Skip to content

Commit

Permalink
chore: add suppressions and local maven support (#110)
Browse files Browse the repository at this point in the history
  • Loading branch information
sjungling authored Aug 12, 2024
1 parent 26b2e9a commit 56e742f
Show file tree
Hide file tree
Showing 2 changed files with 15 additions and 7 deletions.
8 changes: 8 additions & 0 deletions settings.gradle.kts
Original file line number Diff line number Diff line change
@@ -1,4 +1,12 @@
rootProject.name = "rewrite-micronaut"
pluginManagement {
repositories {
mavenLocal()
gradlePluginPortal()
}
}



plugins {
id("com.gradle.develocity") version "latest.release"
Expand Down
14 changes: 7 additions & 7 deletions suppressions.xml
Original file line number Diff line number Diff line change
@@ -1,12 +1,12 @@
<?xml version="1.0" encoding="UTF-8"?>
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
<suppress>
<suppress until="2024-09-25Z">
<notes><![CDATA[
file name: snakeyaml-1.33.jar
Severity: HIGH
False positive: We are not parsing untrusted user input. Not used directly in this repository.
]]></notes>
<packageUrl regex="true">^pkg:maven/org\.yaml/snakeyaml@.*$</packageUrl>
<cve>CVE-2022-1471</cve>
file name: micronaut-http-server-netty-2.5.13.jar
sev: HIGH
reason: False positive. Reference only
]]></notes>
<sha1>02b015ea87093f1ff92ccdb7fb143ef0172dbfa6</sha1>
<cpe>cpe:/a:netty:netty</cpe>
</suppress>
</suppressions>

0 comments on commit 56e742f

Please sign in to comment.