SpotBugs supports SARIF that helps integration with other SAST tools
This post shares what the SARIF is, and how to configure SpotBugs to generate SARIF report
Tags: sast, devsecops, spotbugs, java