From 0295e233f4f4d6e8b5301d944f32f22bb34d5aef Mon Sep 17 00:00:00 2001
From: Joe Di Pol <joe.dipol@oracle.com>
Date: Tue, 11 Feb 2025 08:00:13 -0800
Subject: [PATCH] Suppress graal-sdk fp

---
 etc/dependency-check-suppression.xml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/etc/dependency-check-suppression.xml b/etc/dependency-check-suppression.xml
index 921d57fec2a..6d1cc7c04ae 100644
--- a/etc/dependency-check-suppression.xml
+++ b/etc/dependency-check-suppression.xml
@@ -83,6 +83,13 @@ https://github.com/jeremylong/DependencyCheck/issues/7019
    <packageUrl regex="true">^pkg:maven/org\.graalvm\.sdk/graal\-sdk@.*$</packageUrl>
    <vulnerabilityName>CVE-2023-22006</vulnerabilityName>
 </suppress>
+<suppress>
+   <notes><![CDATA[
+   file name: graal-sdk-21.3.0.jar
+   ]]></notes>
+   <packageUrl regex="true">^pkg:maven/org\.graalvm\.sdk/graal-sdk@.*$</packageUrl>
+   <vulnerabilityName>CVE-2024-21085</vulnerabilityName>
+</suppress>
 
 <!--
     This is a FP. We have upgrade jgit to a fixed version, but it is still getting flagged.