add reason for suppression

microsoft · Aug 2, 2019 · eb7d61c · eb7d61c
1 parent a9615e2
commit eb7d61c
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/agent/dependency-check-suppressions.xml b/agent/dependency-check-suppressions.xml
@@ -3,6 +3,7 @@
     <suppress>
         <notes><![CDATA[
       file name: instrumentation-logback-0.14.2.jar
+      This is logback instrumentation, not the logback library itself.
       ]]></notes>
         <packageUrl regex="true">^pkg:maven/org\.glowroot\.instrumentation/instrumentation\-logback@.*$</packageUrl>
         <cve>CVE-2017-5929</cve>