mirror of
https://github.com/ysoftdevs/DependencyCheck.git
synced 2026-03-17 23:04:07 +01:00
added supresswarnings for findbugs false positive
Former-commit-id: 6fd172530338f4fc22777eab7a36465be7d12119
This commit is contained in:
@@ -219,6 +219,9 @@ public class JarAnalyzer extends AbstractAnalyzer implements Analyzer {
|
|||||||
* pom.
|
* pom.
|
||||||
* @return whether or not evidence was added to the dependency
|
* @return whether or not evidence was added to the dependency
|
||||||
*/
|
*/
|
||||||
|
@edu.umd.cs.findbugs.annotations.SuppressWarnings(
|
||||||
|
value = "OS_OPEN_STREAM",
|
||||||
|
justification = "The reader on line 259 is closed by closing the zipEntry")
|
||||||
protected boolean analyzePOM(Dependency dependency) throws IOException, AnalysisException {
|
protected boolean analyzePOM(Dependency dependency) throws IOException, AnalysisException {
|
||||||
boolean foundSomething = false;
|
boolean foundSomething = false;
|
||||||
Properties pomProperties = null;
|
Properties pomProperties = null;
|
||||||
|
|||||||
Reference in New Issue
Block a user