[cleanup][owasp] Supress false positive netty-tcnative (apache#17282)

datastax · Aug 29, 2022 · 409bb12 · 409bb12
1 parent ac640d9
commit 409bb12
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/src/owasp-dependency-check-false-positives.xml b/src/owasp-dependency-check-false-positives.xml
@@ -54,6 +54,13 @@
     <packageUrl regex="true">^pkg:maven/io\.netty/netty\-tcnative\-classes@.*$</packageUrl>
     <cpe>cpe:/a:netty:netty</cpe>
   </suppress>
+  <suppress>
+    <notes><![CDATA[
+   file name: netty-tcnative-boringssl-static-2.0.52.Final-osx-aarch_64.jar
+   ]]></notes>
+    <packageUrl regex="true">^pkg:maven/io\.netty/netty\-tcnative\-boringssl\-static@.*$</packageUrl>
+    <cpe>cpe:/a:chromium_project:chromium</cpe>
+  </suppress>
   <suppress>
 <!--    Zookkeeper false positive about Jetty and commons-io-->
 <!--    https://github.com/apache/zookeeper/pull/1824-->