Add free and opensource static code analysis tools to a Java 11 spring project (spring-boot 2.4.4) .
Looking for someone who has already done this and is running them on the current project or previous project
will give access to my private project on Github, Its a maven project. need to set up static code analysis to run from a checkCode profile in maven.
Genreally build as
mvn clean install -Dmaven.test.skip=true -Dspring.profiles.active=local
mvn clean install -Dmaven.test.skip=true -Dspring.profiles.active=uat
For static code should use :
mvn clean install -Dmaven.test.skip=true -Dspring.profiles.active=checkCode
* so regular build will be the same as now
Do not have an exhaustive list of plugins but at the very least should run PMD, Deep dive, other open-source tools mentioned in OWASH tools, Wikipedia source code static analysis page: [login to view URL] , [login to view URL] ; [login to view URL]
So looking for one day's work, to be completed by Monday night. Please only bid if you have this working on current projects/ in the last 1 year. I don't want a bg bid, max is $100/- as it should be copy from current to this pom and a few rounds of testing, make sure output reports/ logs are being printed