From 5dd60dbd748e446f8da396b448a5bb16a2ae6902 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Nicol=C3=B2=20Boschi?= <boschi1997@gmail.com>
Date: Wed, 22 Dec 2021 16:46:03 +0100
Subject: [PATCH] [owasp] add suppression for pulsar-package-bookkeeper-storage
 (#13451)

---
 src/owasp-dependency-check-false-positives.xml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/owasp-dependency-check-false-positives.xml b/src/owasp-dependency-check-false-positives.xml
index 28e53b5d0b876..6cc464e637623 100644
--- a/src/owasp-dependency-check-false-positives.xml
+++ b/src/owasp-dependency-check-false-positives.xml
@@ -32,6 +32,11 @@
     <gav regex="true">org\.apache\.pulsar:.*</gav>
     <cpe>cpe:/a:apache:zookeeper</cpe>
   </suppress>
+  <suppress>
+    <notes>pulsar-package-bookkeeper-storage gets mixed with bookkeeper.</notes>
+    <gav regex="true">org\.apache\.pulsar:.*</gav>
+    <cpe>cpe:/a:apache:bookkeeper</cpe>
+  </suppress>
   <suppress>
     <notes>kubernetes client doesn't contain CVE-2020-8554</notes>
     <gav regex="true">io\.kubernetes:.*</gav>