Add ssdlc-report.sh that uses SpotBugs to create SARIF files (#1401)

In the future this script may do more work for us.

JAVA-5431

Author: stIncMale

.evergreen/ssdlc-report.sh

@@ -0,0 +1,15 @@
+#!/bin/bash
+
+set -o errexit
+
+############################################
+#            Main Program                  #
+############################################
+RELATIVE_DIR_PATH="$(dirname "${BASH_SOURCE[0]:-$0}")"
+source "${RELATIVE_DIR_PATH}/javaConfig.bash"
+
+echo "Creating SSLDC reports"
+./gradlew -version
+./gradlew -PssdlcReport.enabled=true --continue -x test -x integrationTest -x spotlessApply clean check scalaCheck kotlinCheck testClasses || true
+echo "SpotBugs created the following SARIF files"
+find . -path "*/spotbugs/*.sarif"

build.gradle

@@ -338,7 +338,9 @@ configure(javaCodeCheckedProjects) {
     }
 
     spotbugs {
-        excludeFilter = new File(configDir, 'spotbugs/exclude.xml')
+        if (!project.buildingWith('ssdlcReport.enabled')) {
+            excludeFilter = new File(configDir, 'spotbugs/exclude.xml')
+        }
     }
 
     codenarc {
@@ -350,6 +352,7 @@ configure(javaCodeCheckedProjects) {
         reports {
             xml.enabled = project.buildingWith('xmlReports.enabled')
             html.enabled = !project.buildingWith('xmlReports.enabled')
+            sarif.enabled = project.buildingWith('ssdlcReport.enabled')
         }
     }