Static code analysis

The repository come preconfigured for static code analysis by Spotbugs, Checkstyle and CodeQl.

Spotbugs and Checkstyle

Spotbugs and Checkstyle can be run locally by running:

./gradlew static

…and also run as part of the CI GitHub workflow.

They are configured in the Creek common build convention, which can be customised as required.

CodeQl

CodeQl runs against each PR. It runs as a GitHub workflow.