bump version #18
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: SpotBugs Analysis | |
| on: | |
| push: | |
| jobs: | |
| security: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| security-events: write | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v3 | |
| with: | |
| fetch-depth: 0 | |
| - name: Set up JDK 21 | |
| uses: actions/setup-java@v3 | |
| with: | |
| java-version: '21' | |
| distribution: 'temurin' | |
| cache: 'gradle' | |
| - name: Grant execute permission for gradlew | |
| run: chmod +x gradlew | |
| - name: Run SpotBugs with SARIF output | |
| run: | | |
| ./gradlew spotbugsMain --info | |
| ./gradlew spotlessCheck | |
| continue-on-error: true | |
| - name: Upload reports | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: reports | |
| path: reports | |
| - name: List files in reports directory | |
| run: find reports -type f | sort | |
| - name: Upload SpotBugs SARIF file | |
| uses: github/codeql-action/upload-sarif@v3 | |
| with: | |
| sarif_file: reports/spotbugs/spotbugsMain.sarif | |
| category: spotbugs |