chore: configure SpotBugs plugin find-sec-bugs

vil02 · vil02 · commit ce244cc617e0 · 2024-05-07T07:43:29.000+02:00
diff --git a/pom.xml b/pom.xml
@@ -127,6 +127,11 @@
                             <artifactId>fb-contrib</artifactId>
                             <version>7.6.4</version>
                         </plugin>
+                        <plugin>
+                            <groupId>com.h3xstream.findsecbugs</groupId>
+                            <artifactId>findsecbugs-plugin</artifactId>
+                            <version>1.13.0</version>
+                        </plugin>
                     </plugins>
                 </configuration>
             </plugin>
diff --git a/spotbugs-exclude.xml b/spotbugs-exclude.xml
@@ -282,4 +282,14 @@
     <Match>
         <Bug pattern="SPP_TOSTRING_ON_STRING" />
     </Match>
+    <!-- find-sec-bugs -->
+    <Match>
+        <Bug pattern="PREDICTABLE_RANDOM" />
+    </Match>
+    <Match>
+        <Bug pattern="HARD_CODE_KEY" />
+    </Match>
+    <Match>
+        <Bug pattern="PATH_TRAVERSAL_IN" />
+    </Match>
 </FindBugsFilter>
