mirror of
https://github.com/cryptomator/cryptomator.git
synced 2024-11-23 12:09:45 +00:00
Update dependency-check plugin and exclude false positive
(cherry picked from commit ebcd0adf78
)
This commit is contained in:
parent
fd76c89393
commit
8e902877a3
2
pom.xml
2
pom.xml
@ -58,7 +58,7 @@
|
|||||||
|
|
||||||
<!-- build-time dependencies -->
|
<!-- build-time dependencies -->
|
||||||
<jetbrains.annotations.version>23.0.0</jetbrains.annotations.version>
|
<jetbrains.annotations.version>23.0.0</jetbrains.annotations.version>
|
||||||
<dependency-check.version>7.2.1</dependency-check.version>
|
<dependency-check.version>7.4.0</dependency-check.version>
|
||||||
<jacoco.version>0.8.8</jacoco.version>
|
<jacoco.version>0.8.8</jacoco.version>
|
||||||
</properties>
|
</properties>
|
||||||
|
|
||||||
|
@ -35,13 +35,15 @@
|
|||||||
<cve>CVE-2022-25366</cve>
|
<cve>CVE-2022-25366</cve>
|
||||||
</suppress>
|
</suppress>
|
||||||
|
|
||||||
|
<!-- Apache Commons-cli false positives below -->
|
||||||
<suppress>
|
<suppress>
|
||||||
<notes><![CDATA[
|
<notes><![CDATA[
|
||||||
False positive for commons-cli due, see https://github.com/jeremylong/DependencyCheck/pull/4148
|
False positive for commons-cli due, see https://github.com/jeremylong/DependencyCheck/pull/4148
|
||||||
]]></notes>
|
]]></notes>
|
||||||
<gav regex="true">^commons\-cli:commons\-cli:.*$</gav>
|
<gav regex="true">^commons\-cli:commons\-cli:.*$</gav>
|
||||||
<cpe>cpe:/a:apache:james</cpe>
|
<cpe>cpe:/a:apache:james</cpe>
|
||||||
<!-- while we are at it exclude also this fp -->
|
<!-- while we are at it exclude also these fp -->
|
||||||
<cpe>cpe:/a:spirit-project:spirit</cpe>
|
<cpe>cpe:/a:spirit-project:spirit</cpe>
|
||||||
|
<cpe>cpe:/a:apache:commons_net</cpe>
|
||||||
</suppress>
|
</suppress>
|
||||||
</suppressions>
|
</suppressions>
|
Loading…
Reference in New Issue
Block a user