Due to situations like jeremylong/DependencyCheck#4670, jeremylong/DependencyCheck#4671, jeremylong/DependencyCheck#4677, jeremylong/DependencyCheck#4690 - ODC needs to be able to respond faster and provide an updated suppression file when situations like this occur.
- Implement a hosted suppression file - ODC will download the file to its local cache daily. This will be controllable by a switch so those working in an offline mode can disable the feature.
- Update the issue-ops for false positives so that if/when a core maintainer (@aikebah, @nhumblot, or myself (@ctxt)) gives the github action bot's comment a thumbs up on a the generated suppression rule (e.g., comment on #4722) the generated suppression rule is then copied into the hosted suppression file, the updated suppression file is tested (to ensure it does not break ODC by not being parsable for some reason), and then the updated file will be automatically published.
- Note, this will allow the team at release time to copy the suppressions from the hosted file into the release.
- A schedule for removing the suppressions from the hosted file into the base suppression rules will need to be determined. We don't want to force someone to upgrade, but we also don't want to maintain the rules in two places.
Due to situations like jeremylong/DependencyCheck#4670, jeremylong/DependencyCheck#4671, jeremylong/DependencyCheck#4677, jeremylong/DependencyCheck#4690 - ODC needs to be able to respond faster and provide an updated suppression file when situations like this occur.