chore: suppress dependency issue and bump axion-release-plugin

rakutentech · Aug 2, 2022 · cdcc521 · cdcc521
1 parent 7f2e43e
commit cdcc521
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 1 deletion.
diff --git a/build.gradle b/build.gradle
@@ -12,7 +12,7 @@ buildscript {
   dependencies {
     classpath "com.android.tools.build:gradle:$CONFIG.versions.android.plugin"
     classpath "org.jetbrains.kotlin:kotlin-gradle-plugin:$CONFIG.versions.kotlin"
-    classpath 'pl.allegro.tech.build:axion-release-plugin:1.13.1'
+    classpath 'pl.allegro.tech.build:axion-release-plugin:1.13.6'
     classpath 'com.jfrog.bintray.gradle:gradle-bintray-plugin:1.8.4'
     classpath 'org.owasp:dependency-check-gradle:7.1.0.1'
   }

diff --git a/dependency_check_suppressions.xml b/dependency_check_suppressions.xml
@@ -277,4 +277,11 @@
     <packageUrl regex="true">^pkg:maven/io\.github\.detekt\.sarif4k/sarif4k@.*$</packageUrl>
     <cve>CVE-2022-0272</cve>
   </suppress>
+  <suppress until="2022-09-30Z">
+    <notes><![CDATA[
+   file name: play-services-basement-17.0.0.aar
+   ]]></notes>
+    <packageUrl regex="true">^pkg:maven/com\.google\.android\.gms/play\-services\-basement@.*$</packageUrl>
+    <vulnerabilityName>CVE-2022-1799</vulnerabilityName>
+  </suppress>
 </suppressions>