Skip to content

Commit 5b44f29

Browse files
committed
Suppress CVE-2023-35116 as it is a false-positive per issue jeremylong/DependencyCheck#5779
1 parent 7d49ba1 commit 5b44f29

File tree

2 files changed

+8
-2
lines changed

2 files changed

+8
-2
lines changed

pom.xml

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -115,8 +115,6 @@
115115
<version>${quarkus.platform.version}</version>
116116
<configuration>
117117
<skip>${quarkus-maven-plugin.skip}</skip>
118-
<!-- TODO: Remove when https://github.com/quarkusio/quarkus/pull/34454 is available -->
119-
<skipOriginalJarRename>true</skipOriginalJarRename>
120118
</configuration>
121119
<executions>
122120
<execution>
@@ -147,6 +145,7 @@
147145
<failBuildOnCVSS>0</failBuildOnCVSS>
148146
<formats>${dependency-check-maven.formats}</formats>
149147
<skip>${dependency-check-maven.skip}</skip>
148+
<suppressionFile>src/test/resources/owasp-dependency-check.xml</suppressionFile>
150149
</configuration>
151150
<executions>
152151
<execution>
Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
<?xml version="1.0" encoding="UTF-8"?>
2+
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
3+
<suppress>
4+
<notes>False-Positive per issue https://github.com/jeremylong/DependencyCheck/issues/5779</notes>
5+
<cve>CVE-2023-35116</cve>
6+
</suppress>
7+
</suppressions>

0 commit comments

Comments
 (0)