spotbugs-exclude.xml

<?xml version="1.0" encoding="UTF-8"?>
<!--
  ~ Copyright (c) 2022, WSO2 LLC. (https://www.wso2.com) All Rights Reserved.
  ~
  ~ WSO2 LLC. licenses this file to you under the Apache License,
  ~ Version 2.0 (the "License"); you may not use this file except
  ~ in compliance with the License.
  ~ You may obtain a copy of the License at
  ~
  ~     http://www.apache.org/licenses/LICENSE-2.0
  ~
  ~ Unless required by applicable law or agreed to in writing,
  ~ software distributed under the License is distributed on an
  ~ "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
  ~ KIND, either express or implied. See the License for the
  ~ specific language governing permissions and limitations
  ~ under the License.
  -->

<FindBugsFilter>
    <!--  WSO2 Carbon Kernel - Launcher [BEGIN] -->
    <Match>
        <Package name="~org\.wso2\.carbon\.launcher.*" />
        <Bug pattern="CRLF_INJECTION_LOGS" />
    </Match>
    <Match>
        <Package name="~org\.wso2\.carbon\.launcher.*" />
        <Bug pattern="PATH_TRAVERSAL_IN" />
    </Match>

    <Match>
        <Class name="org.wso2.carbon.launcher.config.CarbonLaunchConfig" />
        <Bug pattern="URLCONNECTION_SSRF_FD" />
    </Match>

    <!--  WSO2 Carbon Kernel - Launcher [END] -->

    <!--  WSO2 Carbon Kernel - Core [BEGIN] -->
    <Match>
        <Class name="~org\.wso2\.carbon\.kernel.*"/>
        <Bug pattern="CRLF_INJECTION_LOGS"/>
    </Match>

    <Match>
        <Class name="org.wso2.carbon.kernel.internal.utils.Utils" />
        <Bug pattern="PATH_TRAVERSAL_IN" />
    </Match>
    <Match>
        <Class name="org.wso2.carbon.kernel.jmx.connection.SingleAddressRMIServerSocketFactory" />
        <Bug pattern="UNENCRYPTED_SERVER_SOCKET" />
    </Match>
    <Match>
        <!-- False positive reported by SpotBugs -->
        <Class name="org.wso2.carbon.kernel.internal.startupresolver.StartupServiceCache" />
        <Bug pattern="DLS_DEAD_LOCAL_STORE" />
    </Match>
    <Match>
        <!-- False positive reported by SpotBugs -->
        <Class name="org.wso2.carbon.kernel.internal.utils.Utils" />
        <Bug pattern="RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE" />
    </Match>


    <!--  WSO2 Carbon Kernel - Core [END] -->

    <!--  WSO2 Carbon Kernel - Tools - Core [BEGIN] -->

    <Match>
        <Class name="~org\.wso2\.carbon\.tools.*"/>
        <Bug pattern="CRLF_INJECTION_LOGS"/>
    </Match>
    <Match>
        <Package name="~org\.wso2\.carbon\.tools.*" />
        <Bug pattern="PATH_TRAVERSAL_IN" />
    </Match>

    <Match>
        <Class name="org.wso2.carbon.kernel.internal.utils.Utils" />
        <Bug pattern="RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE" />
    </Match>
    <Match>
        <Class name="org.wso2.carbon.tools.InstallJarsTool" />
        <Bug pattern="IMPROPER_UNICODE" />
    </Match>

    <!-- False positives reported by SpotBugs -->
    <Match>
        <Class name="org.wso2.carbon.tools.converter.utils.BundleGeneratorUtils" />
        <Method returns="void" name="createBundle"/>
        <Bug pattern="RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE" />
    </Match>
    <Match>
        <Class name="org.wso2.carbon.tools.converter.utils.BundleGeneratorUtils" />
        <Method returns="void" name="createBundle"/>
        <Bug pattern="RCN_REDUNDANT_NULLCHECK_WOULD_HAVE_BEEN_A_NPE" />
    </Match>
    <Match>
        <Class name="org.wso2.carbon.tools.converter.utils.BundleGeneratorUtils" />
        <Method returns="boolean" name="isOSGiBundle"/>
        <Bug pattern="RCN_REDUNDANT_NULLCHECK_WOULD_HAVE_BEEN_A_NPE" />
    </Match>
    <Match>
        <Class name="org.wso2.carbon.tools.converter.utils.BundleGeneratorUtils" />
        <Method returns="java.util.List" name="listZipFileContent"/>
        <Bug pattern="RCN_REDUNDANT_NULLCHECK_WOULD_HAVE_BEEN_A_NPE" />
    </Match>
    <Match>
        <Class name="org.wso2.carbon.tools.converter.utils.BundleGeneratorUtils" />
        <Method returns="java.util.List" name="listFiles"/>
        <Bug pattern="RCN_REDUNDANT_NULLCHECK_WOULD_HAVE_BEEN_A_NPE" />
    </Match>
    <Match>
        <Class name="org.wso2.carbon.tools.spi.ICFProviderTool" />
        <Method returns="void" name="addBundleActivatorHeader"/>
        <Bug pattern="RCN_REDUNDANT_NULLCHECK_WOULD_HAVE_BEEN_A_NPE" />
    </Match>
    <Match>
        <Class name="org.wso2.carbon.tools.spi.NativeLibraryProvider" />
        <Method returns="void" name="addBundleActivatorHeader"/>
        <Bug pattern="RCN_REDUNDANT_NULLCHECK_WOULD_HAVE_BEEN_A_NPE" />
    </Match>
    <Match>
        <Class name="org.wso2.carbon.tools.spi.SPIProviderTool" />
        <Method returns="void" name="addBundleActivatorHeader"/>
        <Bug pattern="RCN_REDUNDANT_NULLCHECK_WOULD_HAVE_BEEN_A_NPE" />
    </Match>

    <Match>
        <Class name="org.wso2.carbon.tools.spi.ICFProviderTool" />
        <Bug pattern="COMMAND_INJECTION" />
    </Match>
    <Match>
        <Class name="org.wso2.carbon.tools.spi.NativeLibraryProvider" />
        <Bug pattern="COMMAND_INJECTION" />
    </Match>
    <Match>
        <Class name="org.wso2.carbon.tools.spi.SPIProviderTool" />
        <Bug pattern="COMMAND_INJECTION" />
    </Match>

    <!--  WSO2 Carbon Kernel - Tools - Core [END] -->

    <!--  WSO2 Carbon Kernel - Tools - Pax Exam Container [BEGIN] -->

    <Match>
        <Class name="~org\.wso2\.carbon\.container.*"/>
        <Bug pattern="CRLF_INJECTION_LOGS"/>
    </Match>
    <Match>
        <Class name="~org\.wso2\.carbon\.container.*"/>
        <Bug pattern="PATH_TRAVERSAL_IN"/>
    </Match>

    <Match>
        <Class name="org.wso2.carbon.container.ArchiveExtractor" />
        <Bug pattern="URLCONNECTION_SSRF_FD" />
    </Match>
    <Match>
        <Class name="org.wso2.carbon.container.runner.InternalRunner" />
        <Bug pattern="COMMAND_INJECTION" />
    </Match>

    <!--  WSO2 Carbon Kernel - Tools - Pax Exam Container [END] -->
</FindBugsFilter>