Skip to content

SpotBugs

SpotBugs is a program which uses static analysis to look for bugs in Java code. SpotBugs is a fork of FindBugs (which is now an abandoned project), carrying on from the point where it left off with support of its community.

Type: Data Flow Analysis (Compiled code)

Supported version: 4.9.7

Disclaimer

This project provides wrappers and scripts to integrate with SpotBugs, but does not include the tool itself. Therefore, you are responsible for reviewing and complying with the product's license and terms of use.

Requirements

  • An existing installation of SpotBugs.

  • An internet connection is required only to download find-sec-bugs plugin.

Key Considerations

The analysis tool is using find-sec-bugs which is license under LGPL-3.0.