PDFBOX-6184: add suppression file for false positive

THausherr · THausherr · commit f09e1783dfc4 · 2026-03-26T08:32:10.000Z
git-svn-id: https://svn.apache.org/repos/asf/pdfbox/trunk@1932573 13f79535-47bb-0310-9956-ffa450edef68
diff --git a/parent/pom.xml b/parent/pom.xml
@@ -312,6 +312,7 @@
                       <ossindexAnalyzerEnabled>false</ossindexAnalyzerEnabled>
                       <!-- https://github.com/jeremylong/DependencyCheck/issues/1574 -->
                       <skipSystemScope>true</skipSystemScope>
+                      <suppressionFile>suppressions.xml</suppressionFile>
                   </configuration>
                   <executions>
                       <execution>
diff --git a/suppressions.xml b/suppressions.xml
@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.4.xsd">
+	<suppress>
+	   <packageUrl regex="true">^pkg:maven/org\.apache\.pdfbox/jbig2-imageio@.*$</packageUrl>
+	   <cpe>cpe:/a:apache:pdfbox</cpe>
+	</suppress>
+</suppressions>
