[myfaces-build-tools] branch master updated: feat: CVE suppression for Tobago 5

[hn...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

hnoeth pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/myfaces-build-tools.git


The following commit(s) were added to refs/heads/master by this push:
     new a2d7c5f  feat: CVE suppression for Tobago 5
     new dbf7b0a  Merge pull request #10 from henningn/suppressCVE-2021-28170
a2d7c5f is described below

commit a2d7c5f0db51b21850fa09b4c33cb7c9ebb98427
Author: Henning Noeth <hn...@apache.org>
AuthorDate: Mon Aug 16 12:19:49 2021 +0200

    feat: CVE suppression for Tobago 5
    
    jakarta.el-api only used with scope "provided"
---
 .../tobago/dependency-check-suppression-for-tobago-5.x.xml        | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/other/checkstyle-rules/src/main/resources/tobago/dependency-check-suppression-for-tobago-5.x.xml b/other/checkstyle-rules/src/main/resources/tobago/dependency-check-suppression-for-tobago-5.x.xml
index 148e747..a876900 100644
--- a/other/checkstyle-rules/src/main/resources/tobago/dependency-check-suppression-for-tobago-5.x.xml
+++ b/other/checkstyle-rules/src/main/resources/tobago/dependency-check-suppression-for-tobago-5.x.xml
@@ -21,9 +21,15 @@
     <notes><![CDATA[ file name: trim-newlines:4.0.1 ]]></notes>
     <packageUrl regex="true">^pkg:npm/trim\-newlines@.*$</packageUrl>
     <vulnerabilityName>1753</vulnerabilityName>
-  </suppress>  <suppress>
+  </suppress>
+  <suppress>
     <notes><![CDATA[ file name: trim-newlines:1.0.0 ]]></notes>
     <packageUrl regex="true">^pkg:npm/trim\-newlines@.*$</packageUrl>
     <cpe>cpe:/a:trim-newlines_project:trim-newlines</cpe>
   </suppress>
+  <suppress>
+    <notes><![CDATA[ file name: jakarta.el-api-3.0.3.jar ]]></notes>
+    <packageUrl regex="true">^pkg:maven/jakarta\.el/jakarta\.el-api@.*$</packageUrl>
+    <cve>CVE-2021-28170</cve>
+  </suppress>
 </suppressions>