Skip to content

Releases: jmservera/spotbugs-github-action

v0.2.0-alpha

Choose a tag to compare

@jmservera jmservera released this 26 Oct 13:39
7864e7a

What's Changed

An effort to generalize the action so it works with Maven, Gradle, etc. and provides a better sarif integration with GitHub.

Enhancements to Input Parameters:

  • Added new input parameters in action.yml for greater configurability, including packages, outputType, dependenciesPath, and basePath, along with updates to existing parameters for clarity.
  • Updated the runs section in action.yml to include environment variables for the new input parameters, ensuring they are passed to the shell script.

Documentation Improvements:

  • Expanded the README.md with detailed descriptions of input parameters, usage examples, and a sample workflow configuration for the SpotBugs GitHub Action.

SpotBugs Execution Enhancements:

  • Refactored analyze.sh to support additional parameters and improve the SpotBugs execution process, including handling different output formats (sarif, xml, html, etc.), package filtering, and dependency management.

0.1 GitHub Security compatibility

Pre-release

Choose a tag to compare

@jmservera jmservera released this 21 Oct 07:39

Generalized version:

  • Choose between different configurations
  • Made SARIF enhancements to help linking the issues to the actual files in GitHub Security
  • Tested with Maven + SARIF only

Full Changelog: https://github.com/jmservera/spotbugs-github-action/commits/v0.1.0-alpha