infra: add spotbugs to CI to prevent transitive dependency problems f…

…or gradle users checkstyle#14211

.ci/validation.sh

@@ -867,6 +867,20 @@ no-error-htmlunit)
   removeFolderWithProtectedFiles htmlunit
   ;;
 
+no-error-spotbugs)
+  CS_POM_VERSION="$(getCheckstylePomVersion)"
+  echo CS_version: "${CS_POM_VERSION}"
+  mvn -e --no-transfer-progress clean install -Pno-validations
+  echo "Checkout target sources ..."
+  checkout_from https://github.com/spotbugs/spotbugs
+  cd .ci-temp/spotbugs
+  sed -i'' "s/mavenCentral()/mavenLocal(); mavenCentral()/" build.gradle
+  sed -i'' "s/toolVersion.*$/toolVersion '${CS_POM_VERSION}'/" gradle/checkstyle.gradle
+  ./gradlew :eclipsePlugin-junit:checkstyleTest -Dcheckstyle.version="${CS_POM_VERSION}"
+  cd ../
+  removeFolderWithProtectedFiles spotbugs
+  ;;
+
 no-exception-struts)
   CS_POM_VERSION="$(getCheckstylePomVersion)"
   BRANCH=$(git rev-parse --abbrev-ref HEAD)

.circleci/config.yml

@@ -218,6 +218,10 @@ workflows:
           name: "no-error-test-sbe"
           image-name: *cs_img
           command: "./.ci/validation.sh no-error-test-sbe"
+      - validate-with-maven-script:
+          name: "no-error-spotbugs"
+          image-name: *cs_img
+          command: "./.ci/validation.sh no-error-spotbugs"
       - validate-with-maven-script:
           name: "linkcheck-plugin"
           image-name: "cimg/openjdk:11.0.19"