The default value of the java.security.manager system property has been changed to disallow

This rule flags the use of setSecurityManager(SecurityManager()) method in java.lang.System.

The default value of the java.security.manager system property has been changed to disallow since Java 18. Unless the system property is set to allow on the command line, any invocation of System.setSecurityManager(SecurityManager) with a non-null argument will throw an UnsupportedOperationException. You can set system property as Djava.security.manager=allow. From Java 17, SecurityManager has been deprecated for removal and in future releases it will be removed/degraded.

For more information see JDK-8270380. JDK-8271301.