whitelist jar for the cve scan (false positive)

owasp_fp.xml

@@ -0,0 +1,47 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ LanguageTool, a natural language style checker 
+  ~ Copyright (c) 2022.  Stefan Viol (https://stevio.de)
+  ~  
+  ~  This library is free software; you can redistribute it and/or
+  ~  modify it under the terms of the GNU Lesser General Public
+  ~  License as published by the Free Software Foundation; either
+  ~  version 2.1 of the License, or (at your option) any later version.
+  ~  
+  ~  This library is distributed in the hope that it will be useful,
+  ~  but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+  ~  Lesser General Public License for more details.
+  ~  
+  ~  You should have received a copy of the GNU Lesser General Public
+  ~  License along with this library; if not, write to the Free Software
+  ~  Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301
+  ~  USA
+  -->
+
+<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
+   <suppress>
+      <notes><![CDATA[
+      file name: opennlp-chunk-models-1.5.jar from edu.washington.cs.knowitall:opennlp-chunk-models:1.5
+      ]]></notes>
+<!--      <packageUrl regex="true">^pkg:maven/edu\.washington\.cs\.knowitall/opennlp-postag-models@.*$</packageUrl>-->
+      <sha1>8aaad30ce180b30d5a43dc7bc896e7a6cb09c973</sha1>
+      <cve>CVE-2017-12620</cve>
+   </suppress>
+   <suppress>
+      <notes><![CDATA[
+      file name: opennlp-postag-models-1.5.jar from edu.washington.cs.knowitall:opennlp-postag-models:1.5
+      ]]></notes>
+<!--      <packageUrl regex="true">^pkg:maven/edu\.washington\.cs\.knowitall/opennlp-postag-models@.*$</packageUrl>-->
+      <sha1>f6d1b602dd918a59809344a0d2d952970b2e0cbf</sha1>
+      <cve>CVE-2017-12620</cve>
+   </suppress>
+   <suppress>
+      <notes><![CDATA[
+      file name: opennlp-tokenize-models-1.5.jar from edu.washington.cs.knowitall:opennlp-tokenize-models:1.5
+      ]]></notes>
+<!--      <packageUrl regex="true">^pkg:maven/edu\.washington\.cs\.knowitall/opennlp-postag-models@.*$</packageUrl>-->
+      <sha1>6dad86c15c48ea7e6588bbb00fcf34199574b0a3</sha1>
+      <cve>CVE-2017-12620</cve>
+   </suppress>
+</suppressions>

pom.xml

@@ -310,6 +310,9 @@
                 <version>${dependency-check-maven.pluging.version}</version>
                 <configuration>
                     <failBuildOnCVSS>8</failBuildOnCVSS>
+                    <suppressionFiles>
+                        <suppressionFile>owasp_fp.xml</suppressionFile>
+                    </suppressionFiles>
                 </configuration>
             </plugin>
             <plugin>