Add qodana CI checks

[qodana-cloud]

Adds qodana.yaml and GitHub workflow file that runs Qodana static analysis on each pull request.

[github-actions]

Qodana for JVM

101 new problems were found

Inspection name	Severity	Problems
Incorrect autowiring in Spring bean components	🔴 Failure	1
Vulnerable declared dependency	🔴 Failure	1
Unused import	🔶 Warning	54
Unused assignment	🔶 Warning	8
Lombok @Getter may be used	🔶 Warning	7
Vulnerable declared dependency	🔶 Warning	5
Lombok @Setter may be used	🔶 Warning	4
Call to 'Arrays.asList()' with too few arguments	🔶 Warning	2
Field can be local	🔶 Warning	2
'size() == 0' can be replaced with 'isEmpty()'	🔶 Warning	2
AutoCloseable used without 'try'-with-resources	🔶 Warning	1
Nullability and data flow problems	🔶 Warning	1
Default annotation parameter value	🔶 Warning	1
Statement with empty body	🔶 Warning	1
Field may be 'final'	🔶 Warning	1
Redundant 'Collection' operation	🔶 Warning	1
'StringBuilder' can be replaced with 'String'	🔶 Warning	1
Unnecessary call to 'toString()'	🔶 Warning	1
Vulnerable declared dependency	◽️ Notice	4
Method can be extracted	◽️ Notice	3

☁️ View the detailed Qodana report

Detected 109 dependencies

Third-party software list

This page lists the third-party software dependencies used in project

Dependency	Version	Licenses
angus-activation	2.0.2	BSD-3-Clause
angus-mail	2.0.3	Classpath-exception-2.0 EPL-2.0 GPL-2.0-only
apache-mime4j-core	0.8.9	Apache-2.0
apache-mime4j-dom	0.8.9	Apache-2.0
apache-mime4j-storage	0.8.9	Apache-2.0
aspectjweaver	1.9.21	Apache-2.0
asyncutil	0.1.0	Apache-2.0
btf	1.3	Apache-2.0 LGPL-2.0-or-later
byte-buddy	1.14.12	Apache-2.0
classmate	1.6.0	Apache-2.0
codemodel	4.0.5	BSD-3-Clause
commons-codec	1.16.1	Apache-2.0
commons-io	2.11.0	Apache-2.0
commons-lang3	3.13.0	Apache-2.0
commons-logging	1.2	Apache-2.0
hikaricp	5.0.1	Apache-2.0
httpclient	4.5.14	Apache-2.0
httpcore	4.4.16	Apache-2.0
istack-commons-runtime	4.1.2	BSD-3-Clause
istack-commons-tools	4.1.2	BSD-3-Clause
jackson-annotations	2.15.4	Apache-2.0
jackson-core	2.15.4	Apache-2.0
jackson-coreutils	2.0	Apache-2.0 LGPL-2.0-or-later
jackson-databind	2.15.4	Apache-2.0
jackson-dataformat-yaml	2.15.4	AML
jackson-datatype-jdk8	2.15.4	Apache-2.0
jackson-datatype-jsr310	2.15.4	Apache-2.0
jackson-jakarta-rs-base	2.15.4	Apache-2.0
jackson-jakarta-rs-json-provider	2.15.4	Apache-2.0
jackson-module-jakarta-xmlbind-annotations	2.15.4	Apache-2.0
jackson-module-parameter-names	2.15.4	Apache-2.0
jakarta.activation-api	2.1.3	BSD-3-Clause
jakarta.annotation-api	2.1.1	Classpath-exception-2.0 EPL-2.0 GPL-2.0-only
jakarta.inject-api	2.0.1	Apache-2.0
jakarta.mail-api	2.1.3	Classpath-exception-2.0 EPL-2.0 GPL-2.0-only
jakarta.mail	2.0.3	Classpath-exception-2.0 EPL-2.0 GPL-2.0-only
jakarta.persistence-api	3.1.0	BSD-3-Clause EPL-2.0
jakarta.transaction-api	2.0.1	Classpath-exception-2.0 EPL-2.0 GPL-2.0-only
jakarta.validation-api	3.0.2	Apache-2.0
jakarta.ws.rs-api	3.1.0	Classpath-exception-2.0 EPL-2.0 GPL-2.0-only
jakarta.xml.bind-api	4.0.2	BSD-3-Clause
jandex	2.4.3.final	Apache-2.0
jaxb-core	4.0.5	BSD-3-Clause
jaxb-jxc	4.0.5	BSD-3-Clause
jaxb-runtime	4.0.5	BSD-3-Clause
jaxb-xjc	4.0.5	BSD-3-Clause
jboss-logging	3.5.3.final	Apache-2.0
jcip-annotations	1.0-1	Apache-2.0
json-patch	1.13	Apache-2.0 LGPL-2.0-or-later
jul-to-slf4j	2.0.12	MIT
keycloak-crypto-default	22.0.5	Apache-2.0
keycloak-server-spi	22.0.5	Apache-2.0
keycloak-spring-boot-2-adapter	22.0.5	Apache-2.0
keycloak-spring-boot-adapter-core	22.0.5	Apache-2.0
keycloak-spring-security-adapter	22.0.5	Apache-2.0
log4j-api	2.21.1	Apache-2.0
log4j-to-slf4j	2.21.1	Apache-2.0
lombok	1.18.30	BSD-3-CLAUSE-NO-TRADEMARK MIT
micrometer-commons	1.12.4	Apache-2.0
micrometer-observation	1.12.4	Apache-2.0
msg-simple	1.2	Apache-2.0 LGPL-2.0-or-later
mysql-connector-j	8.3.0	EPL-1.0 GPL-2.0-only LGPL-2.1-only
nimbus-jose-jwt	9.24.4	Apache-2.0
relaxng-datatype	4.0.2	BSD-3-Clause
rngom	4.0.2	BSD-3-Clause
slf4j-api	2.0.12	MIT
snakeyaml	2.2	Apache-2.0
spring-aop	6.1.5	Apache-2.0
spring-aspects	6.1.5	Apache-2.0
spring-beans	6.1.5	Apache-2.0
spring-boot-autoconfigure	3.2.4	Apache-2.0
spring-boot-container-bundle	22.0.5	Apache-2.0
spring-boot-starter-aop	3.2.4	Apache-2.0
spring-boot-starter-data-jpa	3.2.4	Apache-2.0
spring-boot-starter-data-mongodb	3.2.4	Apache-2.0
spring-boot-starter-jdbc	3.2.4	Apache-2.0
spring-boot-starter-json	3.2.4	Apache-2.0
spring-boot-starter-logging	3.2.4	Apache-2.0
spring-boot-starter-mail	3.2.4	Apache-2.0
spring-boot-starter-oauth2-resource-server	3.2.4	Apache-2.0
spring-boot-starter-security	3.2.4	Apache-2.0
spring-boot-starter-tomcat	3.2.4	Apache-2.0
spring-boot-starter-web	3.2.4	Apache-2.0
spring-boot-starter	3.2.4	Apache-2.0
spring-boot	3.2.4	Apache-2.0
spring-context-support	6.1.5	Apache-2.0
spring-context	6.1.5	Apache-2.0
spring-core	6.1.5	Apache-2.0
spring-data-commons	3.2.4	Apache-2.0
spring-data-jpa	3.2.4	Apache-2.0
spring-expression	6.1.5	Apache-2.0
spring-jcl	6.1.5	Apache-2.0
spring-jdbc	6.1.5	Apache-2.0
spring-orm	6.1.5	Apache-2.0
spring-tx	6.1.5	Apache-2.0
spring-web	6.1.5	Apache-2.0
spring-webmvc	6.1.5	Apache-2.0
springdoc-openapi-starter-common	2.1.0	Apache-2.0
springdoc-openapi-starter-webmvc-api	2.1.0	Apache-2.0
springdoc-openapi-starter-webmvc-ui	2.1.0	Apache-2.0
swagger-annotations-jakarta	2.2.9	Apache-2.0
swagger-core-jakarta	2.2.9	Apache-2.0
swagger-models-jakarta	2.2.9	Apache-2.0
swagger-ui	4.18.2	Apache-2.0
tomcat-embed-core	10.1.19	Apache-2.0 CDDL-1.0 PROPRIETARY-LICENSE
tomcat-embed-el	10.1.19	Apache-2.0
tomcat-embed-websocket	10.1.19	Apache-2.0
txw2	4.0.5	BSD-3-Clause
xsom	4.0.5	BSD-3-Clause

Contact Qodana team

Contact us at [email protected]

• Or via our issue tracker: https://jb.gg/qodana-issue
• Or share your feedback: https://jb.gg/qodana-discussions