spotbugs-filter.xml

<?xml version="1.0" encoding="UTF-8"?>
<FindBugsFilter>
  <!-- False positive: Null pointer dereference. -->
  <Match>
    <Bug code="NP" />
  </Match>
  <!-- False positive in java 11: Redundant nullcheck of value known to be non-null. -->
  <Match>
    <Bug code="RCN" />
  </Match>
  <!-- False positive: Random object created and used only once. -->
  <Match>
    <Bug pattern="DMI_RANDOM_USED_ONLY_ONCE"/>
  </Match>
  <!-- False positive in many cases: May expose internal representation by returning reference to mutable object. -->
  <Match>
    <Bug pattern="EI_EXPOSE_REP"/>
  </Match>
  <!-- False positive in many cases: May expose internal representation by incorporating reference to mutable object. -->
  <Match>
    <Bug pattern="EI_EXPOSE_REP2"/>
  </Match>
  <!-- False positive in many cases: obstor-java does not shadow the publicly available identifier from the Java Standard Library by packaging them under net.obstor. -->
  <Match>
    <Bug pattern="PI_DO_NOT_REUSE_PUBLIC_IDENTIFIERS_CLASS_NAMES"/>
  </Match>
  <!-- False positive in many cases: Classes cannot be final in reported classes and deprecated finalize() cannot be used. -->
  <Match>
    <Bug pattern="CT_CONSTRUCTOR_THROW"/>
  </Match>
  <!-- False positive: Method invocation is legit. -->
  <Match>
    <Bug pattern="DMI_DOH"/>
  </Match>
</FindBugsFilter>