security vulnerabilities. Would this tool be a good fit for me?

Thanks for any advice or comments,

Joe

KengoTODA commented 5 years ago

https://find-sec-bugs.github.io/ is a good choice. It is a SpotBugs plugin that parses .class files.

https://spotbugs.readthedocs.io/en/stable/ is the official document of SpotBugs, read it to grasp how to use SpotBugs and its plugin.

KengoTODA commented 3 years ago

I'll close this inactive issue. Please repost a new one if necessary.