Merge pull request #5054 from jeremylong/fp-liferay

fix: resolve false positive
jeremylong · Nov 16, 2022 · 36a0166 · 36a0166
2 parents 9350e49 + 9c65e63
commit 36a0166
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/core/src/main/resources/dependencycheck-base-suppression.xml b/core/src/main/resources/dependencycheck-base-suppression.xml
@@ -1084,6 +1084,15 @@
         <gav regex="true">^com\.liferay:org\.apache\.felix\.configadmin:.*$</gav>
         <cpe>cpe:/a:cm_project:cm</cpe>
     </suppress>
+    <suppress base="true">
+       <notes><![CDATA[
+       Suppresses false positives per issue #5048
+       ]]></notes>
+       <packageUrl regex="true">^pkg:maven/com\.liferay\.portal/com\.liferay\.util\.slf4j@.*$</packageUrl>
+       <cpe>cpe:/a:liferay:liferay</cpe>
+       <cpe>cpe:/a:liferay:liferay_portal</cpe>
+       <cpe>cpe:/a:liferay:portal</cpe>
+    </suppress>
     <suppress base="true">
         <notes><![CDATA[
         Suppresses false positives per issue #1585