title: Exclude built-in java packages with findsecbugs/spotbugs
body: <p>I'm using findsecbugs and spotbugs cli on my java project and got built-in packages like java.io, java.util, etc. in my findings after the scan. How to exclude these packages? I tried to create exclude.xml file but it wont work.</p>
  <p>This is the example file I've created.</p>
  <p>'''</p>
  <pre><code>&lt;FindBugsFilter&gt;
    &lt;Match&gt;
      &lt;Packages name=&quot;~java.io.*&quot;/&gt;
    &lt;/Match&gt;
  &lt;/FindBugsFilter&gt;
  </code></pre>