File tree 2 files changed +1
-11
lines changed
2 files changed +1
-11
lines changed Original file line number Diff line number Diff line change 1
1
<?xml version =" 1.0" encoding =" UTF-8" ?>
2
2
<suppressions xmlns =" https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd" >
3
3
4
- <suppress >
5
- <notes ><![CDATA[
6
- Recce doesn't use the H2 console so is not affected by these apparent vulnerabilities.
7
- ]]> </notes >
8
- <packageUrl regex =" true" >^pkg:maven/com\.h2database/h2@.*$</packageUrl >
9
- <cve >CVE-2018-14335</cve >
10
- <cve >CVE-2022-45868</cve >
11
- </suppress >
12
-
13
4
<suppress >
14
5
<notes ><![CDATA[
15
6
This is a false positive "noise" CVE: https://github.com/FasterXML/jackson-databind/issues/3972
Original file line number Diff line number Diff line change @@ -167,8 +167,7 @@ dependencies {
167
167
dependencyCheck {
168
168
failBuildOnCVSS = 1f
169
169
suppressionFile = " build-config/dependency-check-suppressions.xml"
170
- scanConfigurations = listOf (" runtimeClasspath" , " testRuntimeClasspath" )
171
- skipTestGroups = false
170
+ scanConfigurations = listOf (" runtimeClasspath" )
172
171
analyzers.assemblyEnabled = false // Unneeded, and creates warning noise
173
172
}
174
173
You can’t perform that action at this time.
0 commit comments