The password checking rules, PasswordsInArgumentsRule, PasswordsInEnvironmentRule, and PasswordsInSystemPropertiesRule may report false positives. They should have preferences that allow the user to exclude specific matches using regexps.

If such filters are specified, this should be reported in the result. Compare with ErrorRule.