Merge pull request wildfly#17818 from darranl/WFLY-19236

[WFLY-19236] Update the suppression of the CPE mapping for the org.wildfly.deployment:transformer component.
pferraro · Apr 15, 2024 · e33eecb · e33eecb
2 parents f7759f3 + eb50c94
commit e33eecb
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/sca-overrides/owasp-suppressions.xml b/sca-overrides/owasp-suppressions.xml
@@ -69,8 +69,10 @@
    <suppress>
       <notes><![CDATA[
       file name: transformer-7.0.0.Beta2.jar
+
+      [WFLY-19236] This component is independent of WildFly so should not be matched against WildFly CVEs.
       ]]></notes>
-      <packageUrl regex="true">^pkg:maven/org\.wildfly\.galleon\-plugins/transformer@.*$</packageUrl>
+      <packageUrl regex="true">^pkg:maven/org\.wildfly\.deployment/transformer@.*$</packageUrl>
       <cpe>cpe:/a:redhat:wildfly</cpe>
    </suppress>
    <suppress>