fix:code check plugin(Checkstyle +PMD+SpotBugs)

.github/scripts/checkstyle-pr.sh

@@ -0,0 +1,207 @@
+#!/bin/bash
+# ============================================================
+# checkstyle-pr.sh - 增量检查（扫描整个变更文件，不过滤行号）
+# 功能：对本次提交中变更的 Java 文件执行完整的 Checkstyle 检查
+# 不阻断构建，生成完整报告
+# ============================================================
+
+set -e
+unset GREP_OPTIONS
+echo "========================================"
+echo "  Checkstyle 增量检查"
+echo "  扫描范围：本次变更的 Java 文件（完整文件）"
+echo "========================================"
+
+# 1. 确定目标分支
+if [ -n "$GITHUB_BASE_REF" ]; then
+    BASE_BRANCH="origin/$GITHUB_BASE_REF"
+elif [ -n "$GITHUB_REF" ] && [ "$GITHUB_EVENT_NAME" == "push" ]; then
+    BASE_BRANCH="HEAD^"
+else
+    if git rev-parse --verify origin/main >/dev/null 2>&1; then
+        BASE_BRANCH="origin/main"
+    elif git rev-parse --verify origin/develop >/dev/null 2>&1; then
+        BASE_BRANCH="origin/develop"
+    else
+        echo "❌ 无法确定目标分支，请设置 BASE_BRANCH 环境变量。"
+        exit 1
+    fi
+    echo "🔍 本地运行模式，对比分支: $BASE_BRANCH"
+fi
+
+# 2. 获取变更的 Java 文件
+if [ "$BASE_BRANCH" == "HEAD^" ]; then
+    CHANGED_FILES=$(git diff --name-only --diff-filter=ACMRT "$BASE_BRANCH" HEAD -- '*.java' 2>/dev/null || true)
+else
+    CHANGED_FILES=$(git diff --name-only --diff-filter=ACMRT "$BASE_BRANCH"...HEAD -- '*.java' 2>/dev/null || true)
+fi
+
+if [ -z "$CHANGED_FILES" ]; then
+    echo "✅ 没有 Java 文件变更，跳过检查。"
+    exit 0
+fi
+
+echo "📝 变更的 Java 文件："
+echo "$CHANGED_FILES"
+echo "----------------------------------------"
+
+# 按模块分组，并把路径转换为 Checkstyle includes 使用的源码相对路径
+declare -A module_files
+for file in $CHANGED_FILES; do
+    module="${file%%/*}"
+    if [ -z "$module" ] || [ "$module" == "$file" ]; then
+        echo "⚠️ 忽略根目录文件: $file"
+        continue
+    fi
+    rel="${file#$module/}"
+    case "$rel" in
+        src/main/java/*)
+            include="${rel#src/main/java/}"
+            ;;
+        src/test/java/*)
+            include="${rel#src/test/java/}"
+            ;;
+        *)
+            echo "⚠️ 跳过非源码目录 Java 文件: $file"
+            continue
+            ;;
+    esac
+    if [ -z "${module_files[$module]}" ]; then
+        module_files[$module]="$include"
+    else
+        module_files[$module]="${module_files[$module]},$include"
+    fi
+done
+
+if [ ${#module_files[@]} -eq 0 ]; then
+    echo "⚠️ 没有识别到任何模块，跳过检查。"
+    exit 0
+fi
+
+echo "📝 按模块分组后的相对路径："
+for module in "${!module_files[@]}"; do
+    echo "  $module: ${module_files[$module]}"
+done
+echo "----------------------------------------"
+
+total_violations=0
+execution_failures=0
+
+# 对每个模块执行 Checkstyle
+for module in "${!module_files[@]}"; do
+    file_list="${module_files[$module]}"
+    report_file="$module/target/checkstyle-result.xml"
+    echo "🚀 扫描模块: $module"
+    echo "   文件列表: $file_list"
+
+    if [ ! -d "$module" ] || [ ! -f "$module/pom.xml" ]; then
+        echo "⚠️ 模块目录 $module 不存在或没有 pom.xml，跳过。"
+        continue
+    fi
+
+    echo "   - 运行 Checkstyle 检查（增量扫描）..."
+    echo "$file_list"
+    set +e
+    PROJECT_ROOT=$(pwd)
+    rm -f "$report_file"
+    output=$(cd "$module" && \
+        echo "   Current directory: $(pwd)" && \
+        echo "   Checking file existence:" && \
+        IFS=',' read -ra includes <<< "$file_list" && \
+        for include in "${includes[@]}"; do \
+            if [ -f "src/main/java/$include" ]; then \
+                ls -l "src/main/java/$include"; \
+            elif [ -f "src/test/java/$include" ]; then \
+                ls -l "src/test/java/$include"; \
+            else \
+                echo "   ⚠️  not found: $include"; \
+            fi; \
+        done && \
+        mvn checkstyle:check \
+            -Dcheckstyle.config.location="$PROJECT_ROOT/checkstyle/code-check-checkstyle.xml" \
+            -Dcheckstyle.violationSeverity=warning \
+            -Dcheckstyle.outputFormat=xml \
+            -Dcheckstyle.includes="$file_list" 2>&1 )
+    mvn_exit=$?
+    if [ $mvn_exit -ne 0 ]; then
+        echo "   ⚠️ 模块 $module 的 Checkstyle 检查失败（但继续）"
+    fi
+    set -e
+    echo "$output"
+
+    # 从 XML 报告中统计违规数，比解析 Maven 日志更稳定
+    if [ -f "$report_file" ]; then
+        count=$(grep -c -- '<error ' "$report_file" 2>/dev/null || true)
+    else
+        count=0
+    fi
+    total_violations=$((total_violations + count))
+    echo "   模块 $module 违规数: $count"
+
+    if [ $mvn_exit -ne 0 ] && [ "$count" -eq 0 ]; then
+        echo "   ❌ 模块 $module 的 Checkstyle 执行失败，且未生成可解析的违规报告。"
+        execution_failures=$((execution_failures + 1))
+    fi
+
+    # （可选）生成 HTML 报告供人工查看
+    echo "   - 生成 HTML 报告（可选）..."
+    set +e
+    (cd "$module" && mvn checkstyle:checkstyle \
+        -Dcheckstyle.config.location="$PROJECT_ROOT/checkstyle/code-check-checkstyle.xml" \
+        -Dcheckstyle.includes="$file_list" \
+        -Dcheckstyle.violationSeverity=warning) > /dev/null 2>&1
+    set -e
+    echo ""
+done
+
+# 汇总输出
+echo "----------------------------------------"
+if [ $total_violations -eq 0 ]; then
+    echo "✅ 所有变更文件未发现违规！"
+else
+    echo "⚠️ 总计发现 $total_violations 个违规。"
+    echo ""
+    echo "📋 违规摘要（前 30 条）："
+    for module in "${!module_files[@]}"; do
+        report_file="$module/target/checkstyle-result.xml"
+        if [ -f "$report_file" ] && grep -q -- '<error' "$report_file" 2>/dev/null; then
+            grep -- '<error' "$report_file" 2>/dev/null | head -30 | sed 's/<error //; s/\/>//' | \
+                sed 's|line="|行号: |g; s|column="|列: |g; s|severity="|严重性: |g; s|message="|信息: |g; s|source="||g' | \
+                while read -r line; do
+                    echo "  $line"
+                done || true
+            break
+        fi
+    done
+fi
+
+# Step Summary
+if [ -n "$GITHUB_STEP_SUMMARY" ]; then
+    {
+        echo "## 📋 Checkstyle 汇总报告"
+        echo ""
+        echo "| 指标 | 结果 |"
+        echo "|------|------|"
+        if [ $total_violations -eq 0 ]; then
+            echo "| 总违规数 | ✅ **0** |"
+        else
+            echo "| 总违规数 | ⚠️ **$total_violations** |"
+        fi
+        echo "| 执行失败模块数 | $execution_failures |"
+        echo "| 涉及模块 | ${!module_files[*]} |"
+        echo ""
+        echo "📥 完整报告已作为 Artifact 上传。"
+    } >> "$GITHUB_STEP_SUMMARY"
+fi
+
+# 根据违规数决定退出码
+if [ $total_violations -eq 0 ] && [ $execution_failures -eq 0 ]; then
+    echo "✅ 检查通过，构建成功。"
+    exit 0
+elif [ $execution_failures -ne 0 ]; then
+    echo "❌ 有 $execution_failures 个模块 Checkstyle 执行失败，构建失败。"
+    exit 1
+else
+    echo "❌ 发现 $total_violations 个违规，构建失败。"
+    exit 1
+fi

.github/scripts/pmd-pr.sh

@@ -0,0 +1,163 @@
+#!/bin/bash
+# ============================================================
+# pmd-pr.sh - PMD 增量扫描脚本
+# 功能：只扫描本次提交中变更且仍存在的 Java 文件
+# 报告：target/pmd-report.xml、target/pmd-report.html
+# ============================================================
+
+set -euo pipefail
+
+echo "========================================"
+echo "  PMD 增量扫描"
+echo "  扫描范围：本次变更的 Java 文件"
+echo "========================================"
+
+# 1. 确定目标分支
+if [ -n "${GITHUB_BASE_REF:-}" ]; then
+    BASE_BRANCH="origin/$GITHUB_BASE_REF"
+elif [ -n "${GITHUB_REF:-}" ] && [ "${GITHUB_EVENT_NAME:-}" == "push" ]; then
+    BASE_BRANCH="HEAD^"
+else
+    if git rev-parse --verify origin/main >/dev/null 2>&1; then
+        BASE_BRANCH="origin/main"
+    elif git rev-parse --verify origin/develop >/dev/null 2>&1; then
+        BASE_BRANCH="origin/develop"
+    else
+        echo "❌ 无法确定目标分支，请设置 BASE_BRANCH 环境变量。"
+        exit 1
+    fi
+    echo "🔍 本地运行模式，对比分支: $BASE_BRANCH"
+fi
+
+# 2. 获取变更的 Java 文件
+if [ "$BASE_BRANCH" == "HEAD^" ]; then
+    CHANGED_FILES=$(git diff --name-only --diff-filter=ACMRT "$BASE_BRANCH" HEAD -- '*.java' 2>/dev/null || true)
+else
+    CHANGED_FILES=$(git diff --name-only --diff-filter=ACMRT "$BASE_BRANCH"...HEAD -- '*.java' 2>/dev/null || true)
+fi
+
+if [ -z "$CHANGED_FILES" ]; then
+    echo "✅ 没有 Java 文件变更，跳过 PMD 扫描。"
+    exit 0
+fi
+
+echo "📝 变更的 Java 文件："
+echo "$CHANGED_FILES"
+echo "----------------------------------------"
+
+# 3. 生成文件列表（绝对路径），跳过已删除文件
+PROJECT_ROOT=$(pwd)
+mkdir -p target
+FILE_LIST="target/pmd-changed-files.txt"
+REPORT_FILE="target/pmd-report.xml"
+HTML_REPORT_FILE="target/pmd-report.html"
+> "$FILE_LIST"
+rm -f "$REPORT_FILE" "$HTML_REPORT_FILE"
+
+scan_count=0
+for file in $CHANGED_FILES; do
+    if [ ! -f "$file" ]; then
+        echo "⚠️ 跳过不存在的文件: $file"
+        continue
+    fi
+
+    echo "$PROJECT_ROOT/$file" >> "$FILE_LIST"
+    scan_count=$((scan_count + 1))
+done
+
+if [ "$scan_count" -eq 0 ]; then
+    echo "✅ 没有需要 PMD 扫描的现存 Java 文件。"
+    rm -f "$FILE_LIST"
+    exit 0
+fi
+
+echo "📄 PMD 文件列表：$FILE_LIST"
+cat "$FILE_LIST"
+echo "----------------------------------------"
+
+# 4. 准备 PMD（如果未安装）
+PMD_VERSION="${PMD_VERSION:-6.55.0}"
+PMD_HOME="${PMD_HOME:-target/pmd-bin-$PMD_VERSION}"
+PMD_ZIP="target/pmd-bin-$PMD_VERSION.zip"
+PMD_RULESETS="${PMD_RULESETS:-category/java/bestpractices.xml,category/java/codestyle.xml,category/java/design.xml,category/java/errorprone.xml,category/java/performance.xml,category/java/security.xml}"
+
+if [ ! -x "$PMD_HOME/bin/run.sh" ]; then
+    echo "⬇️ 下载 PMD $PMD_VERSION ..."
+    rm -rf "$PMD_HOME" "$PMD_ZIP" "target/pmd-bin-$PMD_VERSION"
+    curl -fsSL "https://github.com/pmd/pmd/releases/download/pmd_releases%2F${PMD_VERSION}/pmd-bin-${PMD_VERSION}.zip" -o "$PMD_ZIP"
+    unzip -q "$PMD_ZIP" -d target
+    rm -f "$PMD_ZIP"
+fi
+
+PMD_CMD="$PMD_HOME/bin/run.sh"
+chmod +x "$PMD_CMD"
+
+# 5. 执行 PMD 扫描（使用 filelist）
+echo "🚀 执行 PMD 扫描..."
+set +e
+"$PMD_CMD" pmd --no-cache \
+    -filelist "$FILE_LIST" \
+    -f xml \
+    -R "$PMD_RULESETS" \
+    -r "$REPORT_FILE"
+pmd_exit=$?
+set -e
+
+# 6. 统计违规数
+if [ -f "$REPORT_FILE" ]; then
+    violations=$(grep -c -- '<violation ' "$REPORT_FILE" 2>/dev/null || true)
+    echo "✅ PMD 报告已生成：$REPORT_FILE"
+else
+    violations=0
+    echo "⚠️ PMD 未生成报告。"
+fi
+
+# 7. 生成 PMD HTML 可视化报告
+echo "🖼️ 生成 PMD HTML 报告..."
+set +e
+"$PMD_CMD" pmd --no-cache \
+    -filelist "$FILE_LIST" \
+    -f html \
+    -R "$PMD_RULESETS" \
+    -r "$HTML_REPORT_FILE"
+pmd_html_exit=$?
+set -e
+
+if [ -f "$HTML_REPORT_FILE" ]; then
+    echo "✅ PMD HTML 报告已生成：$HTML_REPORT_FILE"
+else
+    echo "⚠️ PMD HTML 报告未生成。"
+fi
+
+rm -f "$FILE_LIST"
+
+if [ -n "${GITHUB_STEP_SUMMARY:-}" ]; then
+    {
+        echo "## PMD 增量扫描"
+        echo ""
+        echo "| 指标 | 结果 |"
+        echo "|------|------|"
+        echo "| 扫描文件数 | $scan_count |"
+        echo "| 违规数 | $violations |"
+        echo "| XML 报告 | $REPORT_FILE |"
+        echo "| HTML 报告 | $HTML_REPORT_FILE |"
+    } >> "$GITHUB_STEP_SUMMARY"
+fi
+
+if [ "$violations" -gt 0 ]; then
+    echo "❌ PMD 发现 $violations 个问题，构建失败。"
+    exit 1
+fi
+
+if [ "$pmd_exit" -ne 0 ]; then
+    echo "❌ PMD 执行失败，退出码: $pmd_exit"
+    exit "$pmd_exit"
+fi
+
+if [ "$pmd_html_exit" -ne 0 ]; then
+    echo "❌ PMD HTML 报告生成失败，退出码: $pmd_html_exit"
+    exit "$pmd_html_exit"
+fi
+
+echo "✅ PMD 未发现问题。"
+exit 0