[jira] [Created] (OFBIZ-9973) [FB] Find Security Bugs

[Nicolas Malin (Jira)]

Jacques Le Roux created OFBIZ-9973:
--------------------------------------

             Summary: [FB] Find Security Bugs
                 Key: OFBIZ-9973
                 URL: https://issues.apache.org/jira/browse/OFBIZ-9973
             Project: OFBiz
          Issue Type: Bug
          Components: marketing, product
    Affects Versions: Release Branch 16.11, Trunk
            Reporter: Jacques Le Roux
            Assignee: Jacques Le Roux


I recently [found|https://www.ysofters.com/2015/08/31/taint-analysis-added-to-findbugs/] FindBugs embeds an option [to Find Security Bugs|https://find-sec-bugs.github.io/]:
I have tried this option: https://github.com/find-sec-bugs/find-sec-bugs/wiki/Eclipse-Tutorial

Also later we should remember of OFBIZ-7963 and if possible run this tool in [Builbot using Gradle|https://search.maven.org/#search|gav|1|g:%22com.h3xstream.findsecbugs%22%20AND%20a:%22findsecbugs-plugin%22] (did not check feasibility)



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)