th2-rpt-data-provider/suppressions.xml at master · th2-net/th2-rpt-data-provider · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
<?xml version="1.0" encoding="UTF-8"?>
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
    <suppress>
        <!-- This is false negative vulnerability because the maven artifact isn't related to jetty -->
        <notes><![CDATA[file name: ktor-server-netty-metadata-3.1.1.jar]]></notes>
        <packageUrl regex="true">^pkg:maven/aws\.smithy\.kotlin/runtime-core@.*$</packageUrl>
        <cpe>cpe:/a:jetty:jetty_http_server</cpe>
    </suppress>
    <suppress>
        <!-- This is false negative vulnerability because the maven artifact isn't related to jetty -->
        <notes><![CDATA[file name: ktor-server-netty-metadata-3.1.1.jar]]></notes>
        <packageUrl regex="true">^pkg:maven/aws\.smithy\.kotlin/runtime-core@.*$</packageUrl>
        <cpe>cpe:/a:jetty:jetty_http_server</cpe>
    </suppress>
</suppressions>