Skip to content

Commit a3cb773

Browse files
Merge pull request #58 from BorderTech/jonathanaustin-patch-1
Update README.md
2 parents d21f231 + 23a68f0 commit a3cb773

File tree

1 file changed

+18
-2
lines changed

1 file changed

+18
-2
lines changed

README.md

Lines changed: 18 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -301,14 +301,30 @@ Refer to [OWASP plugin](https://jeremylong.github.io/DependencyCheck/dependency-
301301

302302
##### Ignore OWASP Rule
303303

304-
Create a [suppression](https://jeremylong.github.io/DependencyCheck/general/suppression.html) file add set the `suppression.file` property.
304+
Create a [suppression](https://jeremylong.github.io/DependencyCheck/general/suppression.html) file add set the `suppressionFiles` property.
305305

306306
``` xml
307307
<property>
308-
<suppression.file>${basedir}/my-owasp-suppressions.xml</suppression.file>
308+
<suppressionFiles>${basedir}/my-owasp-suppressions.xml</suppressionFiles>
309309
</property>
310310
```
311311

312+
Example suppression file content:
313+
314+
``` xml
315+
<?xml version="1.0" encoding="UTF-8"?>
316+
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.1.xsd">
317+
<suppress>
318+
<notes>
319+
<![CDATA[
320+
Example to suppress a specific CVE.
321+
]]>
322+
</notes>
323+
<cve>CVE-2019-12814</cve>
324+
</suppress>
325+
</suppressions>
326+
```
327+
312328
##### Using OWASP behind a Proxy
313329

314330
If you are behind a Proxy then the OWASP plugin needs to be told which proxy to use. You can set the `mavenSettingsProxyId` property in your settings.xml to the appropriate PROXY-ID (which is usually defined in the same settings.xml).

0 commit comments

Comments
 (0)