Checkstyle in ORM is now good to go and enforced in the CI jobs. So I started thinking about FindBugs. We do have FindBugs set up. However it is utterly out of control at the moment. Maybe it's just me, but I find FindBugs impossible to configure "well". Granted I have little experience with it, but Web searches turn up almost nothing on how to configure FindBugs. A few things in particular bug me about FindBugs: 1) Because it works on classes, not sources, it's nearly impossible to succinctly say "ignore generated sources". Would love to be proved wrong there :) 2) I am unsure how to tell FindBugs which rules to run and which to not. I *think* this can be done through its filter files, but I have yet to find a decent doc on doing that. 3) I have no idea how to change the confidence and severity of the things FindBugs reports. I have mentioned the DM_CONVERT_CASE scenario to some of you before. For us that is always a bug but FindBugs treats it with low confidence (maybe a bug, maybe not).
I know PMD covers a lot of the same cases. Anyone familiar with it? lf it is more easily configurable, maybe it fits our needs better... _______________________________________________ hibernate-dev mailing list hibernate-dev@lists.jboss.org https://lists.jboss.org/mailman/listinfo/hibernate-dev
