diff --git a/build-config/dependency-check-suppressions.xml b/build-config/dependency-check-suppressions.xml
index ab50d72e..e0ad6394 100644
--- a/build-config/dependency-check-suppressions.xml
+++ b/build-config/dependency-check-suppressions.xml
@@ -1,15 +1,6 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
 
-  <suppress>
-    <notes><![CDATA[
-    Recce doesn't use the H2 console so is not affected by these apparent vulnerabilities.
-    ]]></notes>
-    <packageUrl regex="true">^pkg:maven/com\.h2database/h2@.*$</packageUrl>
-    <cve>CVE-2018-14335</cve>
-    <cve>CVE-2022-45868</cve>
-  </suppress>
-
   <suppress>
     <notes><![CDATA[
     This is a false positive "noise" CVE: https://github.com/FasterXML/jackson-databind/issues/3972
diff --git a/build.gradle.kts b/build.gradle.kts
index d42cdbff..77d02fe2 100644
--- a/build.gradle.kts
+++ b/build.gradle.kts
@@ -167,8 +167,7 @@ dependencies {
 dependencyCheck {
     failBuildOnCVSS = 1f
     suppressionFile = "build-config/dependency-check-suppressions.xml"
-    scanConfigurations = listOf("runtimeClasspath", "testRuntimeClasspath")
-    skipTestGroups = false
+    scanConfigurations = listOf("runtimeClasspath")
     analyzers.assemblyEnabled = false // Unneeded, and creates warning noise
 }