owasp-suppressions.xml

<?xml version="1.0" encoding="UTF-8"?>

<!--
SPDX-FileCopyrightText: 2017-2020 City of Espoo

SPDX-License-Identifier: LGPL-2.1-or-later
-->

<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
    <suppress>
        <notes><![CDATA[
        Misidentification. The checkstyle reporter for Ktlint version x.y is not the same as the actual checkstyle library version x.y.
       ]]></notes>
       <packageUrl regex="true">^pkg:maven/com\.pinterest\.ktlint/ktlint\-cli\-reporter\-checkstyle@.*$</packageUrl>
       <cpe>cpe:/a:checkstyle:checkstyle</cpe>
    </suppress>
    <suppress>
       <notes><![CDATA[
       Misidentification
       ]]></notes>
       <packageUrl regex="true">^pkg:maven/org\.apache\.tomcat/tomcat-jaspic-api@10\.1\.31$</packageUrl>
       <cpe>cpe:/a:apache:tomcat:3.0</cpe>
    </suppress>
    <suppress>
        <notes><![CDATA[
        Misidentification
        ]]></notes>
        <packageUrl regex="true">^pkg:maven/org\.apache\.tomcat/tomcat-jsp-api@10\.1\.33$</packageUrl>
        <cpe>cpe:/a:apache:tomcat:3.1</cpe>
    </suppress>
</suppressions>