Skip to content

Commit e5928a0

Browse files
update dependency-check + suppression rules
1 parent bbd9518 commit e5928a0

File tree

2 files changed

+4
-13
lines changed

2 files changed

+4
-13
lines changed

pom.xml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@
5050
<junit.version>5.8.2</junit.version>
5151

5252
<!-- build plugin dependencies -->
53-
<dependency-check.version>8.1.0</dependency-check.version>
53+
<dependency-check.version>8.2.1</dependency-check.version>
5454
<nexus-staging.version>1.6.8</nexus-staging.version>
5555
</properties>
5656

suppression.xml

Lines changed: 3 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -2,18 +2,9 @@
22
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
33
<suppress>
44
<notes><![CDATA[
5-
Incorrectly matched CPE, see https://github.com/jeremylong/DependencyCheck/issues/4177git
5+
Vulnerable method `Files::createTempDir` not used.
66
]]></notes>
7-
<gav regex="true">^org\.cryptomator:.*$</gav>
8-
<cpe>cpe:/a:cryptomator:cryptomator</cpe>
9-
<cve>CVE-2022-25366</cve>
10-
</suppress>
11-
<suppress>
12-
<notes><![CDATA[
13-
False postive, because secret-service only accesses the external gnome-keyring service
14-
]]></notes>
15-
<gav regex="true">^de\.swiesend\:secret\-service:.*$</gav>
16-
<cve>CVE-2018-19358</cve>
17-
<cve>CVE-2018-20781</cve>
7+
<gav regex="true">^com\.google\.guava:.*$</gav>
8+
<cve>CVE-2020-8908</cve>
189
</suppress>
1910
</suppressions>

0 commit comments

Comments
 (0)