Skip to content

Commit 8333a50

Browse files
authored
Update README.md
1 parent c472957 commit 8333a50

1 file changed

Lines changed: 4 additions & 0 deletions

File tree

README.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -36,15 +36,19 @@ See [starter-workflow.yml](starter-workflow.yml) for a full sample workflow.
3636
## Q&A
3737

3838
Q: Why is this Action needed?
39+
3940
A: Several SpotBugs plugins are usable in CI/CD and Actions, but don't output SARIF, and they're not available for all JVM languages and build systems.
4041

4142
Q: Why doesn't the Action support setting argument X of SpotBugs?
43+
4244
A: It's a work-in-progress. Please raise an issue or a PR if you need a feature.
4345

4446
Q: Why do the files not resolve in the Code Scanning results?
47+
4548
A: The paths in the Jar or Class file metadata might not match up with the root of the repository. Try using the input `path_prefix`. If two build targets don't share the same prefix, then try running this Action twice, once per target with a different prefix for each.
4649

4750
Q: Why doesn't FindSecBugs find vulnerability X?
51+
4852
A: This Action just wraps those tools. Raise an issue on the [FindSecBugs repo](https://github.com/find-sec-bugs/find-sec-bugs/).
4953

5054
## Requirements

0 commit comments

Comments
 (0)