[myfaces-build-tools] branch main updated: deps: ignore false positive

[lo...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

lofwyr pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/myfaces-build-tools.git


The following commit(s) were added to refs/heads/main by this push:
     new cbf578fb deps: ignore false positive
cbf578fb is described below

commit cbf578fb48e7ad730531e2b6179097ac9a8e1193
Author: Udo Schnurpfeil <ud...@irian.eu>
AuthorDate: Fri Mar 3 11:34:23 2023 +0100

    deps: ignore false positive
---
 .../tobago/dependency-check-suppression-for-tobago-2.x.xml        | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/other/checkstyle-rules/src/main/resources/tobago/dependency-check-suppression-for-tobago-2.x.xml b/other/checkstyle-rules/src/main/resources/tobago/dependency-check-suppression-for-tobago-2.x.xml
index d913e06b..388a8ce9 100644
--- a/other/checkstyle-rules/src/main/resources/tobago/dependency-check-suppression-for-tobago-2.x.xml
+++ b/other/checkstyle-rules/src/main/resources/tobago/dependency-check-suppression-for-tobago-2.x.xml
@@ -17,4 +17,10 @@
     <notes><![CDATA[ file name: maven-shared-utils-3.3.4.jar ]]></notes>
     <packageUrl regex="true">^pkg:maven/org\.apache\.maven\.shared/maven\-shared\-utils@.*$</packageUrl>
     <cve>CVE-2021-4277</cve>
-  </suppress></suppressions>
+  </suppress>
+  <suppress>
+    <notes><![CDATA[ file name: guava-31.1-jre.jar ]]></notes>
+    <packageUrl regex="true">^pkg:maven/com\.google\.guava/guava@.*$</packageUrl>
+    <vulnerabilityName>CVE-2020-8908</vulnerabilityName>
+  </suppress>
+</suppressions>