Skip to content

Commit

Permalink
Update dependency check supression due to CVE. (main -> ce-main, 14.1…
Browse files Browse the repository at this point in the history
….1.2206, ce-v22.06 @94364)

[git-p4: depot-paths = "//dev/coherence-ce/main/": change = 94365]
  • Loading branch information
lsho committed Jul 18, 2022
1 parent 92d3f5c commit 1cccadb
Showing 1 changed file with 30 additions and 0 deletions.
30 changes: 30 additions & 0 deletions prj/etc/dependency-check-suppression.xml
Original file line number Diff line number Diff line change
Expand Up @@ -353,4 +353,34 @@
<cve>CVE-2021-33037</cve>
<cve>CVE-2021-41079</cve>
</suppress>

<!-- We are excluding these as they seemed to be Python-related; false posititve for Java platform. -->
<suppress>
<notes><![CDATA[
file name: jakarta.annotation-api-1.3.5.jar
]]></notes>
<packageUrl regex="true">^pkg:maven/jakarta\.annotation/jakarta\.annotation\-api@.*$</packageUrl>
<cve>CVE-2022-31569</cve>
</suppress>
<suppress>
<notes><![CDATA[
file name: jakarta.jms-api-2.0.3.jar
]]></notes>
<packageUrl regex="true">^pkg:maven/jakarta\.jms/jakarta\.jms\-api@.*$</packageUrl>
<cve>CVE-2022-31569</cve>
</suppress>
<suppress>
<notes><![CDATA[
file name: jakarta.transaction-api-1.3.2.jar
]]></notes>
<packageUrl regex="true">^pkg:maven/jakarta\.transaction/jakarta\.transaction\-api@.*$</packageUrl>
<cve>CVE-2022-31569</cve>
</suppress>
<suppress>
<notes><![CDATA[
file name: truffle-api-19.3.1.jar
]]></notes>
<packageUrl regex="true">^pkg:maven/org\.graalvm\.truffle/truffle\-api@.*$</packageUrl>
<cve>CVE-2022-31569</cve>
</suppress>
</suppressions>

0 comments on commit 1cccadb

Please sign in to comment.