ben-manes / caffeine / #5337

100%

master: 100%

push

github

Improve static analysis coverage and SARIF reporting

Add SARIF output for SpotBugs and PMD, uploading results to GitHub Code
Scanning for centralized visibility alongside CodeQL, Infer, and other
security scanners. Expand Semgrep with security-focused rule packs
(CWE top 25, OWASP top 10, supply chain). Add CodeQL coverage for the
v3.dev branch and Snyk scanning on pull requests.

3859 of 3872 branches covered (99.66%)

7899 of 7912 relevant lines covered (99.84%)

1.0 hits per line