suppress false positive

This commit is contained in:
Armin Schrenk 2023-03-03 16:04:34 +01:00
parent 4bb2df7d8f
commit d2ece543c8
No known key found for this signature in database
GPG Key ID: 8F2992163CBBA7FC

View File

@ -55,4 +55,13 @@
<cve>CVE-2022-45688</cve>
</suppress>
<suppress>
<notes><![CDATA[
Suppress false positive, because com.google.common.io.Files.getTempDir() is not used
]]></notes>
<packageUrl regex="true">^pkg:maven/com\.google\.guava/guava@.*$</packageUrl>
<vulnerabilityName>CVE-2020-8908</vulnerabilityName>
<cve>CVE-2020-8908</cve>
</suppress>
</suppressions>