From 886c02fad2fa7f445962c962986997d569bade61 Mon Sep 17 00:00:00 2001
From: Jeremy Long <jeremy.long@gmail.com>
Date: Tue, 7 Feb 2017 06:24:34 -0500
Subject: [PATCH] add configuration to remove FP based on parent-group/artifact
 from spring-boot

---
 .../resources/dependencycheck-base-hint.xml   | 31 +++++++++++++++++--
 1 file changed, 29 insertions(+), 2 deletions(-)

diff --git a/dependency-check-core/src/main/resources/dependencycheck-base-hint.xml b/dependency-check-core/src/main/resources/dependencycheck-base-hint.xml
index a7a45d05e..2be87eb19 100644
--- a/dependency-check-core/src/main/resources/dependencycheck-base-hint.xml
+++ b/dependency-check-core/src/main/resources/dependencycheck-base-hint.xml
@@ -113,8 +113,35 @@
         </add>
     </hint>
     <!-- end hack for temporary patch of issue #534-->
-    
-    
+    <!-- creating a spring boot starter project can cause your app to incorrectly be flagged as spring-->
+    <hint>
+        <given>
+            <evidence type="product" source="pom" name="parent-artifactid" value="spring-boot-starter-parent" confidence="HIGHEST"/>
+            <evidence type="product" source="pom" name="parent-artifactid" value="spring-boot-starter-parent" confidence="HIGH"/>
+            <evidence type="product" source="pom" name="parent-artifactid" value="spring-boot-starter-parent" confidence="MEDIUM"/>
+            <evidence type="product" source="pom" name="parent-artifactid" value="spring-boot-starter-parent" confidence="LOW"/>
+        </given>
+        <remove>
+            <evidence type="product" source="pom" name="parent-artifactid" value="spring-boot-starter-parent" confidence="HIGHEST"/>
+            <evidence type="product" source="pom" name="parent-artifactid" value="spring-boot-starter-parent" confidence="HIGH"/>
+            <evidence type="product" source="pom" name="parent-artifactid" value="spring-boot-starter-parent" confidence="MEDIUM"/>
+            <evidence type="product" source="pom" name="parent-artifactid" value="spring-boot-starter-parent" confidence="LOW"/>
+        </remove>
+    </hint>
+    <hint>
+        <given>
+            <evidence type="vendor" source="pom" name="parent-groupid" value="org.springframework.boot" confidence="HIGHEST"/>
+            <evidence type="vendor" source="pom" name="parent-groupid" value="org.springframework.boot" confidence="HIGH"/>
+            <evidence type="vendor" source="pom" name="parent-groupid" value="org.springframework.boot" confidence="MEDIUM"/>
+            <evidence type="vendor" source="pom" name="parent-groupid" value="org.springframework.boot" confidence="LOW"/>
+        </given>
+        <remove>
+            <evidence type="vendor" source="pom" name="parent-groupid" value="org.springframework.boot" confidence="HIGHEST"/>
+            <evidence type="vendor" source="pom" name="parent-groupid" value="org.springframework.boot" confidence="HIGH"/>
+            <evidence type="vendor" source="pom" name="parent-groupid" value="org.springframework.boot" confidence="MEDIUM"/>
+            <evidence type="vendor" source="pom" name="parent-groupid" value="org.springframework.boot" confidence="LOW"/>
+        </remove>
+    </hint>
     <vendorDuplicatingHint value="sun" duplicate="oracle"/>	
     <vendorDuplicatingHint value="oracle" duplicate="sun"/>	
 </hints>
\ No newline at end of file