From ad68c4c5415d9316519f385e24483d9ea54824ff Mon Sep 17 00:00:00 2001
From: Oliver Weyhmueller <oliver@weyhmueller.de>
Date: Sun, 5 Jan 2025 20:02:23 +0100
Subject: [PATCH] chore: add dependency-check-suppressions and resolve sonar
 issues

---
 dependency-check-suppressions.xml | 3 +++
 pom.xml                           | 6 ++++--
 2 files changed, 7 insertions(+), 2 deletions(-)
 create mode 100644 dependency-check-suppressions.xml

diff --git a/dependency-check-suppressions.xml b/dependency-check-suppressions.xml
new file mode 100644
index 0000000..fbf9371
--- /dev/null
+++ b/dependency-check-suppressions.xml
@@ -0,0 +1,3 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
+</suppressions>
diff --git a/pom.xml b/pom.xml
index 7f33d85..769e806 100644
--- a/pom.xml
+++ b/pom.xml
@@ -341,7 +341,6 @@
                         </publishRegistry>
                     </docker>
                     <image>
-                        <!--<builder>dashaun/builder:tiny</builder>-->
                         <name>cr.w9r.dev/spring-boot/${project.artifactId}:${project.version}</name>
                         <publish>true</publish>
                     </image>
@@ -398,6 +397,10 @@
                     <nvdDatafeedUrl>https://vulnz.w9r.de/nvd/nvdcve-{0}.json.gz</nvdDatafeedUrl>
                     <nvdDatafeedServerId>vulnz</nvdDatafeedServerId>
                     <formats>HTML,XML,CSV,JSON,JUNIT,GITLAB</formats>
+                    <suppressionFiles>
+                        <suppressionFile>dependency-check-suppressions.xml</suppressionFile>
+                        <suppressionFile>https://w9r.dev/w9r.dev/dependency-check-suppressions/raw/branch/main/dependency-check-suppressions.xml</suppressionFile>
+                    </suppressionFiles>
                 </configuration>
                 <executions>
                     <execution>
@@ -515,7 +518,6 @@
                             <artifactId>spring-boot-maven-plugin</artifactId>
                             <configuration>
                                 <image>
-                                    <!--<builder>paketobuildpacks/builder-jammy-tiny:latest</builder>-->
                                     <builder>dashaun/builder:tiny</builder>
                                     <env>
                                         <BP_NATIVE_IMAGE>true</BP_NATIVE_IMAGE>