jpmorganchase#110 Added FindSecBugs plugin to the SpotBugs report

The SpotBugs report now also reports code security issues identified by the FindSecBugs
jimbethancourt · Jun 14, 2020 · 56aac59 · 56aac59
1 parent ba9b127
commit 56aac59
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/pom.xml b/pom.xml
@@ -465,6 +465,20 @@
                 <groupId>com.github.spotbugs</groupId>
                 <artifactId>spotbugs-maven-plugin</artifactId>
                 <version>${spotbugs.maven.plugin.version}</version>
+                <configuration>
+                    <effort>Max</effort>
+                    <threshold>Low</threshold>
+                    <failOnError>true</failOnError>
+                    <!--<includeFilterFile>${session.executionRootDirectory}/spotbugs-security-include.xml</includeFilterFile>
+                    <excludeFilterFile>${session.executionRootDirectory}/spotbugs-security-exclude.xml</excludeFilterFile>-->
+                    <plugins>
+                        <plugin>
+                            <groupId>com.h3xstream.findsecbugs</groupId>
+                            <artifactId>findsecbugs-plugin</artifactId>
+                            <version>${findsecbugs.plugin.version}</version>
+                        </plugin>
+                    </plugins>
+                </configuration>
             </plugin>
         </plugins>
     </reporting>