Skip to content

Commit 61150ec

Browse files
authored
fix(fp): Suppress false positives across PyPi Sentry-adjacent libraries (#8058)
Signed-off-by: Chad Wilson <[email protected]>
1 parent 87c0271 commit 61150ec

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

generatedSuppressions.xml

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2524,6 +2524,14 @@ only pkg:maven/org.clojure:clojure@.* is the CPE cpe:/a:clojure:clojure
25242524
</suppress>
25252525
<suppress base="true">
25262526
<notes><![CDATA[
2527+
hand-curated better suppression for FP per issue #8057. The sentry server is/was only available on the specific
2528+
pypi package here. Not suppressed for other ecosystems as Sentry Server is still available open-source elsewhere.
2529+
]]></notes>
2530+
<packageUrl regex="true">^pkg:pypi/(?!sentry@).*$</packageUrl>
2531+
<cpe>cpe:/a:sentry:sentry:</cpe>
2532+
</suppress>
2533+
<suppress base="true">
2534+
<notes><![CDATA[
25272535
FP per issue #8051
25282536
]]></notes>
25292537
<packageUrl regex="true">^pkg:maven/org\.spdx/spdx-java-model-2_X@.*$</packageUrl>

0 commit comments

Comments
 (0)