Update action.yml

Author: aegilops

action.yml

@@ -54,27 +54,35 @@ runs:
       env:
         INPUT_SPOTBUGS_VERSION: ${{ inputs.spotbugs_version }}
       run: |
+        cd /home/runner/work/
+        mkdir -p 'spotbugs+'
+        cd 'spotbugs+'
         wget -q https://github.com/spotbugs/spotbugs/releases/download/"${INPUT_SPOTBUGS_VERSION}"/spotbugs-"${INPUT_SPOTBUGS_VERSION}".tgz
         tar -xzf spotbugs-"${INPUT_SPOTBUGS_VERSION}".tgz
+        chmod +x spotbugs-"${INPUT_SPOTBUGS_VERSION}"/bin/spotbugs
         echo "Got spotbugs-${INPUT_SPOTBUGS_VERSION}.tgz"
       shell: bash
     - name: Get FindSecBugs
       if: steps.cache-findsecbugs.outputs.cache-hit != 'true'
       env:
         INPUT_FINDSECBUGS_VERSION: ${{ inputs.findsecbugs_version }}
       run: |
+        cd /home/runner/work/
+        mkdir -p 'findsecbugs+'
+        cd 'findsecbugs+'
         wget -q https://search.maven.org/remotecontent?filepath=com/h3xstream/findsecbugs/findsecbugs-plugin/"${INPUT_FINDSECBUGS_VERSION}"/findsecbugs-plugin-"${INPUT_FINDSECBUGS_VERSION}".jar
         echo "Got findsecbugs-plugin-${INPUT_FINDSECBUGS_VERSION}.jar"
       shell: bash
     - name: Run SpotBugs
       env:
-        INPUT_SPOTBUGS_VERSION: ${{ inputs.spotbugs_version }}
         INPUT_FINDSECBUGS_VERSION: ${{ inputs.findsecbugs_version }}
         INPUT_SPOTBUGS_TARGET: ${{ inputs.spotbugs_target }}
+        SPOTBUGS_HOME: /home/runner/work/spotbugs+/spotbugs-${{ inputs.spotbugs_version }}
+        FINDSECBUGS_HOME: /home/runner/work/findsecbugs+/
       run: |
         find "${INPUT_SPOTBUGS_TARGET}" -type f -name "*.class"
         find "${INPUT_SPOTBUGS_TARGET}" -type f -name "*.jar"
-        bash spotbugs-"${INPUT_SPOTBUGS_VERSION}"/bin/spotbugs -textui -quiet -effort:max -low -bugCategories SECURITY -pluginList findsecbugs-plugin-"${INPUT_FINDSECBUGS_VERSION}".jar -sarif=spotbugs.sarif "${INPUT_SPOTBUGS_TARGET}"
+        "${SPOTBUGS_HOME}"/bin/spotbugs -textui -quiet -effort:max -low -bugCategories SECURITY -pluginList "${FINDSECBUGS_HOME}"/findsecbugs-plugin-"${INPUT_FINDSECBUGS_VERSION}".jar -sarif=spotbugs.sarif "${INPUT_SPOTBUGS_TARGET}"
       shell: bash
     - name: Upload SARIF file
       if: inputs.upload_sarif == 'true'