[struts] branch master updated: Suppresses some false positives on OWASP Dependency Check

[lukaszlenart]

This is an automated email from the ASF dual-hosted git repository.

lukaszlenart pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/struts.git


The following commit(s) were added to refs/heads/master by this push:
     new 5ef7687  Suppresses some false positives on OWASP Dependency Check
5ef7687 is described below

commit 5ef76872595f00a0d7623e590f012a451615db65
Author: Lukasz Lenart <lukaszlen...@apache.org>
AuthorDate: Mon Nov 27 08:19:15 2017 +0100

    Suppresses some false positives on OWASP Dependency Check
---
 pom.xml                         |  3 +++
 src/etc/project-suppression.xml | 19 +++++++++++++++++++
 2 files changed, 22 insertions(+)

diff --git a/pom.xml b/pom.xml
index 222a2d1..5843f02 100644
--- a/pom.xml
+++ b/pom.xml
@@ -273,6 +273,9 @@
                     <artifactId>dependency-check-maven</artifactId>
                     <version>3.0.1</version>
                     <configuration>
+                        <suppressionFiles>
+                            
<suppressionFile>src/etc/project-suppression.xml</suppressionFile>
+                        </suppressionFiles>
                         <failBuildOnCVSS>8</failBuildOnCVSS>
                         <skipProvidedScope>true</skipProvidedScope>
                         <skipRuntimeScope>true</skipRuntimeScope>
diff --git a/src/etc/project-suppression.xml b/src/etc/project-suppression.xml
new file mode 100644
index 0000000..2c2ac0b
--- /dev/null
+++ b/src/etc/project-suppression.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<suppressions 
xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.1.xsd";>
+    <suppress>
+        <notes><![CDATA[
+        This suppresses false positives identified on Struts Annotations.
+        ]]></notes>
+        <gav 
regex="true">org\.apache\.struts:struts\-annotations\:1\.0\.6</gav>
+        <cpe>cpe:/a:apache:struts:1.0.6</cpe>
+    </suppress>
+    <suppress>
+        <notes><![CDATA[
+        This suppresses false positives identified on Struts 1.
+        ]]></notes>
+        <gav regex="true">org\.apache\.struts\:struts\-*:1\.3\.8</gav>
+        <cpe>cpe:/a:apache:struts:1.3.8</cpe>
+        <cpe>cpe:/a:apache:tiles:1.3.8</cpe>
+        <cpe>cpe:/a:apache:struts:1.3.8</cpe>
+    </suppress>
+</suppressions>
\ No newline at end of file

-- 
To stop receiving notification emails like this one, please contact
['"commits@struts.apache.org" <commits@struts.apache.org>'].