From 5ef76872595f00a0d7623e590f012a451615db65 Mon Sep 17 00:00:00 2001
From: Lukasz Lenart <lukaszlenart@apache.org>
Date: Mon, 27 Nov 2017 08:19:15 +0100
Subject: [PATCH] Suppresses some false positives on OWASP Dependency Check

---
 pom.xml                         |  3 +++
 src/etc/project-suppression.xml | 19 +++++++++++++++++++
 2 files changed, 22 insertions(+)
 create mode 100644 src/etc/project-suppression.xml

diff --git a/pom.xml b/pom.xml
index 222a2d11f..5843f02d8 100644
--- a/pom.xml
+++ b/pom.xml
@@ -273,6 +273,9 @@
                     <artifactId>dependency-check-maven</artifactId>
                     <version>3.0.1</version>
                     <configuration>
+                        <suppressionFiles>
+                            <suppressionFile>src/etc/project-suppression.xml</suppressionFile>
+                        </suppressionFiles>
                         <failBuildOnCVSS>8</failBuildOnCVSS>
                         <skipProvidedScope>true</skipProvidedScope>
                         <skipRuntimeScope>true</skipRuntimeScope>
diff --git a/src/etc/project-suppression.xml b/src/etc/project-suppression.xml
new file mode 100644
index 000000000..2c2ac0b39
--- /dev/null
+++ b/src/etc/project-suppression.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.1.xsd">
+    <suppress>
+        <notes><![CDATA[
+        This suppresses false positives identified on Struts Annotations.
+        ]]></notes>
+        <gav regex="true">org\.apache\.struts:struts\-annotations\:1\.0\.6</gav>
+        <cpe>cpe:/a:apache:struts:1.0.6</cpe>
+    </suppress>
+    <suppress>
+        <notes><![CDATA[
+        This suppresses false positives identified on Struts 1.
+        ]]></notes>
+        <gav regex="true">org\.apache\.struts\:struts\-*:1\.3\.8</gav>
+        <cpe>cpe:/a:apache:struts:1.3.8</cpe>
+        <cpe>cpe:/a:apache:tiles:1.3.8</cpe>
+        <cpe>cpe:/a:apache:struts:1.3.8</cpe>
+    </suppress>
+</suppressions>
\ No newline at end of file