diff --git a/src/site/hugo/content/maven-plugin/excludes.md b/src/site/hugo/content/maven-plugin/excludes.md index 5ccdc97..20fe8f1 100644 --- a/src/site/hugo/content/maven-plugin/excludes.md +++ b/src/site/hugo/content/maven-plugin/excludes.md @@ -22,7 +22,7 @@ In those cases audit can be configured to *exclude* vulnerabilities from matchin ## Exclude Specific Vulnerabilities -Specific vulnerabilities can be excluded by *vulnerability-id*. +Specific vulnerabilities can be excluded by *vulnerability-id*. You can also use the [CVE Number](https://cve.mitre.org/cve/identifiers/index.html) here. For example to exclude [39d74cc8-457a-4e57-89ef-a258420138c5](https://ossindex.sonatype.org/vuln/39d74cc8-457a-4e57-89ef-a258420138c5): @@ -38,6 +38,20 @@ For example to exclude [39d74cc8-457a-4e57-89ef-a258420138c5](https://ossindex.s {{< /highlight >}} +Here is what this looks like when using a CVE number. + +{{< highlight "xml" >}} + + org.sonatype.ossindex.maven + ossindex-maven-plugin + + + CVE-2025-1234567 + + + +{{< /highlight >}} + This exclusion can also be configured via CLI property as a comma-separated list of ids: {{< command >}} @@ -72,4 +86,4 @@ This exclusion can also be configured via CLI property as a comma-separated list mvn ossindex:audit -Dossindex.excludeCoordinates=commons-fileupload:commons-fileupload:1.3 {{< /command >}} -**NOTE:** Only exact coordinate matches are excluded. \ No newline at end of file +**NOTE:** Only exact coordinate matches are excluded.