Update CI to flag any new quality issues
goneall opened this issue · comments
Sonar is run on each pull request, but there is not check to see if it passed.
It would also be nice to run the Java FindBugs and flag any issues on each PR.
spdx / Spdx-Java-Library
Java library which implements the Java object model for SPDX and provides useful helper functions