There is something I'd like to correct and it is that I use System.exit(1); in some places to exit from #FidoCadJ. #SpotBugs is not very happy about it, but I haven't found an alternative to fix this issue. #Java

I am using #SpotBugs, too. Some of the issues found are insightful, others leave me a little perplexed.

I've wrapped up SpotBugs/FindSecBugs in a bow 🎁 in a GitHub Action, so you can use it in GitHub Code Scanning - free for open source projects, and also available for paid users of GitHub Advanced Security.

SpotBugs and FindSecBugs work with JVM languages - Scala, Java, and Clojure, mainly.

https://github.com/marketplace/actions/spotbugs-with-findsecbugs

Point it at the results of the build, and go.

#GitHub #SAST #Scala #JVM #Clojure #Java #CodeSecurity #SpotBugs #FindSecBugs #DevSecOps #SDLC