advanced-security/SpotBugs with FindSecBugs
Run SpotBugs with FindSecBugs on your build results, and upload the results to GitHub Code Scanning
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| spotbugs_version | The version of SpotBugs to use | no | 4.7.3 |
| spotbugs_checksum | The SHA256 checksum of the SpotBugs tarball | no | f02e2f1135b23f3edfddb75f64be0491353cfeb567b5a584115aa4fd373d4431 |
| findsecbugs_version | The version of FindSecBugs to use | no | 1.12.0 |
| spotbugs_target | The target directory to run SpotBugs against | no | target/ |
| spotbugs_filename_glob | The filenames to locate for SpotBugs, e.g. *.class, *.jar | — | *.jar |
| upload_sarif | Whether to upload the SARIF file to GitHub Code Scanning | no | true |
| java_distribution | The Java distribution to use | no | microsoft |
| java_version | The Java version to use | no | 11 |
| no_cache | Do not use cached versions of the Spotbugs and FindSecBugs tools | no | false |
| path_prefix | Add this path prefix to the start of file locations | no | — |
| ram | The amount of RAM to use for SpotBugs (in MB) | no | 768 |
| base_path | The home directory of the runner | no | /home/runner/work |
Outputs
no outputs