From cb0b90357536af7643ebd900bdba3731219eebc5 Mon Sep 17 00:00:00 2001
From: Chad Wilson <chadw@thoughtworks.com>
Date: Wed, 27 Sep 2023 13:13:11 +0800
Subject: [PATCH] Avoid noise from non-prod libraries

---
 build-config/dependency-check-suppressions.xml | 9 ---------
 build.gradle.kts                               | 3 +--
 2 files changed, 1 insertion(+), 11 deletions(-)

diff --git a/build-config/dependency-check-suppressions.xml b/build-config/dependency-check-suppressions.xml
index ab50d72e..e0ad6394 100644
--- a/build-config/dependency-check-suppressions.xml
+++ b/build-config/dependency-check-suppressions.xml
@@ -1,15 +1,6 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
 
-  <suppress>
-    <notes><![CDATA[
-    Recce doesn't use the H2 console so is not affected by these apparent vulnerabilities.
-    ]]></notes>
-    <packageUrl regex="true">^pkg:maven/com\.h2database/h2@.*$</packageUrl>
-    <cve>CVE-2018-14335</cve>
-    <cve>CVE-2022-45868</cve>
-  </suppress>
-
   <suppress>
     <notes><![CDATA[
     This is a false positive "noise" CVE: https://github.com/FasterXML/jackson-databind/issues/3972
diff --git a/build.gradle.kts b/build.gradle.kts
index d42cdbff..77d02fe2 100644
--- a/build.gradle.kts
+++ b/build.gradle.kts
@@ -167,8 +167,7 @@ dependencies {
 dependencyCheck {
     failBuildOnCVSS = 1f
     suppressionFile = "build-config/dependency-check-suppressions.xml"
-    scanConfigurations = listOf("runtimeClasspath", "testRuntimeClasspath")
-    skipTestGroups = false
+    scanConfigurations = listOf("runtimeClasspath")
     analyzers.assemblyEnabled = false // Unneeded, and creates warning noise
 }