Skip to content
This repository was archived by the owner on Mar 14, 2024. It is now read-only.

Commit 16a3d0a

Browse files
committed
Update dependecy-check plugin and add surpressions for false positives
1 parent f8829b9 commit 16a3d0a

2 files changed

Lines changed: 11 additions & 1 deletion

File tree

pom.xml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@
3636
<maven.source.version>3.2.1</maven.source.version>
3737
<maven.javadoc.version>3.4.1</maven.javadoc.version>
3838
<maven.gpg.version>3.0.1</maven.gpg.version>
39-
<dependency-check.version>7.3.0</dependency-check.version>
39+
<dependency-check.version>7.4.0</dependency-check.version>
4040
<jacoco.version>0.8.8</jacoco.version>
4141
<nexus.staging.version>1.6.13</nexus.staging.version>
4242
</properties>

suppression.xml

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,4 +3,14 @@
33
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.2.xsd"
44
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
55
xsi:schemaLocation="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.2.xsd ">
6+
<!-- Apache Commons-cli false positives below -->
7+
<suppress>
8+
<notes><![CDATA[
9+
False positive for commons-cli due, see https://github.com/jeremylong/DependencyCheck/pull/4148
10+
]]></notes>
11+
<gav regex="true">^commons\-cli:commons\-cli:.*$</gav>
12+
<cpe>cpe:/a:apache:james</cpe>
13+
<cpe>cpe:/a:spirit-project:spirit</cpe>
14+
<cpe>cpe:/a:apache:commons_net</cpe>
15+
</suppress>
616
</suppressions>

0 commit comments

Comments
 (0)