[semgrep] exclude = ["bandit.B101", "java_deserialization_rule-JacksonUnsafeDeserialization"]