Skip to content

fix(fp): FP per issue #5945#7272

Merged
jeremylong merged 1 commit intodependency-check:generatedSuppressionsfrom
chadlwilson:fix-axis2
Dec 24, 2024
Merged

fix(fp): FP per issue #5945#7272
jeremylong merged 1 commit intodependency-check:generatedSuppressionsfrom
chadlwilson:fix-axis2

Conversation

@chadlwilson
Copy link
Copy Markdown
Collaborator

Description of Change

Adds generic suppression to avoid axis 1.x issues (cpe cpe:2.3:a:apache:axis) being matched to axis 2 artifacts, which has its own CPE cpe:2.3:a:apache:axis2

Related issues

Have test cases been added to cover the new functionality?

N/A

Signed-off-by: Chad Wilson <chadw@thoughtworks.com>
Copy link
Copy Markdown
Collaborator

@jeremylong jeremylong left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@jeremylong jeremylong added this to the 12.0.0 milestone Dec 24, 2024
@jeremylong jeremylong merged commit 767778f into dependency-check:generatedSuppressions Dec 24, 2024
@chadlwilson chadlwilson deleted the fix-axis2 branch December 24, 2024 14:01
@jeremylong
Copy link
Copy Markdown
Collaborator

@chadlwilson does this update need to be made in the core suppression file as well? We occasionally copy the generated information into the base suppression file.

@chadlwilson
Copy link
Copy Markdown
Collaborator Author

Despite my best efforts issue #5945 didn't link. Possibly you have to be a maintainer to have that magic work :)

can you close that issue please?

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Jan 24, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants