From 5b63db651946913e3ec201cef38523331c030c4e Mon Sep 17 00:00:00 2001
From: Joe Di Pol <joe.dipol@oracle.com>
Date: Mon, 29 Jul 2024 08:39:23 -0700
Subject: [PATCH] Add suppression for graalvm compiler

---
 etc/dependency-check-suppression.xml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/etc/dependency-check-suppression.xml b/etc/dependency-check-suppression.xml
index 8e64f6fc6d1..889c4c35533 100644
--- a/etc/dependency-check-suppression.xml
+++ b/etc/dependency-check-suppression.xml
@@ -113,6 +113,16 @@
    <vulnerabilityName>CVE-2024-20932</vulnerabilityName>
 </suppress>
 
+<!-- This low priority CVE does not apply to our use of the graalvm sdk.
+-->
+<suppress>
+   <notes><![CDATA[
+   file name: graal-sdk-22.3.0.jar
+   ]]></notes>
+   <packageUrl regex="true">^pkg:maven/org\.graalvm\.sdk/graal-sdk@.*$</packageUrl>
+   <vulnerabilityName>CVE-2024-21138</vulnerabilityName>
+</suppress>
+
 <!-- 
     This CVE is being disputed by the Jackson project and the community seems in agreement that this
     CVE should be rejected. We are suppressing this for now to reduce noise in our scan and will