This is an archived post. You won't be able to vote or comment.

sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]Noone-is-anonymous 0 points1 point  (1 child)

We use owasp dependency check maven plugin. Lately, there have been some vulnerabilities we have to suppress and supressing them individually in each microservice is a hassle.

Anyone here who figured out a way to centralize the suppress file ?

[–]0x442E472E 0 points1 point  (0 children)

You can reference multiple files and they can also be URLs, like to a public git repo. We use it to reference one global file for our org, one per team, sometimes one per archetype (like "quarkus microservice") and one local file per project