StigSetupAnalyzerTask
Explicit pre-warm / build of the stig-code-analyzer binary on the host machine. Wraps StigCodeAnalyzerInstaller.installAndResolve — idempotent; re-running with unchanged source is cheap (cache hit returns immediately).
Builds only — it assumes the OS toolchain is already installed (run StigInstallDepsTask / stigInstallDeps, or scripts/setup.sh, first). Use this to build up-front (CI pipelines that want to surface build errors before analysis). P6 also uses this task before Gradle fingerprints its executable input; an unchanged installation does not rebuild the analyzer.
Properties
Shared installation location, prepared by this task and content-tracked by P6. The composite native build owns the executable output, not this verification task.
Required provenance when the analyzer is produced by an included STIG build.
Gradle tracks the resolved native artifact even when its Maven version is a mutable SNAPSHOT.
Produced after setup; consumers fingerprint the listed library bytes, not this path alone.
The analyzer version (axion) — cache key + baked into the binary.