Static code analyse

[svennissel]

• research for a easy way to make static code analyse like findbugs
• We have no central server or budget to buy one.
• Create a initial ruleset
• Documentation for a developer to start code analyse

optional:

• code coverage analyse

[nuessgens]

Did not dig deep in to it: But did you have a look on GitHub Actions?
As I understood correctly this can perform such CI process and we could execute some static code analysis during the maven build. (maybe with spotbugs-maven-plugin)
Furthermore build may fail on failed unit-test.

There is Travis CI, too but as I understood it's not free of charge for open-source-projects (only a free trial available)