Add configurable bug_categories input for SpotBugs scanning

README.md

@@ -34,6 +34,9 @@ Then, set up this Action as a step in your Actions workflow, e.g. for a typical
 * `path_prefix`: Add this path prefix to the start of file locations. Required: `false`
 * `base_path`: The base path to use for installing the tools. Default: `/home/runner/work/`
 * `ram`: The RAM to use in MB. Default: `768`
+* `bug_categories`: The bug categories to report (comma-separated). Default: `SECURITY`
+  * Available categories: `SECURITY`, `BAD_PRACTICE`, `CORRECTNESS`, `PERFORMANCE`, `STYLE`, `MT_CORRECTNESS`, `I18N`, `MALICIOUS_CODE`, `EXPERIMENTAL`, `NOISE`
+  * Examples: `SECURITY`, `SECURITY,MALICIOUS_CODE`, `CORRECTNESS,PERFORMANCE,SECURITY`
 
 ## Full sample workflow
 

action.yml

@@ -51,6 +51,10 @@ inputs:
     description: 'The amount of RAM to use for SpotBugs (in MB)'
     required: false
     default: '768'
+  bug_categories:
+    description: 'The bug categories to report (comma-separated). Available categories: SECURITY, BAD_PRACTICE, CORRECTNESS, PERFORMANCE, STYLE, MT_CORRECTNESS, I18N, MALICIOUS_CODE, EXPERIMENTAL, NOISE'
+    required: false
+    default: 'SECURITY'
 
   # Allows for a custom runner home directory to be specified for self-hosted runners
   base_path:
@@ -128,14 +132,15 @@ runs:
         INPUT_SPOTBUGS_TARGET: ${{ inputs.spotbugs_target }}
         INPUT_SPOTBUGS_GLOB: ${{ inputs.spotbugs_filename_glob }}
         INPUT_RAM: ${{ inputs.ram }}
+        INPUT_BUG_CATEGORIES: ${{ inputs.bug_categories }}
         SPOTBUGS_HOME: ${{ inputs.base_path }}/spotbugs+/spotbugs-${{ inputs.spotbugs_version }}
         FINDSECBUGS_HOME: ${{ inputs.base_path }}/findsecbugs+/
         SPOTBUGS_WORKING: ${{ inputs.base_path }}/spotbugs_working+/
       run: |
         mkdir -p "${SPOTBUGS_WORKING}"
         cd "${SPOTBUGS_WORKING}"
         SPOTBUGS_FILES=$(find "${GITHUB_WORKSPACE}/${INPUT_SPOTBUGS_TARGET}" -type f -name "${INPUT_SPOTBUGS_GLOB}" -exec echo -n {} \+)
-        "${SPOTBUGS_HOME}/bin/spotbugs" -maxHeap "${INPUT_RAM}" -textui -quiet -effort:max -low -bugCategories SECURITY -pluginList "${FINDSECBUGS_HOME}/findsecbugs-plugin-${INPUT_FINDSECBUGS_VERSION}.jar" -sarif=spotbugs.sarif ${SPOTBUGS_FILES}
+        "${SPOTBUGS_HOME}/bin/spotbugs" -maxHeap "${INPUT_RAM}" -textui -quiet -effort:max -low -bugCategories "${INPUT_BUG_CATEGORIES}" -pluginList "${FINDSECBUGS_HOME}/findsecbugs-plugin-${INPUT_FINDSECBUGS_VERSION}.jar" -sarif=spotbugs.sarif ${SPOTBUGS_FILES}
       shell: bash
 
     - name: Adjust file paths

starter-workflow.yml

@@ -53,3 +53,4 @@ jobs:
             # java_distribution: 'microsoft'
             # java_version: '11'
             # base_path: "/home/runner/work/"
+            # bug_categories: 'SECURITY' # or 'SECURITY,MALICIOUS_CODE' or 'CORRECTNESS,PERFORMANCE,SECURITY'