Avoid noise from non-prod libraries

thoughtworks · Sep 27, 2023 · cb0b903 · cb0b903
1 parent 6a781e3
commit cb0b903
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 11 deletions.
diff --git a/build-config/dependency-check-suppressions.xml b/build-config/dependency-check-suppressions.xml
@@ -1,15 +1,6 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
 
-  <suppress>
-    <notes><![CDATA[
-    Recce doesn't use the H2 console so is not affected by these apparent vulnerabilities.
-    ]]></notes>
-    <packageUrl regex="true">^pkg:maven/com\.h2database/h2@.*$</packageUrl>
-    <cve>CVE-2018-14335</cve>
-    <cve>CVE-2022-45868</cve>
-  </suppress>
-
   <suppress>
     <notes><![CDATA[
     This is a false positive "noise" CVE: https://github.com/FasterXML/jackson-databind/issues/3972

diff --git a/build.gradle.kts b/build.gradle.kts
@@ -167,8 +167,7 @@ dependencies {
 dependencyCheck {
     failBuildOnCVSS = 1f
     suppressionFile = "build-config/dependency-check-suppressions.xml"
-    scanConfigurations = listOf("runtimeClasspath", "testRuntimeClasspath")
-    skipTestGroups = false
+    scanConfigurations = listOf("runtimeClasspath")
     analyzers.assemblyEnabled = false // Unneeded, and creates warning noise
 }