Skip to content

Commit 0036cf6

Browse files
committed
update owasp suppression
1 parent e7e3a21 commit 0036cf6

File tree

2 files changed

+10
-1
lines changed

2 files changed

+10
-1
lines changed

owasp-suppression.xml

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,11 @@
1010
<sha1>8613ae82954779d518631e05daa73a6a954817d5</sha1>
1111
<cpe>cpe:/a:bean_project:bean:7.x-1.1::~~~drupal~~</cpe>
1212
</suppress>
13+
<suppress>
14+
<notes>Haha funny! But code-assert is only used during test phase, so vulnerable libs do not end in production code.</notes>
15+
<sha1>a178eeeb5f3e15660e94d5731a3dc161c8350099</sha1>
16+
<cpe>cpe:/a:mod_security:mod_security:1.7.1</cpe>
17+
</suppress>
1318
<suppress>
1419
<notes>This is a nexus-staging dependency, what can we do?</notes>
1520
<sha1>50ade46f23bb38cd984b4ec560c46223432aac38</sha1>
@@ -25,4 +30,8 @@
2530
<sha1>aaf17df9fe0240e9e9d5375d24d5f177174b73d9</sha1>
2631
<cpe>cpe:/a:apache:tomcat:8.5.23</cpe>
2732
</suppress>
33+
<suppress>
34+
<notes>This is probably a bug in the dependency checker because detekt uses gitlab groupId</notes>
35+
<cpe>cpe:/a:gitlab:gitlab:1.0.0.rc6</cpe>
36+
</suppress>
2837
</suppressions>

pom.xml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55
<parent>
66
<groupId>guru.nidi</groupId>
77
<artifactId>guru-nidi-parent-pom</artifactId>
8-
<version>1.1.6</version>
8+
<version>1.1.7</version>
99
<relativePath />
1010
</parent>
1111

0 commit comments

Comments
 (0)