Skip to content

Commit b78316b

Browse files
authored
Suppress owasp misdetected CVEs (#10836)
1 parent f60af5d commit b78316b

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

buildscripts/dependency-check-suppressions.xml

+7
Original file line numberDiff line numberDiff line change
@@ -6,4 +6,11 @@
66
<packageUrl regex="true">^pkg:maven/io\.opentelemetry[./].*</packageUrl>
77
<vulnerabilityName regex="true">^CVE-.*</vulnerabilityName>
88
</suppress>
9+
<suppress>
10+
<!-- detected CVEs are for otel go and python -->
11+
<packageUrl regex="true">^pkg:com\.google\.cloud\.opentelemetry/detector-resources-support@.*</packageUrl>
12+
<vulnerabilityName>CVE-2023-43810</vulnerabilityName>
13+
<vulnerabilityName>CVE-2023-45142</vulnerabilityName>
14+
<vulnerabilityName>CVE-2023-47108</vulnerabilityName>
15+
</suppress>
916
</suppressions>

0 commit comments

Comments
 (0)