Marco Lackovic

Affecting also: ``` jakarta.jms-api-2.0.3.jar (pkg:maven/jakarta.jms/[email protected], cpe:2.3:a:projects_project:projects:2.0.3:*:*:*:*:*:*:*) : CVE-2022-31569 spring-hateoas-1.5.1.jar (pkg:maven/org.springframework.hateoas/[email protected], cpe:2.3:a:projects_project:projects:1.5.1:*:*:*:*:*:*:*) : CVE-2022-31569 ```

Is it safe to assume then that these are false positives? Any idea on how their suppression rules would look like?

> Even after using the suppressions above, I am still getting the following: > > Error: One or more dependencies were identified with vulnerabilities that have a CVSS score greater...

> Suppression rule: > > ``` > > FP per issue #4634 > ]]> > ^pkg:maven/org\.apache\.tomcat\.embed/tomcat-embed-core@.*$ > cpe:/a:apache:tomcat > > ``` This does not suppress the report on `tomcat-embed-websocket-9.0.63.jar`. Any...

> I went with these excludes (using cve rarther than cpe, which looked dangerous) : Had the same idea and tried to write a common expression for both: ``` ^pkg:maven/org\.apache\.tomcat\.embed/tomcat-embed-*@.*$...

> I guess that is because your expression is invalid. Yep, it was missing a `.` before the `*`. This works: ``` ^pkg:maven/org\.apache\.tomcat\.embed/tomcat-embed-.*@.*$ CVE-2022-34305 ``` I also added an expiration:...

This is a very good suggestion! I would personally like it to be sorted by variable type first and the alphabetically, but it would also be good if this would...

I had the same issue and solved by adding: `idProperty: 'id'` to the **extra-settings**. This is a quite important issue, I think it should be mentioned in the documentation.

I am also having the same issue: when both **groupBy** and **checkBoxes** are chosen in the `extra-settings` then the label is displayed twice.

Is there a way to ignore the checksum in the config file? I checked [the documentation](https://chocolatey.org/docs/commands-install) and the [StackOverflow thread](https://stackoverflow.com/questions/34106680/how-to-use-custom-parameters-in-chocolatey-config-file/34111537) but didn't find an answer to this. I did a...