From c3c12f195022fed5b024d1c014e36f3370119723 Mon Sep 17 00:00:00 2001
From: Abir Majumdar <abirismyname@github.com>
Date: Wed, 27 Oct 2021 15:35:18 -0400
Subject: [PATCH] Adding pmd

---
 code-scanning/pmd.yml                        | 58 ++++++++++++++++++++
 code-scanning/properties/pmd.properties.json | 19 +++++++
 2 files changed, 77 insertions(+)
 create mode 100644 code-scanning/pmd.yml
 create mode 100644 code-scanning/properties/pmd.properties.json

diff --git a/code-scanning/pmd.yml b/code-scanning/pmd.yml
new file mode 100644
index 0000000..69596a4
--- /dev/null
+++ b/code-scanning/pmd.yml
@@ -0,0 +1,58 @@
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
+
+name: pmd
+
+on:
+  push:
+    branches: [ $default-branch, $protected-branches ]
+  pull_request:
+    branches: [ $default-branch ]  
+  schedule:
+    - cron: $cron-weekly
+
+jobs:
+  mobile-security:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v2
+
+      - name: Setup python
+        uses: actions/setup-python@v2
+        with:
+          python-version: 3.8
+
+      - name: Run Full PMD Analysis on Apex Code
+        if: github.event_name == 'push' || github.event_name == 'workflow_dispatch'
+        id: pmd-full-analysis
+        uses: abirismyname/pmd@master
+        with:
+          analyse-all-code: 'true'
+          pmd-version: 'latest'
+          file-path: './src'
+          rules-path: 'rulesets/apex/quickstart.xml'
+
+      # - name: Run Full PMD Analysis on Java Code
+      #   if: github.event_name == 'push' || github.event_name == 'workflow_dispatch'
+      #   id: pmd-full-analysis
+      #   uses: abirismyname/pmd@master
+      #   with:
+      #     analyse-all-code: 'true'
+      #     pmd-version: 'latest'
+      #     file-path: './src'
+      #     rules-path: 'rulesets/java/quickstart.xml'
+
+      - name: Upload pmdscan report
+        uses: github/codeql-action/upload-sarif@v1
+        with:
+          sarif_file: pmd-output.sarif
+
+      - name: No PMD Errors?
+        run: |
+          if ${{ steps.pmd-full-analysis.outputs.error-found }} ${{ steps.pmd-partial-analysis.outputs.error-found }}
+          then
+            exit 3
+          fi          
diff --git a/code-scanning/properties/pmd.properties.json b/code-scanning/properties/pmd.properties.json
new file mode 100644
index 0000000..8608022
--- /dev/null
+++ b/code-scanning/properties/pmd.properties.json
@@ -0,0 +1,19 @@
+{
+    "name": "pmd",
+    "creator": "pmd",
+    "description": "PMD is a static source code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It supports Java, JavaScript, Salesforce.com Apex and Visualforce, Modelica, PLSQL, Apache Velocity, XML, XSL, Scala.",
+    "iconName": "pmd",
+    "categories": [
+        "Code Scanning", 
+        "Java", 
+        "JavaScript", 
+        "Apex", 
+        "Modelica", 
+        "PLSQL", 
+        "Apache Velocity",
+        "XML",
+        "XSl",
+        "Scala", 
+        "Apex"
+    ]
+}
\ No newline at end of file