Dan,

Yes, at the time, the purpose of introducing SpotBugs in that module
was to focus on finding XML-related issues.

We could consider adding SpotBugs to the set of plugins executed for
code compliance, but it would be important to evaluate the performance
and impact. GitHub CodeQL provides some level of problem detection
right now. Similar to the addition of PMD, it will likely require a
careful evaluation of SpotBugs rules and current project conventions.

Regards,
David Handermann

On Fri, Jan 17, 2025 at 10:35 AM Dan S <dsti...@gmail.com> wrote:
>
> I noticed that only the nifi-xml-processing module has a configuration to
> run Spotbugs. Is there a reason it's only run there and not the rest of the
> code base?

Reply via email to