@boyingliu01/xp-gate 0.8.1 → 0.8.2

package/adapters/plugins/whalecloud-java/README.md

@@ -0,0 +1,98 @@
+# whalecloud-java — 浩鲸科技 Java 编码规范增强插件
+
+浩鲸 Java 规范以阿里 p3c-pmd 规范为基础，但增加了企业内部积累的经验规则和安全规范。
+
+## 规则覆盖
+
+106 条规则（74 强制 + 32 推荐），在 p3c-pmd 54 条基线规则之上叠加：
+
+| 类别 | 规则数 | 内容 |
+|------|--------|------|
+| wc-collection | 12 | 集合处理增强 — subList/addAll/asList/map 视图等 p3c 未覆盖的陷阱 |
+| wc-concurrent | 14 | 并发编程增强 — 锁策略/双重检查锁/HashMap 死循环等 |
+| wc-exception | 11 | 异常处理规范 — 异常分类处理/finally 规范/异常匹配 |
+| wc-logging | 7 | 日志输出规范 — 占位符/级别判断/重复打印/国际化 |
+| wc-security | 10 | 安全管理规范 — SQL 注入/MD5/HTTP 超时/HttpClient |
+| wc-resource | 6 | 资源管理规范 — 资源关闭/finally-return/静态块 |
+| wc-style | 18 | 编码风格规范 — 访问控制/赋值语句/类型转换/POJO/序列化 |
+| wc-performance | 8 | 性能优化规范 — 字符串连接/正则预编译/I/O 缓冲 |
+| wc-security-chapter | 10+ | 安全篇 — SQL/XML/日志/命令注入，路径标准化，Zip 炸弹防护 |
+
+## 与 p3c-pmd 关系
+
+```
+┌─────────────────────────────────────────┐
+│           xp-gate-pre-commit              │
+│              Gate 1                     │
+├─────────────────────────────────────────┤
+│  whalecloud-java (106 条)               │
+│    ┌─────────────────────────────────┐  │
+│    │  浩鲸增强层 (74+32 条自定义)     │  │
+│    └─────────────────────────────────┘  │
+│    ┌─────────────────────────────────┐  │
+│    │  p3c-pmd 基线 (54 条阿里规则)   │  │
+│    └─────────────────────────────────┘  │
+└─────────────────────────────────────────┘
+```
+
+p3c-pmd 是**必要不充分条件**。启用 whalecloud-java 自动包含 p3c-pmd。
+
+## 安装
+
+### Maven
+
+```bash
+bash githooks/adapters/plugins/whalecloud-java/scripts/install-maven-whalecloud.sh
+```
+
+### Gradle
+
+```bash
+bash githooks/adapters/plugins/whalecloud-java/scripts/install-gradle-whalecloud.sh
+```
+
+## 手动运行
+
+```bash
+# Maven
+mvn clean verify -P xp-gate-whalecloud-java
+
+# 同时运行 p3c-pmd + whalecloud（推荐）
+mvn clean verify -P xp-gate-p3c,xp-gate-whalecloud-java
+
+# Gradle
+./gradlew xp-gateWhalecloudCheck
+```
+
+## 检查工具链
+
+| 工具 | 版本 | 用途 |
+|------|------|------|
+| PMD | 7.7.0 | 静态分析 + 自定义规则集 |
+| CheckStyle | 10.21.3 | 代码风格检查 |
+| SpotBugs | 4.7.3 | 字节码分析 + 安全检测 |
+| FindSecBugs | 1.12.0 | 安全漏洞扫描 |
+| Lizard | 1.17.10 | 圈复杂度检测 |
+
+## 插件结构
+
+```
+whalecloud-java/
+├── plugin.yml                                  # 插件元数据
+├── README.md                                   # 说明文档
+├── rules/                                      # 规则定义目录
+│   ├── collection/     # 集合处理规则
+│   ├── concurrency/    # 并发编程规则
+│   ├── exception/      # 异常处理规则
+│   ├── logging/        # 日志规范规则
+│   ├── security/       # 安全管理规则
+│   ├── resource/       # 资源管理规则
+│   ├── style/          # 编码风格规则
+│   └── performance/    # 性能优化规则
+├── templates/
+│   ├── maven/          # Maven profile 模板
+│   └── gradle/         # Gradle 配置模板
+└── scripts/
+    ├── install-maven-whalecloud.sh
+    └── install-gradle-whalecloud.sh
+```

package/adapters/plugins/whalecloud-java/plugin.yml

@@ -0,0 +1,45 @@
+---
+id: whalecloud-java
+name: WhaleCloud Java Coding Standards
+version: 1.0.0
+languages: [java]
+description: >
+  浩鲸科技 Java 编码规范增强插件。在 p3c-pmd (Aribaba) 54 条规则基线之上，
+  叠加 74 条浩鲸企业内部强制规则 + 32 条推荐规则 + 安全篇规范。
+  覆盖集合处理、并发编程、异常处理、日志规范、安全管理、资源管理、编码风格、性能优化 8 大类别。
+author: WhaleCloud Technology (浩鲸科技)
+depends_on:
+  - id: p3c-java
+    version: ">=2.1.1"
+    required: true
+    reason: "p3c-pmd 提供 54 条 Alibaba 规范作为基线"
+rules_count: 106  # 74 mandatory + 32 recommended
+rules_count_by_severity:
+  error: 74   # 强制
+  warning: 32 # 推荐
+categories:
+  # === 集合处理 (Collections) ===
+  - wc-collection: 集合处理增强 (12 条) — subList/addAll/asList/map视图等 p3c 未覆盖的陷阱
+  # === 并发编程 (Concurrency) ===
+  - wc-concurrent: 并发编程增强 (14 条) — 锁策略/双重检查锁/HashMap死循环/p3c未覆盖的同步陷阱
+  # === 异常处理 (Exception Handling) ===
+  - wc-exception: 异常处理规范 (11 条) — 异常分类处理/finally规范/异常匹配/异常流程控制
+  # === 日志规范 (Logging) ===
+  - wc-logging: 日志输出规范 (7 条) — 占位符/级别判断/重复打印/国际化/生产环境debug
+  # === 安全管理 (Security) ===
+  - wc-security: 安全管理规范 (10 条) — SQL注入加密/MDF5/SQL注入/HTTP超时/HttpClient
+  # === 资源管理 (Resource Management) ===
+  - wc-resource: 资源管理规范 (6 条) — 资源关闭/finally-return/静态块/响应关闭
+  # === 编码风格 (Code Style) ===
+  - wc-style: 编码风格规范 (18 条) — 访问控制/赋值语句/类型转换/POJO/序列化
+  # === 性能优化 (Performance) ===
+  - wc-performance: 性能优化规范 (8 条) — 字符串连接/正则预编译/I/O缓冲/内存管理
+  # === 安全篇 (Security Chapter) ===
+  - wc-security-chapter: 安全开发规范 (安全篇) — SQL/XML/日志/命令注入, 路径标准化, Zip炸弹
+maven:
+  profile: xp-gate-whalecloud-java
+  profile_file: templates/maven/xp-gate-whalecloud-profile.xml
+  install_script: scripts/install-maven-whalecloud.sh
+gradle:
+  config_file: templates/gradle/xp-gate-whalecloud-gradle.gradle
+  install_script: scripts/install-gradle-whalecloud.sh

package/adapters/plugins/whalecloud-java/rules/collection/wc-collect-001.yml

@@ -0,0 +1,17 @@
+---
+id: WC-COLLECT-001
+name: ArrayList subList结果不可强转成ArrayList
+severity: error  # error=阻断, warning=警告
+source: J000001
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-collection
+description: |
+  ArrayList subList结果不可强转成ArrayList
+
+  对应浩鲸规范 J000001。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "pmd:ArrayListSubList already covers this; verify severity matches"

package/adapters/plugins/whalecloud-java/rules/collection/wc-collect-002.yml

@@ -0,0 +1,17 @@
+---
+id: WC-COLLECT-002
+name: Map keySet/values/entrySet返回集合不可添加元素
+severity: error  # error=阻断, warning=警告
+source: J000002
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-collection
+description: |
+  Map keySet/values/entrySet返回集合不可添加元素
+
+  对应浩鲸规范 J000002。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "SpotBugs: COLLECTIONS_SHOULD_NOT_CONTAIN_THEMSELVES"

package/adapters/plugins/whalecloud-java/rules/collection/wc-collect-003.yml

@@ -0,0 +1,17 @@
+---
+id: WC-COLLECT-003
+name: 不可对Collections返回的不可变列表进行添加或删除
+severity: error  # error=阻断, warning=警告
+source: J000003
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-collection
+description: |
+  不可对Collections返回的不可变列表进行添加或删除
+
+  对应浩鲸规范 J000003。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "UnsupportedOperationException risk"

package/adapters/plugins/whalecloud-java/rules/collection/wc-collect-004.yml

@@ -0,0 +1,17 @@
+---
+id: WC-COLLECT-004
+name: subList场景中原集合元素增加或删除需高度注意
+severity: error  # error=阻断, warning=警告
+source: J000004
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-collection
+description: |
+  subList场景中原集合元素增加或删除需高度注意
+
+  对应浩鲸规范 J000004。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "ConcurrentModificationException risk"

package/adapters/plugins/whalecloud-java/rules/collection/wc-collect-005.yml

@@ -0,0 +1,17 @@
+---
+id: WC-COLLECT-005
+name: 集合转数组必须使用toArray(T[] array)
+severity: error  # error=阻断, warning=警告
+source: J000005
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-collection
+description: |
+  集合转数组必须使用toArray(T[] array)
+
+  对应浩鲸规范 J000005。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "toArray() without args loses type safety"

package/adapters/plugins/whalecloud-java/rules/collection/wc-collect-006.yml

@@ -0,0 +1,17 @@
+---
+id: WC-COLLECT-006
+name: Collection addAll时需对每个元素类型检查
+severity: error  # error=阻断, warning=警告
+source: J000006
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-collection
+description: |
+  Collection addAll时需对每个元素类型检查
+
+  对应浩鲸规范 J000006。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Type safety in bulk operations"

package/adapters/plugins/whalecloud-java/rules/collection/wc-collect-007.yml

@@ -0,0 +1,17 @@
+---
+id: WC-COLLECT-007
+name: 无泛型集合赋值给泛型限制集合时需警惕
+severity: error  # error=阻断, warning=警告
+source: J000008
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-collection
+description: |
+  无泛型集合赋值给泛型限制集合时需警惕
+
+  对应浩鲸规范 J000008。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Raw type assignment风险"

package/adapters/plugins/whalecloud-java/rules/collection/wc-collect-008.yml

@@ -0,0 +1,17 @@
+---
+id: WC-COLLECT-008
+name: 列表遍历循环里不可进行元素remove/add
+severity: error  # error=阻断, warning=警告
+source: J000009
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-collection
+description: |
+  列表遍历循环里不可进行元素remove/add
+
+  对应浩鲸规范 J000009。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "ConcurrentModificationException"

package/adapters/plugins/whalecloud-java/rules/collection/wc-collect-009.yml

@@ -0,0 +1,17 @@
+---
+id: WC-COLLECT-009
+name: Map类集合K/V能存储null值的情况
+severity: error  # error=阻断, warning=警告
+source: J000011
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-collection
+description: |
+  Map类集合K/V能存储null值的情况
+
+  对应浩鲸规范 J000011。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "HashMap vs ConcurrentHashMap null handling"

package/adapters/plugins/whalecloud-java/rules/collection/wc-collect-010.yml

@@ -0,0 +1,17 @@
+---
+id: WC-COLLECT-010
+name: 合理利用集合的有序性和稳定性
+severity: warning  # error=阻断, warning=警告
+source: J000012
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-collection
+description: |
+  合理利用集合的有序性和稳定性
+
+  对应浩鲸规范 J000012。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "TreeSet vs HashSet selection"

package/adapters/plugins/whalecloud-java/rules/collection/wc-collect-011.yml

@@ -0,0 +1,17 @@
+---
+id: WC-COLLECT-011
+name: 集合初始化时指定初始值大小
+severity: warning  # error=阻断, warning=警告
+source: J0000117
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-collection
+description: |
+  集合初始化时指定初始值大小
+
+  对应浩鲸规范 J0000117。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Avoid resize overhead"

package/adapters/plugins/whalecloud-java/rules/collection/wc-collect-012.yml

@@ -0,0 +1,17 @@
+---
+id: WC-COLLECT-012
+name: 使用entrySet遍历Map而非keySet
+severity: warning  # error=阻断, warning=警告
+source: J0000118
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-collection
+description: |
+  使用entrySet遍历Map而非keySet
+
+  对应浩鲸规范 J0000118。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "PMD:KeySetOverEntrySet"

package/adapters/plugins/whalecloud-java/rules/concurrency/wc-concur-001.yml

@@ -0,0 +1,17 @@
+---
+id: WC-CONCUR-001
+name: 获取单例对象需保证线程安全
+severity: error  # error=阻断, warning=警告
+source: J000014
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-concurrency
+description: |
+  获取单例对象需保证线程安全
+
+  对应浩鲸规范 J000014。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Singleton thread safety"

package/adapters/plugins/whalecloud-java/rules/concurrency/wc-concur-002.yml

@@ -0,0 +1,17 @@
+---
+id: WC-CONCUR-002
+name: 高并发时同步调用考虑锁性能损耗
+severity: error  # error=阻断, warning=警告
+source: J000018
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-concurrency
+description: |
+  高并发时同步调用考虑锁性能损耗
+
+  对应浩鲸规范 J000018。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Lock contention impact"

package/adapters/plugins/whalecloud-java/rules/concurrency/wc-concur-003.yml

@@ -0,0 +1,17 @@
+---
+id: WC-CONCUR-003
+name: 多资源加锁需保持一致的加锁顺序
+severity: error  # error=阻断, warning=警告
+source: J000019
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-concurrency
+description: |
+  多资源加锁需保持一致的加锁顺序
+
+  对应浩鲸规范 J000019。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Deadlock prevention"

package/adapters/plugins/whalecloud-java/rules/concurrency/wc-concur-004.yml

@@ -0,0 +1,17 @@
+---
+id: WC-CONCUR-004
+name: 并发修改同一记录需加锁
+severity: error  # error=阻断, warning=警告
+source: J000020
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-concurrency
+description: |
+  并发修改同一记录需加锁
+
+  对应浩鲸规范 J000020。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Lost update prevention"

package/adapters/plugins/whalecloud-java/rules/concurrency/wc-concur-005.yml

@@ -0,0 +1,17 @@
+---
+id: WC-CONCUR-005
+name: 禁止使用Timer和TimerTask调度多任务
+severity: error  # error=阻断, warning=警告
+source: J000021
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-concurrency
+description: |
+  禁止使用Timer和TimerTask调度多任务
+
+  对应浩鲸规范 J000021。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "PMD:AvoidUseTimer already covers"

package/adapters/plugins/whalecloud-java/rules/concurrency/wc-concur-006.yml

@@ -0,0 +1,17 @@
+---
+id: WC-CONCUR-006
+name: Lock类加锁需确保锁范围内代码受保护
+severity: error  # error=阻断, warning=警告
+source: J000022
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-concurrency
+description: |
+  Lock类加锁需确保锁范围内代码受保护
+
+  对应浩鲸规范 J000022。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "try-finally pattern required"

package/adapters/plugins/whalecloud-java/rules/concurrency/wc-concur-007.yml

@@ -0,0 +1,17 @@
+---
+id: WC-CONCUR-007
+name: HashMap resize高并发可能死循环
+severity: error  # error=阻断, warning=警告
+source: J000023
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-concurrency
+description: |
+  HashMap resize高并发可能死循环
+
+  对应浩鲸规范 J000023。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Use ConcurrentHashMap in JDK7-"

package/adapters/plugins/whalecloud-java/rules/concurrency/wc-concur-008.yml

@@ -0,0 +1,17 @@
+---
+id: WC-CONCUR-008
+name: 双重检查锁实现单例需volatile
+severity: error  # error=阻断, warning=警告
+source: J000026
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-concurrency
+description: |
+  双重检查锁实现单例需volatile
+
+  对应浩鲸规范 J000026。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "PMD:NonVolatileClassMember"

package/adapters/plugins/whalecloud-java/rules/concurrency/wc-concur-009.yml

@@ -0,0 +1,17 @@
+---
+id: WC-CONCUR-009
+name: 多线程用线程安全集合
+severity: error  # error=阻断, warning=警告
+source: J000114
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-concurrency
+description: |
+  多线程用线程安全集合
+
+  对应浩鲸规范 J000114。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "ConcurrentHashMap/CopyOnWriteArrayList"

package/adapters/plugins/whalecloud-java/rules/concurrency/wc-concur-010.yml

@@ -0,0 +1,17 @@
+---
+id: WC-CONCUR-010
+name: volatile解决内存可见性但无法解决原子性
+severity: warning  # error=阻断, warning=警告
+source: J000027
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-concurrency
+description: |
+  volatile解决内存可见性但无法解决原子性
+
+  对应浩鲸规范 J000027。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "AtomicInteger over volatile int"

package/adapters/plugins/whalecloud-java/rules/concurrency/wc-concur-011.yml

@@ -0,0 +1,17 @@
+---
+id: WC-CONCUR-011
+name: 使用CountDownLatch进行异步转同步
+severity: warning  # error=阻断, warning=警告
+source: J000024
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-concurrency
+description: |
+  使用CountDownLatch进行异步转同步
+
+  对应浩鲸规范 J000024。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "PMD:CountDownLatchUsage"

package/adapters/plugins/whalecloud-java/rules/concurrency/wc-concur-012.yml

@@ -0,0 +1,17 @@
+---
+id: WC-CONCUR-012
+name: 避免Random实例被多线程使用
+severity: warning  # error=阻断, warning=警告
+source: J000025
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-concurrency
+description: |
+  避免Random实例被多线程使用
+
+  对应浩鲸规范 J000025。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "PMD:AvoidConcurrentCompetitionRandom"

package/adapters/plugins/whalecloud-java/rules/concurrency/wc-concur-013.yml

@@ -0,0 +1,17 @@
+---
+id: WC-CONCUR-013
+name: 不涉及多线程同步时用非线程安全集合
+severity: warning  # error=阻断, warning=警告
+source: J000114
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-concurrency
+description: |
+  不涉及多线程同步时用非线程安全集合
+
+  对应浩鲸规范 J000114。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Performance optimization"

package/adapters/plugins/whalecloud-java/rules/concurrency/wc-concur-014.yml

@@ -0,0 +1,17 @@
+---
+id: WC-CONCUR-014
+name: 尽量减少不必要的synchronized
+severity: warning  # error=阻断, warning=警告
+source: J000126
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-concurrency
+description: |
+  尽量减少不必要的synchronized
+
+  对应浩鲸规范 J000126。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Lock contention reduction"

package/adapters/plugins/whalecloud-java/rules/exception/wc-except-001.yml

@@ -0,0 +1,17 @@
+---
+id: WC-EXCEPT-001
+name: 可通过预检查规避的RuntimeException
+severity: error  # error=阻断, warning=警告
+source: J000039
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-exception
+description: |
+  可通过预检查规避的RuntimeException
+
+  对应浩鲸规范 J000039。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Null check before method call"

package/adapters/plugins/whalecloud-java/rules/exception/wc-except-002.yml

@@ -0,0 +1,17 @@
+---
+id: WC-EXCEPT-002
+name: 异常不能用做流程控制
+severity: error  # error=阻断, warning=警告
+source: J000040
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-exception
+description: |
+  异常不能用做流程控制
+
+  对应浩鲸规范 J000040。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Exceptions for control flow anti-pattern"