Suppress SnakeYaml detections
continuous-integration/drone/push Build is passing Details

This commit is contained in:
Bea 2023-01-16 08:14:26 +01:00
parent 3abb48ba60
commit f4fc8811ef
1 changed files with 10 additions and 3 deletions

View File

@ -2,9 +2,16 @@
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
<suppress>
<notes><![CDATA[
file name: snakeyaml-1.33.jar
]]></notes>
file name: snakeyaml-1.33.jar
]]></notes>
<packageUrl regex="true">^pkg:maven/org\.yaml/snakeyaml@.*$</packageUrl>
<vulnerabilityName>CVE-2022-1471</vulnerabilityName>
<cve>CVE-2021-4235</cve>
</suppress>
<suppress>
<notes><![CDATA[
file name: snakeyaml-1.33.jar
]]></notes>
<packageUrl regex="true">^pkg:maven/org\.yaml/snakeyaml@.*$</packageUrl>
<cve>CVE-2022-3064</cve>
</suppress>
</suppressions>