CloudBees action: Scan with Find Security Bugs

Use this action to scan a Git repository with Find Security Bugs, a SpotBugs plugin. The Find Security Bugs plugin detects security vulnerabilities in:

• Java web applications.

• Android applications.

• Kotlin, Groovy, and Scala projects.

Inputs

Table 1. Input details

Input name	Data type	Required?	Description
language	String	No	The language of your Git repository code base. Refer to the supported languages below.

Supported languages

Table 2. Supported languages with inputs

Supported language	Input format
Java	LANGUAGE_JAVA

Usage example

In your YAML file, add:

      - name: Scan with Find Security Bugs
        uses: cloudbees-io/findsecbugs-sast-scan-code@v1
        with:
          language: "LANGUAGE_JAVA"

License

This code is made available under the MIT license.

References

• Learn more about using actions in CloudBees workflows.

• Learn about the CloudBees platform.