Suppress vulnerabilities file

6 years ago · f3cc48f8cb
parent 51f17675d5
commit f3cc48f8cb
2 changed files with 4 additions and 2 deletions
--- a/airsonic-main/cve-suppressed.xml
+++ b/airsonic-main/cve-suppressed.xml
@ -1,5 +1,5 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.1.xsd">
+<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.2.xsd">
    <suppress>
        <notes><![CDATA[RC4 vulnerability in ssl. We don't use ssl at the application container level]]></notes>
        <gav regex="true">^.*$</gav>
--- a/pom.xml
+++ b/pom.xml
@ -213,7 +213,9 @@
                    <inherited>true</inherited>
                    <configuration>
                        <failBuildOnAnyVulnerability>true</failBuildOnAnyVulnerability>
+                        <suppressionFiles>
                            <suppressionFile>${project.basedir}/cve-suppressed.xml</suppressionFile>
+                        </suppressionFiles>
                    </configuration>
                    <executions>
                        <execution>