spotbugs-exclude.xml

<?xml version="1.0" encoding="UTF-8"?>
<FindBugsFilter
   xmlns="https://github.com/spotbugs/filter/3.0.0"
   xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
   xsi:schemaLocation="https://github.com/spotbugs/filter/3.0.0 https://raw.githubusercontent.com/spotbugs/spotbugs/3.1.0/spotbugs/etc/findbugsfilter.xsd">
   <Match>
     <!-- Ignore all generated classes -->
     <Or>
       <Package name="~com\.apigee\.security\.oas\..*" />
       <Package name="com.apigee.security.oas" />
     </Or>
   </Match>
   <Match>
     <Or>
       <!-- Does not play well with @Setup methods. -->
       <Bug pattern="SE_TRANSIENT_FIELD_NOT_RESTORED" />

       <!-- This pattern is not really appropriate in Dataflow
       or when working with annotation processors. -->
       <Bug pattern="UMAC_UNCALLABLE_METHOD_OF_ANONYMOUS_CLASS" />

       <!-- Relying on errorprone's instead as it's more robust. -->
       <Bug pattern="NP_NONNULL_RETURN_VIOLATION" />

       <!-- This does not play nicely with the google-style builders. -->
       <Bug pattern="RCN_REDUNDANT_NULLCHECK_WOULD_HAVE_BEEN_A_NPE" />
     </Or>
   </Match>
   <Match>
     <!-- Within Dataflow Projects -->
     <Package name="~com\.apigee\.security\.oas\..*" />
     <Or>
       <!-- Spotbugs thinks Serializable Functions are inner classes and gets very confused. -->
       <Bug pattern="SE_INNER_CLASS" />
       <Bug pattern="SIC_INNER_SHOULD_BE_STATIC_ANON" />
     </Or>
   </Match>
   <Match>
     <!-- Ignore matches in test classes except for those relating to tests. -->
     <Class name="~.*\.*Test" />
     <Not>
       <Bug code="IJU" />
     </Not>
   </Match>
</FindBugsFilter>