From: Malena Ebert <malena.ebert@sonarsource.com>
Date: Fri, 2 Oct 2020 14:31:29 +0000 (+0200)
Subject: Suppress false positive match of alm-gallery-client
X-Git-Tag: 8.5.0.37579~1
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=de78dd9a451b1a8b261aa769a5b9b108fbb9d164;p=sonarqube.git

Suppress false positive match of alm-gallery-client
---

diff --git a/owasp-suppressions.xml b/owasp-suppressions.xml
index f4e3114039a..96f7512c91f 100644
--- a/owasp-suppressions.xml
+++ b/owasp-suppressions.xml
@@ -187,4 +187,14 @@
     <packageUrl regex="true">pkg:maven/com\.jcraft/jsch\.agentproxy\..*@0.0.7</packageUrl>
     <cve>CVE-2016-5725</cve>
   </suppress>
+
+  <suppress>
+    <notes>
+      <![CDATA[
+        file name: alm-gallery-client-1.0.2.jar will be matched to a wrong cpe string
+      ]]>
+    </notes>
+    <packageUrl regex="true">^pkg:maven/com\.sonarsource\.vsts/alm\-gallery\-client@.*$</packageUrl>
+    <cpe>cpe:/a:gallery:gallery</cpe>
+  </suppress>
 </suppressions>