exclude CVE-2023-35116 from dependency analysis

paulchen · Jun 19, 2023 · 1cfbf9d · 1cfbf9d
1 parent 2ff67e1
commit 1cfbf9d
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/build.gradle.kts b/build.gradle.kts
@@ -41,6 +41,7 @@ configure<DependencyCheckExtension> {
     format = ReportGenerator.Format.ALL.toString()
     analyzers.assemblyEnabled = false
     failBuildOnCVSS = 7f
+    suppressionFile = file("$rootDir/cve-suppressions.xml").toString()
 }
 
 repositories {

diff --git a/cve-suppressions.xml b/cve-suppressions.xml
@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.2.xsd">
+    <suppress>
+        <notes>not a security issue</notes>
+        <cve>CVE-2023-35116</cve>
+    </suppress>
+</suppressions>