Gradle support

[henrik242]

How do I integrate spotbugs in Gradle?

[jsotuyod]

Right now SpotBugs has no releases. We plan on making a 3.1.0 release with improved Java 8 support ASAP.

Once released, you will be able to use SpotBugs by using the Gradle FindBugs plugin, and simply swapping FindBugs with SpotBugs by adding to your build.gradle:

configurations {
  findbugs {
    exclude group:'com.google.code.findbugs', module:'findbugs'
  }
}
dependencies {
  findbugs 'com.github.spotbugs:spotbugs:3.1.0'
}

That way you achieve the desired result.

./gradlew -q :commons:dependencies --configuration findbugs

------------------------------------------------------------
Project :commons
------------------------------------------------------------

findbugs - The FindBugs libraries to be used for this project.
\--- com.github.spotbugs:spotbugs:3.1.0

Non the less, we are talking with the Gradle dev team to get official support from them on future Gradle releases.

Once released, we will add these instructions to the website, as stated in #5

[henrik242]

Thanks!

[henrik242]

Since #38 and #39 are fixed, I guess this can be closed

[KengoTODA]

Maybe we can send PR to this package, to add SpotBugs gradle plugin.

• https://github.com/gradle/gradle/tree/master/subprojects/code-quality/src/main/groovy/org/gradle/api/plugins/quality

[jsotuyod]

Maybe, but with findbugs dead they may want to simply rework what they have.

In the meantime, what I wrote for #15 (comment) should work just fine, even for older gradle versions.

[johnscancella]

I tried the suggested change in the #15 (comment)

but it still will not run correctly, here is the error I am seeing in gradle

* What went wrong:
Execution failed for task ':findbugsMain'.
> Unable to infer the version of FindBugs from currently specified FindBugs classpath: [spotbugs-3.1.0-RC1.jar, asm-debug-all-6.0_ALPHA.jar, jcip-annotations-1.0.jar, dom4j-1.6.1.jar, commons-lang-2.6.jar, jaxen-1.1.6.jar, jdepend-2.9.1.jar, jFormatString-3.0.0.jar, spotbugs-annotations-3.1.0-RC1.jar, xml-apis-1.0.b2.jar, jsr305-3.0.1.jar]

[jsotuyod]

@johnscancella mmm... Gradle seems to be really hardwired, I didn't recall them doing this....

It seems we will need a custom plugin until Gradle officially switches after all....

[johnscancella]

@jsotuyod I am happy to provide a pull request for a custom plugin

[KengoTODA]

@johnscancella When you add a custom plugin, please consider to update this document at the same time.
https://github.com/spotbugs/spotbugs/blob/master/docs/migration.rst#findbugs-gradle-plugin

Then we can host updated migration guide at ReadTheDocs.

[jsotuyod]

@johnscancella can't wait for it! Thanks!

[johnscancella]

@jsotuyod see #142
not completely done but it is a good first start. You would still need to sign up for an account from gradle so you can upload the plugin to them.

[jsotuyod]

@johnscancella yeah, don't worry. I already have one as the author of https://github.com/monits/static-code-analysis-plugin.

Amazing job!