The following document contains the results of SpotBugs
SpotBugs Version is 4.9.8
Threshold is medium
Effort is default
| 603 | 83 | 0 | 0 |
| com.github.copilot.sdk.generated.rpc.AccountGetQuotaResult.quotaSnapshots() may expose internal representation by returning AccountGetQuotaResult.quotaSnapshots | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| new com.github.copilot.sdk.generated.rpc.AccountGetQuotaResult(Map) may expose internal representation by storing an externally mutable object into AccountGetQuotaResult.quotaSnapshots | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| com.github.copilot.sdk.generated.rpc.McpConfigDisableParams.names() may expose internal representation by returning McpConfigDisableParams.names | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| new com.github.copilot.sdk.generated.rpc.McpConfigDisableParams(List) may expose internal representation by storing an externally mutable object into McpConfigDisableParams.names | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| com.github.copilot.sdk.generated.rpc.McpConfigEnableParams.names() may expose internal representation by returning McpConfigEnableParams.names | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| new com.github.copilot.sdk.generated.rpc.McpConfigEnableParams(List) may expose internal representation by storing an externally mutable object into McpConfigEnableParams.names | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| com.github.copilot.sdk.generated.rpc.McpConfigListResult.servers() may expose internal representation by returning McpConfigListResult.servers | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| new com.github.copilot.sdk.generated.rpc.McpConfigListResult(Map) may expose internal representation by storing an externally mutable object into McpConfigListResult.servers | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| com.github.copilot.sdk.generated.rpc.McpDiscoverResult.servers() may expose internal representation by returning McpDiscoverResult.servers | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| new com.github.copilot.sdk.generated.rpc.McpDiscoverResult(List) may expose internal representation by storing an externally mutable object into McpDiscoverResult.servers | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| com.github.copilot.sdk.generated.rpc.Model.supportedReasoningEfforts() may expose internal representation by returning Model.supportedReasoningEfforts | MALICIOUS_CODE | EI_EXPOSE_REP | 16 | Medium |
| new com.github.copilot.sdk.generated.rpc.Model(String, String, ModelCapabilities, ModelPolicy, ModelBilling, List, String, ModelPickerCategory, ModelPickerPriceCategory) may expose internal representation by storing an externally mutable object into Model.supportedReasoningEfforts | MALICIOUS_CODE | EI_EXPOSE_REP2 | 19 | Medium |
| com.github.copilot.sdk.generated.rpc.ModelCapabilitiesLimitsVision.supportedMediaTypes() may expose internal representation by returning ModelCapabilitiesLimitsVision.supportedMediaTypes | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| new com.github.copilot.sdk.generated.rpc.ModelCapabilitiesLimitsVision(List, Long, Long) may expose internal representation by storing an externally mutable object into ModelCapabilitiesLimitsVision.supportedMediaTypes | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| com.github.copilot.sdk.generated.rpc.ModelCapabilitiesOverrideLimitsVision.supportedMediaTypes() may expose internal representation by returning ModelCapabilitiesOverrideLimitsVision.supportedMediaTypes | MALICIOUS_CODE | EI_EXPOSE_REP | 16 | Medium |
| new com.github.copilot.sdk.generated.rpc.ModelCapabilitiesOverrideLimitsVision(List, Long, Long) may expose internal representation by storing an externally mutable object into ModelCapabilitiesOverrideLimitsVision.supportedMediaTypes | MALICIOUS_CODE | EI_EXPOSE_REP2 | 19 | Medium |
| com.github.copilot.sdk.generated.rpc.ModelsListResult.models() may expose internal representation by returning ModelsListResult.models | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| new com.github.copilot.sdk.generated.rpc.ModelsListResult(List) may expose internal representation by storing an externally mutable object into ModelsListResult.models | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| com.github.copilot.sdk.generated.rpc.SessionAgentListResult.agents() may expose internal representation by returning SessionAgentListResult.agents | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| new com.github.copilot.sdk.generated.rpc.SessionAgentListResult(List) may expose internal representation by storing an externally mutable object into SessionAgentListResult.agents | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| com.github.copilot.sdk.generated.rpc.SessionAgentReloadResult.agents() may expose internal representation by returning SessionAgentReloadResult.agents | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| new com.github.copilot.sdk.generated.rpc.SessionAgentReloadResult(List) may expose internal representation by storing an externally mutable object into SessionAgentReloadResult.agents | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| com.github.copilot.sdk.generated.rpc.SessionCommandsListResult.commands() may expose internal representation by returning SessionCommandsListResult.commands | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| new com.github.copilot.sdk.generated.rpc.SessionCommandsListResult(List) may expose internal representation by storing an externally mutable object into SessionCommandsListResult.commands | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| com.github.copilot.sdk.generated.rpc.SessionExtensionsListResult.extensions() may expose internal representation by returning SessionExtensionsListResult.extensions | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| new com.github.copilot.sdk.generated.rpc.SessionExtensionsListResult(List) may expose internal representation by storing an externally mutable object into SessionExtensionsListResult.extensions | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| com.github.copilot.sdk.generated.rpc.SessionFsReaddirResult.entries() may expose internal representation by returning SessionFsReaddirResult.entries | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| new com.github.copilot.sdk.generated.rpc.SessionFsReaddirResult(List, SessionFsError) may expose internal representation by storing an externally mutable object into SessionFsReaddirResult.entries | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| com.github.copilot.sdk.generated.rpc.SessionFsReaddirWithTypesResult.entries() may expose internal representation by returning SessionFsReaddirWithTypesResult.entries | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| new com.github.copilot.sdk.generated.rpc.SessionFsReaddirWithTypesResult(List, SessionFsError) may expose internal representation by storing an externally mutable object into SessionFsReaddirWithTypesResult.entries | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| com.github.copilot.sdk.generated.rpc.SessionInstructionsGetSourcesResult.sources() may expose internal representation by returning SessionInstructionsGetSourcesResult.sources | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| new com.github.copilot.sdk.generated.rpc.SessionInstructionsGetSourcesResult(List) may expose internal representation by storing an externally mutable object into SessionInstructionsGetSourcesResult.sources | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| com.github.copilot.sdk.generated.rpc.SessionMcpListResult.servers() may expose internal representation by returning SessionMcpListResult.servers | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| new com.github.copilot.sdk.generated.rpc.SessionMcpListResult(List) may expose internal representation by storing an externally mutable object into SessionMcpListResult.servers | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| com.github.copilot.sdk.generated.rpc.SessionPluginsListResult.plugins() may expose internal representation by returning SessionPluginsListResult.plugins | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| new com.github.copilot.sdk.generated.rpc.SessionPluginsListResult(List) may expose internal representation by storing an externally mutable object into SessionPluginsListResult.plugins | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| com.github.copilot.sdk.generated.rpc.SessionSkillsListResult.skills() may expose internal representation by returning SessionSkillsListResult.skills | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| new com.github.copilot.sdk.generated.rpc.SessionSkillsListResult(List) may expose internal representation by storing an externally mutable object into SessionSkillsListResult.skills | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| com.github.copilot.sdk.generated.rpc.SessionSkillsReloadResult.errors() may expose internal representation by returning SessionSkillsReloadResult.errors | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| com.github.copilot.sdk.generated.rpc.SessionSkillsReloadResult.warnings() may expose internal representation by returning SessionSkillsReloadResult.warnings | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| new com.github.copilot.sdk.generated.rpc.SessionSkillsReloadResult(List, List) may expose internal representation by storing an externally mutable object into SessionSkillsReloadResult.errors | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| new com.github.copilot.sdk.generated.rpc.SessionSkillsReloadResult(List, List) may expose internal representation by storing an externally mutable object into SessionSkillsReloadResult.warnings | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| com.github.copilot.sdk.generated.rpc.SessionTasksListResult.tasks() may expose internal representation by returning SessionTasksListResult.tasks | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| new com.github.copilot.sdk.generated.rpc.SessionTasksListResult(List) may expose internal representation by storing an externally mutable object into SessionTasksListResult.tasks | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| com.github.copilot.sdk.generated.rpc.SessionUiElicitationResult.content() may expose internal representation by returning SessionUiElicitationResult.content | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| new com.github.copilot.sdk.generated.rpc.SessionUiElicitationResult(UIElicitationResponseAction, Map) may expose internal representation by storing an externally mutable object into SessionUiElicitationResult.content | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| com.github.copilot.sdk.generated.rpc.SessionUsageGetMetricsResult.modelMetrics() may expose internal representation by returning SessionUsageGetMetricsResult.modelMetrics | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| com.github.copilot.sdk.generated.rpc.SessionUsageGetMetricsResult.tokenDetails() may expose internal representation by returning SessionUsageGetMetricsResult.tokenDetails | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| new com.github.copilot.sdk.generated.rpc.SessionUsageGetMetricsResult(Double, Long, Long, Map, Double, Long, UsageMetricsCodeChanges, Map, String, Long, Long) may expose internal representation by storing an externally mutable object into SessionUsageGetMetricsResult.modelMetrics | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| new com.github.copilot.sdk.generated.rpc.SessionUsageGetMetricsResult(Double, Long, Long, Map, Double, Long, UsageMetricsCodeChanges, Map, String, Long, Long) may expose internal representation by storing an externally mutable object into SessionUsageGetMetricsResult.tokenDetails | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| com.github.copilot.sdk.generated.rpc.SessionWorkspaceListFilesResult.files() may expose internal representation by returning SessionWorkspaceListFilesResult.files | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| new com.github.copilot.sdk.generated.rpc.SessionWorkspaceListFilesResult(List) may expose internal representation by storing an externally mutable object into SessionWorkspaceListFilesResult.files | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| com.github.copilot.sdk.generated.rpc.SessionWorkspacesListFilesResult.files() may expose internal representation by returning SessionWorkspacesListFilesResult.files | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| new com.github.copilot.sdk.generated.rpc.SessionWorkspacesListFilesResult(List) may expose internal representation by storing an externally mutable object into SessionWorkspacesListFilesResult.files | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| com.github.copilot.sdk.generated.rpc.SkillsConfigSetDisabledSkillsParams.disabledSkills() may expose internal representation by returning SkillsConfigSetDisabledSkillsParams.disabledSkills | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| new com.github.copilot.sdk.generated.rpc.SkillsConfigSetDisabledSkillsParams(List) may expose internal representation by storing an externally mutable object into SkillsConfigSetDisabledSkillsParams.disabledSkills | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| com.github.copilot.sdk.generated.rpc.SkillsDiscoverParams.projectPaths() may expose internal representation by returning SkillsDiscoverParams.projectPaths | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| com.github.copilot.sdk.generated.rpc.SkillsDiscoverParams.skillDirectories() may expose internal representation by returning SkillsDiscoverParams.skillDirectories | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| new com.github.copilot.sdk.generated.rpc.SkillsDiscoverParams(List, List) may expose internal representation by storing an externally mutable object into SkillsDiscoverParams.projectPaths | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| new com.github.copilot.sdk.generated.rpc.SkillsDiscoverParams(List, List) may expose internal representation by storing an externally mutable object into SkillsDiscoverParams.skillDirectories | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| com.github.copilot.sdk.generated.rpc.SkillsDiscoverResult.skills() may expose internal representation by returning SkillsDiscoverResult.skills | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| new com.github.copilot.sdk.generated.rpc.SkillsDiscoverResult(List) may expose internal representation by storing an externally mutable object into SkillsDiscoverResult.skills | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| com.github.copilot.sdk.generated.rpc.SlashCommandInfo.aliases() may expose internal representation by returning SlashCommandInfo.aliases | MALICIOUS_CODE | EI_EXPOSE_REP | 16 | Medium |
| new com.github.copilot.sdk.generated.rpc.SlashCommandInfo(String, List, String, SlashCommandKind, SlashCommandInput, Boolean, Boolean) may expose internal representation by storing an externally mutable object into SlashCommandInfo.aliases | MALICIOUS_CODE | EI_EXPOSE_REP2 | 19 | Medium |
| com.github.copilot.sdk.generated.rpc.Tool.parameters() may expose internal representation by returning Tool.parameters | MALICIOUS_CODE | EI_EXPOSE_REP | 16 | Medium |
| new com.github.copilot.sdk.generated.rpc.Tool(String, String, String, Map, String) may expose internal representation by storing an externally mutable object into Tool.parameters | MALICIOUS_CODE | EI_EXPOSE_REP2 | 19 | Medium |
| com.github.copilot.sdk.generated.rpc.ToolsListResult.tools() may expose internal representation by returning ToolsListResult.tools | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| new com.github.copilot.sdk.generated.rpc.ToolsListResult(List) may expose internal representation by storing an externally mutable object into ToolsListResult.tools | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| com.github.copilot.sdk.generated.rpc.UIElicitationResponse.content() may expose internal representation by returning UIElicitationResponse.content | MALICIOUS_CODE | EI_EXPOSE_REP | 21 | Medium |
| new com.github.copilot.sdk.generated.rpc.UIElicitationResponse(UIElicitationResponseAction, Map) may expose internal representation by storing an externally mutable object into UIElicitationResponse.content | MALICIOUS_CODE | EI_EXPOSE_REP2 | 24 | Medium |
| com.github.copilot.sdk.generated.rpc.UIElicitationSchema.properties() may expose internal representation by returning UIElicitationSchema.properties | MALICIOUS_CODE | EI_EXPOSE_REP | 22 | Medium |
| com.github.copilot.sdk.generated.rpc.UIElicitationSchema.required() may expose internal representation by returning UIElicitationSchema.required | MALICIOUS_CODE | EI_EXPOSE_REP | 22 | Medium |
| new com.github.copilot.sdk.generated.rpc.UIElicitationSchema(String, Map, List) may expose internal representation by storing an externally mutable object into UIElicitationSchema.properties | MALICIOUS_CODE | EI_EXPOSE_REP2 | 25 | Medium |
| new com.github.copilot.sdk.generated.rpc.UIElicitationSchema(String, Map, List) may expose internal representation by storing an externally mutable object into UIElicitationSchema.required | MALICIOUS_CODE | EI_EXPOSE_REP2 | 25 | Medium |
| com.github.copilot.sdk.generated.rpc.UsageMetricsModelMetric.tokenDetails() may expose internal representation by returning UsageMetricsModelMetric.tokenDetails | MALICIOUS_CODE | EI_EXPOSE_REP | 16 | Medium |
| new com.github.copilot.sdk.generated.rpc.UsageMetricsModelMetric(UsageMetricsModelMetricRequests, UsageMetricsModelMetricUsage, Long, Map) may expose internal representation by storing an externally mutable object into UsageMetricsModelMetric.tokenDetails | MALICIOUS_CODE | EI_EXPOSE_REP2 | 19 | Medium |
| Unread field: com.github.copilot.sdk.json.BlobAttachment.type; should this field be static? | PERFORMANCE | SS_SHOULD_BE_STATIC | 31 | Medium |
| com.github.copilot.sdk.json.CopilotClientOptions defines clone() but doesn't implement Cloneable | BAD_PRACTICE | CN_IMPLEMENTS_CLONE_BUT_NOT_CLONEABLE | 644 | High |
| Unread field: com.github.copilot.sdk.json.McpHttpServerConfig.type; should this field be static? | PERFORMANCE | SS_SHOULD_BE_STATIC | 35 | Medium |
| Unread field: com.github.copilot.sdk.json.McpStdioServerConfig.type; should this field be static? | PERFORMANCE | SS_SHOULD_BE_STATIC | 36 | Medium |
| com.github.copilot.sdk.json.MessageOptions defines clone() but doesn't implement Cloneable | BAD_PRACTICE | CN_IMPLEMENTS_CLONE_BUT_NOT_CLONEABLE | 166 | High |
| com.github.copilot.sdk.json.ResumeSessionConfig defines clone() but doesn't implement Cloneable | BAD_PRACTICE | CN_IMPLEMENTS_CLONE_BUT_NOT_CLONEABLE | 931 | High |
| com.github.copilot.sdk.json.SessionConfig defines clone() but doesn't implement Cloneable | BAD_PRACTICE | CN_IMPLEMENTS_CLONE_BUT_NOT_CLONEABLE | 995 | High |
© 2026