Add scan object to report (!52)
Switch to the MIT Expat license
Update logging to be standardized across analyzers (!47)
Add self-signed certificates for java projects
Add COMPILE environment variable to skip project compilation (!42)
Remove `location.dependency` from the generated SAST report (!40)
Bump spotbugs to 4.0.2, glibc to 2.31-r0, zlib to 1.3.11-4, grails to 4.0.3, maven to 3.6.3, sbt to 1.3.10, scala to 2.13.1
Bump SDKMAN to 5.8.1+484, Java 8 to 8.0.252, Java 11 to 11.0.7
Add `id` field to vulnerabilities in JSON report (!33)
Fix bug incorrectly attributing SpotBugs vulnerability to FindSecBugs
Update gradle to 5.6 (!31)
Fixes setting Java 11 after sdkman breaking update (!26)
- update java 8 defined in analyze.go to release 8.0.242 (!25) - update java 11 defined in analyze.go to release 11.0.6 (!25)
update java 8 to release 8.0.242 and 11 to release 11.0.6 (!22)
Fix report JSON compare keys non-uniqueness by including the file path and line information