Suppress SnakeYaml detections
continuous-integration/drone/push Build is passing Details

This commit is contained in:
Bea 2023-01-16 08:14:26 +01:00
parent 3abb48ba60
commit f4fc8811ef
1 changed files with 10 additions and 3 deletions

View File

@ -2,9 +2,16 @@
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd"> <suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
<suppress> <suppress>
<notes><![CDATA[ <notes><![CDATA[
file name: snakeyaml-1.33.jar file name: snakeyaml-1.33.jar
]]></notes> ]]></notes>
<packageUrl regex="true">^pkg:maven/org\.yaml/snakeyaml@.*$</packageUrl> <packageUrl regex="true">^pkg:maven/org\.yaml/snakeyaml@.*$</packageUrl>
<vulnerabilityName>CVE-2022-1471</vulnerabilityName> <cve>CVE-2021-4235</cve>
</suppress>
<suppress>
<notes><![CDATA[
file name: snakeyaml-1.33.jar
]]></notes>
<packageUrl regex="true">^pkg:maven/org\.yaml/snakeyaml@.*$</packageUrl>
<cve>CVE-2022-3064</cve>
</suppress> </suppress>
</suppressions> </suppressions>