Apache/struts
1
0
Fork 0
mirror of https://github.com/apache/struts.git synced 2026-08-06 15:17:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

Suppresses some false positives on OWASP Dependency Check

Browse Source
This commit is contained in:
Lukasz Lenart
2017-11-27 08:19:15 +01:00
parent d36ec579fc
commit 5ef7687259
2 changed files with 22 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pom.xml
+3
View File
@@ -273,6 +273,9 @@
<artifactId>dependency-check-maven</artifactId>
<version>3.0.1</version>
<configuration>
<suppressionFiles>
<suppressionFile>src/etc/project-suppression.xml</suppressionFile>
</suppressionFiles>
<failBuildOnCVSS>8</failBuildOnCVSS>
<skipProvidedScope>true</skipProvidedScope>
<skipRuntimeScope>true</skipRuntimeScope>
src/etc/project-suppression.xml
+19
View File
@@ -0,0 +1,19 @@
<?xml version="1.0" encoding="UTF-8"?>
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.1.xsd">
<suppress>
<notes><![CDATA[
This suppresses false positives identified on Struts Annotations.
]]></notes>
<gav regex="true">org\.apache\.struts:struts\-annotations\:1\.0\.6</gav>
<cpe>cpe:/a:apache:struts:1.0.6</cpe>
</suppress>
<suppress>
<notes><![CDATA[
This suppresses false positives identified on Struts 1.
]]></notes>
<gav regex="true">org\.apache\.struts\:struts\-*:1\.3\.8</gav>
<cpe>cpe:/a:apache:struts:1.3.8</cpe>
<cpe>cpe:/a:apache:tiles:1.3.8</cpe>
<cpe>cpe:/a:apache:struts:1.3.8</cpe>
</suppress>
</suppressions>