deps: ignore false positive

apache · Mar 3, 2023 · cbf578f · cbf578f
1 parent f1c7c5f
commit cbf578f
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/...heckstyle-rules/src/main/resources/tobago/dependency-check-suppression-for-tobago-2.x.xml b/...heckstyle-rules/src/main/resources/tobago/dependency-check-suppression-for-tobago-2.x.xml
@@ -17,4 +17,10 @@
     <notes><![CDATA[ file name: maven-shared-utils-3.3.4.jar ]]></notes>
     <packageUrl regex="true">^pkg:maven/org\.apache\.maven\.shared/maven\-shared\-utils@.*$</packageUrl>
     <cve>CVE-2021-4277</cve>
-  </suppress></suppressions>
+  </suppress>
+  <suppress>
+    <notes><![CDATA[ file name: guava-31.1-jre.jar ]]></notes>
+    <packageUrl regex="true">^pkg:maven/com\.google\.guava/guava@.*$</packageUrl>
+    <vulnerabilityName>CVE-2020-8908</vulnerabilityName>
+  </suppress>
+</suppressions>