From 40544e12d35159739168977f1990ea621a9bd630 Mon Sep 17 00:00:00 2001 From: Mark Waite Date: Sun, 24 Dec 2023 22:10:59 -0700 Subject: [PATCH] Globally omit spotbugs CT_CONSTRUCTOR_THROW bug pattern The CT_CONSTRUCTOR_THROW bug pattern is related to libraries used with SecurityManager and does not apply to Jenkins; we do not expect untrusted code to be running inside the controller JVM, therefore we suppress it globally. https://github.com/jenkinsci/plugin-pom/pull/869#issuecomment-1860918407 has more details. --- pom.xml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index ae0a7ee..0b40547 100644 --- a/pom.xml +++ b/pom.xml @@ -75,8 +75,12 @@ The MS_EXPOSE_REP, EI_EXPOSE_REP, EI_EXPOSE_REP2, EI_EXPOSE_STATIC_REP2, MS_EXPOSE_BUF, EI_EXPOSE_BUF, EI_EXPOSE_STATIC_BUF2, and EI_EXPOSE_BUF2 bug patterns are noisy and create little value; therefore, we suppress them globally. + + The CT_CONSTRUCTOR_THROW bug pattern is related to libraries used with SecurityManager + and does not apply to Jenkins; we do not expect untrusted code to be running inside the + controller JVM, therefore we suppress it globally. --> - FindReturnRef + FindReturnRef,ConstructorThrow true