github-mirrors/DependencyCheck
1
0
Fork 0
mirror of https://github.com/ysoftdevs/DependencyCheck.git synced 2026-03-24 10:01:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

supression rules to resolve issues #437 and #438

Browse Source
This commit is contained in:
Jeremy Long
2016-01-10 07:45:29 -05:00
parent 70bc7a6d01
commit 46bb19de9b
1 changed files with 15 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml
View File

@@ -220,4 +220,19 @@
<gav regex="true">com\.google\.javascript:closure-compiler:.*</gav> <gav regex="true">com\.google\.javascript:closure-compiler:.*</gav>
<cpe>cpe:/a:google:google_apps:-</cpe> <cpe>cpe:/a:google:google_apps:-</cpe>
</suppress> </suppress>
<suppress base="true">
<notes><![CDATA[
suppress false positives per issue #437
]]></notes>
<gav regex="true">.*mongodb.*:.*:.*</gav>
<cpe>cpe:/a:mongodb:mongodb</cpe>
</suppress>
<suppress base="true">
<notes><![CDATA[
suppress false positives per issue #438
Note, there will be more false positives for Netty. Trying to figure out a better suppression.
]]></notes>
<gav regex="true">com.typesafe.netty:netty-http-pipelining:.*</gav>
<cpe>cpe:/a:netty_project:netty:1.1.4</cpe>
</suppress>
</suppressions> </suppressions>