Use `Objects.requireNonNull` statement or `Preconditions` rather than `assert` or `@SuppressWarning` annotation to suppress if possible.

For gradual adoption, enable checks project-by-project.
Do not rely on `@NullMarked` annotations.
Only enable checks for a project if all its dependencies have checks enabled, in order to avoid back-and-forth when refining the annotations.

      - uses: actions/checkout@v6

      - name: GitHub CODEOWNERS Validator
        uses: mszostok/codeowners-validator@v0.7.4
        with:
          checks: "files,duppatterns,syntax"
          experimental_checks: "notowned,avoid-shadowing"

      # downgrading to 0.7.2 for owners check to avoid issues with token permissions check,

                            "clean performance:%testProject%PerformanceAdHocTest --tests \"%scenario%\"",
                            "%performance.baselines%",
                            """--warmups %warmups% --runs %runs% --checks %checks% --profiler %profiler% %additional.gradle.parameters%""",
                            os,
                            arch,
                            "%testJavaVersion%",
                            "%testJavaVendor%",

on:
  # For Branch-Protection check. Only the default branch is supported. See
  # https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection
  branch_protection_rule:
  # To guarantee Maintained check is occasionally updated. See
  # https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained
  schedule:
    - cron: '45 9 * * 0'
  push:
    branches: [ "master" ]

# Declare default permissions as read only.

    protected long crawlerWaitMillis = 10000;

    /** List of interval rules for controlling crawler timing */
    protected List<IntervalRule> ruleList = new ArrayList<>();

    /**
     * Checks the crawler status and waits if the crawler is not running.
     * This method blocks until the crawler is running again.
     */
    public void checkCrawlerStatus() {
        while (!crawlerRunning) {

        } else if (MAVEN_4_0_0_NAMESPACE.equals(namespaceUri)) {
            return MODEL_VERSION_4_0_0;
        }

        // Default fallback
        return MODEL_VERSION_4_0_0;
    }

    /**
     * Checks if a model version is valid for upgrade operations.
     * Currently supports 4.0.0, 4.1.0, and 4.2.0.
     *
     * @param modelVersion the model version to validate
     * @return true if the model version is valid
     */

            return StringUtil.EMPTY;
        }
        return input;
    }

    /**
     * Checks if this item has been updated.
     * @return true if updated, false otherwise
     */
    public boolean isUpdated() {
        return newInput != null;
    }

    /**
     * Checks if this item has been deleted.
     * @return true if deleted, false otherwise
     */
    public boolean isDeleted() {

     *
     * @return array of file protocol strings with colon suffix (e.g., "file:", "ftp:")
     */
    public String[] getFileProtocols() {
        return fileProtocols;
    }

    /**
     * Checks if the given URL uses a valid web protocol.
     *
     * @param url the URL to validate
     * @return true if the URL starts with a supported web protocol, false otherwise
     */

on:
  # For Branch-Protection check. Only the default branch is supported. See
  # https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection
  branch_protection_rule:
  # To guarantee Maintained check is occasionally updated. See
  # https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained
  schedule:
    - cron: '26 3 * * 2'
  push:
    branches: [ "master" ]

# Declare default permissions as read only.

import jakarta.validation.ConstraintValidator;
import jakarta.validation.ConstraintValidatorContext;

/**
 * Validator implementation for URI type constraints.
 * This validator checks URI strings against specified protocol types.
 */
public class UriTypeValidator implements ConstraintValidator<UriType, String> {

    /**
     * Default constructor for UriTypeValidator.
     */