diff --git a/build.gradle b/build.gradle index 6087c2b..d939ab7 100644 --- a/build.gradle +++ b/build.gradle @@ -39,7 +39,10 @@ repositories { dependencies { implementation 'com.github.spullara.mustache.java:compiler:0.9.6' - // compileOnly 'com.github.spotbugs:spotbugs-annotations:3.1.12' + + spotbugsPlugins 'com.h3xstream.findsecbugs:findsecbugs-plugin:1.9.0' + compileOnly 'com.github.spotbugs:spotbugs-annotations:3.1.11' + testImplementation 'org.testng:testng:6.14.3' } diff --git a/src/main/java/net/thauvin/erik/semver/VersionProcessor.java b/src/main/java/net/thauvin/erik/semver/VersionProcessor.java index c8039ac..636e712 100644 --- a/src/main/java/net/thauvin/erik/semver/VersionProcessor.java +++ b/src/main/java/net/thauvin/erik/semver/VersionProcessor.java @@ -34,6 +34,7 @@ package net.thauvin.erik.semver; import com.github.mustachejava.DefaultMustacheFactory; import com.github.mustachejava.Mustache; import com.github.mustachejava.MustacheFactory; +import edu.umd.cs.findbugs.annotations.SuppressFBWarnings; import javax.annotation.processing.*; import javax.lang.model.SourceVersion; @@ -69,6 +70,7 @@ public class VersionProcessor extends AbstractProcessor { log(Diagnostic.Kind.ERROR, (t != null ? t.toString() : s)); } + @SuppressFBWarnings(value = "PATH_TRAVERSAL_IN") private VersionInfo findValues(final Version version) throws IOException { final VersionInfo versionInfo = new VersionInfo(version); @@ -207,6 +209,7 @@ public class VersionProcessor extends AbstractProcessor { log(Diagnostic.Kind.WARNING, s); } + @SuppressFBWarnings(value = "PATH_TRAVERSAL_IN") private void writeTemplate(final String type, final VersionInfo versionInfo, final String template)