spotbugs-exclude-rules.xml

<?xml version="1.0" encoding="UTF-8"?>
<FindBugsFilter>
    <Match>
        <Bug pattern="CRLF_INJECTION_LOGS"/> <!-- Rule is ignored because JSON-based logging is used in operation -->
    </Match>
    <Match>
        <Bug pattern="EI_EXPOSE_REP2"/> <!-- Rule is ignored because spring uses dependency injection. The classes that are injected will be managed by Spring, meaning they do not need to be immutable. See https://docs.spring.io/spring-framework/reference/core/beans/dependencies/factory-collaborators.html -->
    </Match>
</FindBugsFilter>