Releases: jmservera/spotbugs-github-action
Releases · jmservera/spotbugs-github-action
v0.2.0-alpha
What's Changed
An effort to generalize the action so it works with Maven, Gradle, etc. and provides a better sarif integration with GitHub.
Enhancements to Input Parameters:
- Added new input parameters in
action.ymlfor greater configurability, includingpackages,outputType,dependenciesPath, andbasePath, along with updates to existing parameters for clarity. - Updated the
runssection inaction.ymlto include environment variables for the new input parameters, ensuring they are passed to the shell script.
Documentation Improvements:
- Expanded the
README.mdwith detailed descriptions of input parameters, usage examples, and a sample workflow configuration for the SpotBugs GitHub Action.
SpotBugs Execution Enhancements:
- Refactored
analyze.shto support additional parameters and improve the SpotBugs execution process, including handling different output formats (sarif,xml,html, etc.), package filtering, and dependency management.
0.1 GitHub Security compatibility
Generalized version:
- Choose between different configurations
- Made SARIF enhancements to help linking the issues to the actual files in GitHub Security
- Tested with Maven + SARIF only
Full Changelog: https://github.com/jmservera/spotbugs-github-action/commits/v0.1.0-alpha