Anant Kurapati

I would recommend using sonar cloud for static code analysis. On Spotbugs [website ](https://spotbugs.readthedocs.io/en/stable/introduction.html) suggest "SpotBugs can scan bytecode (class files) generated by JDK8 and newer versions. However, support for...

As sonarcloud is [free](https://sonarcloud.io/pricing) for public projects, can be explored for this project. Only thing is maintainer has to setup GitHub workflow for sonar cloud. Checkstyle, PMD spotbugs can be...

Sure. I will take it up. Please assign it to me.

@pliakas you go ahead with jacoco changes. I will take up spotbugs and checkstyle. One question everyone, should we add **mvn spotbugs:check** goal after clean install stage? If we add,...

I think this issue has been fixed. Spotbugs and checkstyle related changes are merged . @pliakas has merged changes related jacoco. @pliakas Can we close this issue?

> It looks like @anantk24 hasn't signed our **C**ontributor **L**icense **A**greement, yet. > > > The purpose of a CLA is to ensure that the guardian of a project's outputs...

I agree, this would help determine team ownership, enhancing visibility and accountability. I would like propose in addition to this, Team portfolios can be implemented on UI , to view...

@nscuro please assign it to me. I would like to work on this. I guess, We would need to introduce debug level notification at alpine server module. Please confirm whether...

@nscuro I would like to contribute on above feature. Please assign it to me . - [x] Implement Frontend Component changes for Project Component vue. - [x] Implement Backend API...

This is in reference to https://github.com/DependencyTrack/dependency-track/issues/4471