Skip to content

Commit

Permalink
enable the swift resolved analyzer per #3735
Browse files Browse the repository at this point in the history
  • Loading branch information
jeremylong committed Oct 31, 2021
1 parent 7621650 commit 80cc56f
Show file tree
Hide file tree
Showing 2 changed files with 11 additions and 3 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -38,6 +38,7 @@ org.owasp.dependencycheck.analyzer.ElixirMixAuditAnalyzer
org.owasp.dependencycheck.analyzer.ComposerLockAnalyzer
org.owasp.dependencycheck.analyzer.CocoaPodsAnalyzer
org.owasp.dependencycheck.analyzer.SwiftPackageManagerAnalyzer
org.owasp.dependencycheck.analyzer.SwiftPackageResolvedAnalyzer
org.owasp.dependencycheck.analyzer.VersionFilterAnalyzer
org.owasp.dependencycheck.analyzer.OssIndexAnalyzer
org.owasp.dependencycheck.analyzer.PerlCpanfileAnalyzer
13 changes: 10 additions & 3 deletions core/src/main/resources/dependencycheck-base-suppression.xml
Original file line number Diff line number Diff line change
@@ -1,5 +1,12 @@
<?xml version="1.0" encoding="UTF-8"?>
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
<suppress base="true">
<notes><![CDATA[
swift-log is not swift...
]]></notes>
<packageUrl regex="true">^pkg:swift/swift\-log@.*$</packageUrl>
<cpe>cpe:/a:apple:swift</cpe>
</suppress>
<suppress base="true">
<notes><![CDATA[
FP in jetty as jetty-jakarta-servlet-api is identified as a low version jetty
Expand Down Expand Up @@ -1069,11 +1076,11 @@
<cpe>cpe:/a:openid:openid_connect</cpe>
</suppress>
<suppress base="true">
<notes><![CDATA[
<notes><![CDATA[
Suppresses false positives per issue #3345
]]></notes>
<packageUrl regex="true">^pkg:maven/com\.azure/azure\-core\-http\-netty@.*$</packageUrl>
<cpe>cpe:/a:netty:netty</cpe>
<packageUrl regex="true">^pkg:maven/com\.azure/azure\-core\-http\-netty@.*$</packageUrl>
<cpe>cpe:/a:netty:netty</cpe>
</suppress>
<suppress base="true">
<notes><![CDATA[
Expand Down

0 comments on commit 80cc56f

Please sign in to comment.