spotbugs / spotbugs-maven-plugin

Maven Mojo Plug-In to generate reports based on the SpotBugs Analyzer
https://spotbugs.github.io/spotbugs-maven-plugin/
Apache License 2.0
79 stars 53 forks source link

Using Detectors from a Repository #920

Closed HelloDhero closed 2 weeks ago

HelloDhero commented 2 weeks ago
<plugin>
  <groupId>com.github.spotbugs</groupId>
  <artifactId>spotbugs-maven-plugin</artifactId>
  <version>XXXX</version>
  <configuration>
    <plugins>
      <plugin>
        <groupId>a</groupId>
        <artifactId>b</artifactId>
        <version>c</version>
      </plugin>
    </plugins>
  </configuration>
</plugin>

Can I use Maven's default method to add plugins, such as the following code

<plugin>
  <groupId>com.github.spotbugs</groupId>
  <artifactId>spotbugs-maven-plugin</artifactId>
  <version>XXXX</version>
  <dependencies>
    <dependency>
      <groupId>a</groupId>
      <artifactId>b</artifactId>
      <version>c</version>
    </dependency>
  </dependencies>
</plugin>

I found that when using org.codehaus.mojo:versions-maven-plugin, I cannot detect version upgrade prompts.

hazendaz commented 2 weeks ago

Its only supported as documented. You cannot use dependencies for this currently. The items are passed onto spotbugs.