Suppress false positives for mongdb and mysql support

barchetta · Jan 8, 2024 · aeee59a · aeee59a
1 parent 7d2a151
commit aeee59a
Showing 1 changed file with 20 additions and 0 deletions.
diff --git a/etc/dependency-check-suppression.xml b/etc/dependency-check-suppression.xml
@@ -227,4 +227,24 @@
    <cve>CVE-2023-28360</cve>
 </suppress>
 
+<!-- False Positives. This was identifying Helidon's dbclient mongodb support artifact with MongoDB itself -->
+<suppress>
+   <notes><![CDATA[
+   file name: io.helidon.dbclient:helidon-dbclient-mongodb:4.0.0-SNAPSHOT
+   ]]></notes>
+   <packageUrl regex="true">^pkg:maven/io\.helidon\.dbclient/helidon\-dbclient\-mongodb@.*$</packageUrl>
+   <cpe>cpe:/a:mongodb:mongodb</cpe>
+</suppress>
+
+
+
+<!-- False Positives. This was identifying Helidon's mysql support artifact with MySQL itself -->
+<suppress>
+   <notes><![CDATA[
+   file name: io.helidon.integrations.db:helidon-integrations-db-mysql:4.0.0-SNAPSHOT
+   ]]></notes>
+   <packageUrl regex="true">^pkg:maven/io\.helidon\.integrations\.db/helidon\-integrations\-db\-mysql@.*$</packageUrl>
+   <cpe>cpe:/a:mysql:mysql</cpe>
+</suppress>
+
 </suppressions>