Merge pull request #2 from advanced-security/find-files

Find files

Author: aegilops

action.yml

@@ -91,7 +91,8 @@ runs:
         SPOTBUGS_HOME: /home/runner/work/spotbugs+/spotbugs-${{ inputs.spotbugs_version }}
         FINDSECBUGS_HOME: /home/runner/work/findsecbugs+/
       run: |
-        "${SPOTBUGS_HOME}"/bin/spotbugs -textui -quiet -effort:max -low -bugCategories SECURITY -pluginList "${FINDSECBUGS_HOME}"/findsecbugs-plugin-"${INPUT_FINDSECBUGS_VERSION}".jar -sarif=spotbugs.sarif "${INPUT_SPOTBUGS_TARGET}"
+        SPOTBUGS_FILES=$(find "${INPUT_SPOTBUGS_TARGET}" -type f -exec echo -n {} \+)
+        "${SPOTBUGS_HOME}"/bin/spotbugs -textui -quiet -effort:max -low -bugCategories SECURITY -pluginList "${FINDSECBUGS_HOME}"/findsecbugs-plugin-"${INPUT_FINDSECBUGS_VERSION}".jar -sarif=spotbugs.sarif ${SPOTBUGS_FILES}
       shell: bash
     - name: Upload SARIF file
       if: inputs.upload_sarif == 'true'

starter-workflow.yml

@@ -20,7 +20,7 @@ jobs:
         - name: Setup Java
           uses: actions/setup-java@v3
           with:
-            distribution: 'temurin'
+            distribution: 'microsoft'
             java-version: 11
         # do your build steps. This example uses sbt
         - name: Compile with sbt
@@ -30,7 +30,7 @@ jobs:
           uses: advanced-security/spotbugs-findsecbugs-action@v1
           with:
             # set these appropriately for your project
-            spotbugs_target: 'target/scala-*/classes'
+            spotbugs_target: 'target/scala-2.13/classes' # cannot have globs
             # upload_sarif: 'true'
             # no_cache: 'false'
             # spotbugs_version: '4.7.3'