From 03559fd10698333a4a2ee5cacd717874c1e82a50 Mon Sep 17 00:00:00 2001
From: Jeremy Long <jeremy.long@gmail.com>
Date: Sat, 25 Feb 2017 06:31:34 -0500
Subject: [PATCH] added more suppression rules for false positives

---
 .../dependencycheck-base-suppression.xml      | 22 +++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml b/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml
index 48919bc36..fbcb946f4 100644
--- a/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml
+++ b/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml
@@ -508,6 +508,28 @@
        <cpe>cpe:/a:shim:shim</cpe>
        <cpe>cpe:/a:python:python</cpe>
     </suppress>
+    <suppress base="true">
+        <notes><![CDATA[
+        checkpoint firewall is not at the application layer.
+        ]]></notes>
+        <filePath regex="true">.*</filePath>
+        <cpe>cpe:/a:checkpoint:check_point</cpe>
+    </suppress>
+    <suppress base="true">
+       <notes><![CDATA[
+       Bouncy Castle Time Stamp Protocol is not related to openpgp.
+       ]]></notes>
+       <gav regex="true">^org\.bouncycastle:bctsp.*$</gav>
+       <cpe>cpe:/a:openpgp:openpgp</cpe>
+       <cpe>cpe:/a:pgp:openpgp</cpe>
+    </suppress>
+    <suppress base="true">
+       <notes><![CDATA[
+       Apache XML Graphics is used by Batik - but should not be identified as batik.
+       ]]></notes>
+       <gav regex="true">^org\.apache\.xmlgraphics:xmlgraphics-commons:.*$</gav>
+       <cpe>cpe:/a:apache:batik</cpe>
+    </suppress>
     <suppress base="true">
         <notes><![CDATA[
         False positive suppression per issue #664 for JJWT - A Java and Android JSON Web Token library