diff options
| author | Albin <albin@mullvad.net> | 2022-12-27 11:10:33 +0100 |
|---|---|---|
| committer | Albin <albin@mullvad.net> | 2023-01-10 15:32:36 +0100 |
| commit | a476c8916579e70e9849f4eb12c45312e4b09aa0 (patch) | |
| tree | 9f6e141cc5cbf3108fec6437d35aea845ae9f720 /android/test/mockapi | |
| parent | 41bb7821cf66291712557db7d75a0ba3952b3889 (diff) | |
| download | mullvadvpn-a476c8916579e70e9849f4eb12c45312e4b09aa0.tar.xz mullvadvpn-a476c8916579e70e9849f4eb12c45312e4b09aa0.zip | |
Use common test project suppression
Diffstat (limited to 'android/test/mockapi')
| -rw-r--r-- | android/test/mockapi/build.gradle.kts | 2 | ||||
| -rw-r--r-- | android/test/mockapi/mockapi-suppression.xml | 31 |
2 files changed, 1 insertions, 32 deletions
diff --git a/android/test/mockapi/build.gradle.kts b/android/test/mockapi/build.gradle.kts index d464e2dc5a..7fd7634e63 100644 --- a/android/test/mockapi/build.gradle.kts +++ b/android/test/mockapi/build.gradle.kts @@ -42,7 +42,7 @@ configure<org.owasp.dependencycheck.gradle.extension.DependencyCheckExtension> { // path. The alternative would be to suppress specific CVEs, however that could potentially // result in suppressed CVEs in project compilation class path. skipConfigurations = listOf("lintClassPath") - suppressionFile = "$projectDir/mockapi-suppression.xml" + suppressionFile = "$projectDir/../test-suppression.xml" } dependencies { diff --git a/android/test/mockapi/mockapi-suppression.xml b/android/test/mockapi/mockapi-suppression.xml deleted file mode 100644 index 86e10bebb2..0000000000 --- a/android/test/mockapi/mockapi-suppression.xml +++ /dev/null @@ -1,31 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd"> - <suppress> - <notes><![CDATA[ - This CVE only affect Multiplatform Gradle Projects, which this project is not. - ]]></notes> - <cve>CVE-2022-24329</cve> - </suppress> - <suppress> - <notes><![CDATA[ - This CVE is a false positive as the description refers to a GO library (github.com/containers/storage). - ]]></notes> - <packageUrl regex="true">^pkg:maven/androidx\.test\.services/storage@.*$</packageUrl> - <cve>CVE-2021-20291</cve> - </suppress> - <suppress> - <notes><![CDATA[ - This CVE is a false positive as javalite isn't affected according to: - https://cloud.google.com/support/bulletins#gcp-2022-001 - ]]></notes> - <packageUrl regex="true">^pkg:maven/com\.google\.protobuf/protobuf\-javalite@.*$</packageUrl> - <cve>CVE-2021-22569</cve> - </suppress> - <suppress> - <notes><![CDATA[ - This CVE is tracked externally and is therefore suppressed in the automatic audit checks. - ]]></notes> - <packageUrl regex="true">^pkg:maven/com\.google\.protobuf/protobuf\-javalite@.*$</packageUrl> - <cve>CVE-2022-3171</cve> - </suppress> -</suppressions> |