From 46bb19de9b367745d452ae440c58d4d0fc40ae71 Mon Sep 17 00:00:00 2001
From: Jeremy Long <jeremy.long@gmail.com>
Date: Sun, 10 Jan 2016 07:45:29 -0500
Subject: [PATCH] supression rules to resolve issues #437 and #438

---
 .../dependencycheck-base-suppression.xml          | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml b/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml
index 83784656b..8cdbd7893 100644
--- a/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml
+++ b/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml
@@ -220,4 +220,19 @@
         <gav regex="true">com\.google\.javascript:closure-compiler:.*</gav>
         <cpe>cpe:/a:google:google_apps:-</cpe>
     </suppress>
+    <suppress base="true">
+        <notes><![CDATA[
+        suppress false positives per issue #437
+        ]]></notes>
+        <gav regex="true">.*mongodb.*:.*:.*</gav>
+        <cpe>cpe:/a:mongodb:mongodb</cpe>
+    </suppress>
+    <suppress base="true">
+        <notes><![CDATA[
+        suppress false positives per issue #438
+            Note, there will be more false positives for Netty. Trying to figure out a better suppression.
+        ]]></notes>
+        <gav regex="true">com.typesafe.netty:netty-http-pipelining:.*</gav>
+        <cpe>cpe:/a:netty_project:netty:1.1.4</cpe>
+    </suppress>
 </suppressions>