Home

Welcome to the find-sec-bugs wiki! The place where you will find tutorial and Find Security Bugs internals documentation.

📚 IDE Tutorials

Use FindBugs along with your favorite power tool.

• Eclipse Tutorial
• IntelliJ Tutorial
• NetBeans Tutorial
• CLI-Tutorial

🔁 Continuous integration

Scanning once is good. Scanning daily is better.

• Maven configuration
• Gradle configuration
• Jenkins Tutorial
• Sonar Qube Tutorial

Misc configurations

• Custom signatures
• JSP precompilation

🔧 Developers corner

Contributing to FindSecurityBugs

Conventions

• We use white spaces (four per indentation)
• FSB use Oracle Naming Conventions
• We have test cases for every detectors. This allow us be confident that all components are stable moving forward.

Guides

• Project Structure
• Compiling
• Advanced topics
  • Writing a detector
  • Injection detection
• Contributing (pull request with GitHub)