Compare commits
2 Commits
0d49fbe0da
...
master
| Author | SHA1 | Date | |
|---|---|---|---|
|
1d2ed0153a
|
|||
|
3fec7b2755
|
16
dependencySuppression.xml
Normal file
16
dependencySuppression.xml
Normal file
@@ -0,0 +1,16 @@
|
|||||||
|
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
|
||||||
|
<suppress>
|
||||||
|
<notes><![CDATA[
|
||||||
|
Spring Boot devs say this is not a problem
|
||||||
|
]]></notes>
|
||||||
|
<packageUrl regex="true">^pkg:maven/org\.springframework/spring\-web@.*$</packageUrl>
|
||||||
|
<cve>CVE-2016-1000027</cve>
|
||||||
|
</suppress>
|
||||||
|
<suppress>
|
||||||
|
<notes><![CDATA[
|
||||||
|
False positive, CVE only affects plugins and devtools are not included in production builds
|
||||||
|
]]></notes>
|
||||||
|
<packageUrl regex="true">^pkg:maven/org\.springframework\.boot/spring-boot-devtools@.*$</packageUrl>
|
||||||
|
<cve>CVE-2022-31691</cve>
|
||||||
|
</suppress>
|
||||||
|
</suppressions>
|
||||||
6
pom.xml
6
pom.xml
@@ -6,7 +6,7 @@
|
|||||||
<groupId>com.mattrixwv.cipherstream</groupId>
|
<groupId>com.mattrixwv.cipherstream</groupId>
|
||||||
<artifactId>cipherstream-api</artifactId>
|
<artifactId>cipherstream-api</artifactId>
|
||||||
<packaging>jar</packaging>
|
<packaging>jar</packaging>
|
||||||
<version>1.2.0-SNAPSHOT</version>
|
<version>1.2.0</version>
|
||||||
<name>CipherStream API</name>
|
<name>CipherStream API</name>
|
||||||
<url>https://api.cipherstream.mattrixwv.com</url>
|
<url>https://api.cipherstream.mattrixwv.com</url>
|
||||||
|
|
||||||
@@ -71,7 +71,6 @@
|
|||||||
<groupId>org.springframework.boot</groupId>
|
<groupId>org.springframework.boot</groupId>
|
||||||
<artifactId>spring-boot-devtools</artifactId>
|
<artifactId>spring-boot-devtools</artifactId>
|
||||||
<optional>true</optional>
|
<optional>true</optional>
|
||||||
<scope>runtime</scope>
|
|
||||||
</dependency>
|
</dependency>
|
||||||
<dependency>
|
<dependency>
|
||||||
<groupId>org.springframework.boot</groupId>
|
<groupId>org.springframework.boot</groupId>
|
||||||
@@ -342,6 +341,9 @@
|
|||||||
<nvdApiServerId>nvd</nvdApiServerId>
|
<nvdApiServerId>nvd</nvdApiServerId>
|
||||||
<failBuildOnCVSS>7</failBuildOnCVSS>
|
<failBuildOnCVSS>7</failBuildOnCVSS>
|
||||||
<ossIndexServerId>ossindex</ossIndexServerId>
|
<ossIndexServerId>ossindex</ossIndexServerId>
|
||||||
|
<suppressionFiles>
|
||||||
|
<suppressionFile>${project.basedir}/dependencySuppression.xml</suppressionFile>
|
||||||
|
</suppressionFiles>
|
||||||
</configuration>
|
</configuration>
|
||||||
</plugin>
|
</plugin>
|
||||||
</plugins>
|
</plugins>
|
||||||
|
|||||||
Reference in New Issue
Block a user