fix: resolve false negative on yii2 (#5434)

jeremylong · Feb 10, 2023 · 182721d · 182721d
1 parent 8cde561
commit 182721d
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/core/src/main/resources/dependencycheck-base-hint.xml b/core/src/main/resources/dependencycheck-base-hint.xml
@@ -466,4 +466,18 @@
             <evidence type="product" source="hint analyzer" name="product" value="parquet-mr" confidence="HIGH"/>
         </add>
     </hint>
+        <hint>
+        <!-- false negative per issue #1387 -->
+        <given>
+            <evidence type="product" source="composer.lock" name="product" value="yii2"/>
+        </given>
+        <add>
+            <evidence type="vendor" source="hint analyzer" name="vendor" value="yiiframework" confidence="HIGH"/>
+            <evidence type="product" source="hint analyzer" name="product" value="yiiframework" confidence="HIGH"/>
+            <evidence type="vendor" source="hint analyzer" name="vendor" value="framework" confidence="HIGH"/>
+            <evidence type="product" source="hint analyzer" name="product" value="framework" confidence="HIGH"/>
+            <evidence type="vendor" source="hint analyzer" name="vendor" value="yii" confidence="HIGH"/>
+            <evidence type="product" source="hint analyzer" name="product" value="yii" confidence="HIGH"/>
+        </add>
+    </hint>
 </hints>