-
In my [repo](https://github.com/xenoterracide/ai-wh40k/blob/71d80c5da6f36f9794ab2058424c25908f25f252/spotbugs/exclude.xml) I'm trying to exclude for false positive #2552 . If I exclude based on `
-
spotbugs added https://spotbugs.readthedocs.io/en/stable/bugDescriptions.html#ct-constructor-throw, which is an unlikely attack vector that can be mitigated by making classes final.
With bytecode m…
-
First, we build the Spotbugs distribution.
```sh
./gradlew assembleDist
unzip spotbugs/build/distributions/spotbugs-4.0.0-SNAPSHOT.zip
```
If we create an empty class (this bug happens with all c…
-
I have read the issues regarding `Objects.requireNonNull`, so I expected the following to show no errors (using Spotbugs Maven plugin 4.8.4.0 with Spotbugs 4.8.4).
```
package foobar;
import ja…
-
In #471 we added SpotBugs analysis. During development SpotBugs detected one additional error in the GH workflow compared to local testing, this due to different versions of Java being used for the tw…
-
Assuming [JEP 411](https://openjdk.java.net/jeps/411) is accepted, `DoInsideDoPrivileged` will be issuing recommendations to insert API calls which are slated to be officially deprecated and either de…
-
I'm using SpotBugs 3.1.8 via the `spotbugs-maven-plugin` 3.1.8. I'm getting the following error. Unfortunately, this output is with maximum debug/traces turned on. There is no other information. Nothi…
-
>//apply plugin: 'findbugs'
>//task customFindbugs(type: FindBugs) {
>// ignoreFailures = true
>// effort = "max"
>// reportLevel = "low"
>// classes = files("$project.buildDir/interm…
-
Hello,
I am trying out SpotBugs on open-source projects. The actual goal is to test my modifications in the locally SpotBugs, but I am already stuck at running release SpotBugs.
I read several, …
-
We are using [Guava Immutable objects](https://guava.dev/releases/snapshot/api/docs/com/google/common/collect/ImmutableCollection.html) in our project, and from SpotBugs 4.3.0 we have SpotBugs failure…