Update dependency-check plugin and exclude false positive

(cherry picked from commit ebcd0adf78)
This commit is contained in:
Armin Schrenk 2022-12-07 14:17:42 +01:00
parent fd76c89393
commit 8e902877a3
No known key found for this signature in database
GPG Key ID: 8F2992163CBBA7FC
2 changed files with 4 additions and 2 deletions

View File

@ -58,7 +58,7 @@
<!-- build-time dependencies --> <!-- build-time dependencies -->
<jetbrains.annotations.version>23.0.0</jetbrains.annotations.version> <jetbrains.annotations.version>23.0.0</jetbrains.annotations.version>
<dependency-check.version>7.2.1</dependency-check.version> <dependency-check.version>7.4.0</dependency-check.version>
<jacoco.version>0.8.8</jacoco.version> <jacoco.version>0.8.8</jacoco.version>
</properties> </properties>

View File

@ -35,13 +35,15 @@
<cve>CVE-2022-25366</cve> <cve>CVE-2022-25366</cve>
</suppress> </suppress>
<!-- Apache Commons-cli false positives below -->
<suppress> <suppress>
<notes><![CDATA[ <notes><![CDATA[
False positive for commons-cli due, see https://github.com/jeremylong/DependencyCheck/pull/4148 False positive for commons-cli due, see https://github.com/jeremylong/DependencyCheck/pull/4148
]]></notes> ]]></notes>
<gav regex="true">^commons\-cli:commons\-cli:.*$</gav> <gav regex="true">^commons\-cli:commons\-cli:.*$</gav>
<cpe>cpe:/a:apache:james</cpe> <cpe>cpe:/a:apache:james</cpe>
<!-- while we are at it exclude also this fp --> <!-- while we are at it exclude also these fp -->
<cpe>cpe:/a:spirit-project:spirit</cpe> <cpe>cpe:/a:spirit-project:spirit</cpe>
<cpe>cpe:/a:apache:commons_net</cpe>
</suppress> </suppress>
</suppressions> </suppressions>