{"action":"closed","issue":{"url":"https://api.github.com/repos/jeremylong/DependencyCheck/issues/2246","repository_url":"https://api.github.com/repos/jeremylong/DependencyCheck","labels_url":"https://api.github.com/repos/jeremylong/DependencyCheck/issues/2246/labels{/name}","comments_url":"https://api.github.com/repos/jeremylong/DependencyCheck/issues/2246/comments","events_url":"https://api.github.com/repos/jeremylong/DependencyCheck/issues/2246/events","html_url":"https://github.com/jeremylong/DependencyCheck/issues/2246","id":504324860,"node_id":"MDU6SXNzdWU1MDQzMjQ4NjA=","number":2246,"title":"False Positive on ehcache-3.1.2 (detected as cpe gradle:gradle)","user":{"login":"aikebah","id":2175611,"node_id":"MDQ6VXNlcjIxNzU2MTE=","avatar_url":"https://avatars2.githubusercontent.com/u/2175611?v=4","gravatar_id":"","url":"https://api.github.com/users/aikebah","html_url":"https://github.com/aikebah","followers_url":"https://api.github.com/users/aikebah/followers","following_url":"https://api.github.com/users/aikebah/following{/other_user}","gists_url":"https://api.github.com/users/aikebah/gists{/gist_id}","starred_url":"https://api.github.com/users/aikebah/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aikebah/subscriptions","organizations_url":"https://api.github.com/users/aikebah/orgs","repos_url":"https://api.github.com/users/aikebah/repos","events_url":"https://api.github.com/users/aikebah/events{/privacy}","received_events_url":"https://api.github.com/users/aikebah/received_events","type":"User","site_admin":false},"labels":[{"id":595824734,"node_id":"MDU6TGFiZWw1OTU4MjQ3MzQ=","url":"https://api.github.com/repos/jeremylong/DependencyCheck/labels/FP%20Report","name":"FP Report","color":"d93f0b","default":false},{"id":576293987,"node_id":"MDU6TGFiZWw1NzYyOTM5ODc=","url":"https://api.github.com/repos/jeremylong/DependencyCheck/labels/pending%20release","name":"pending release","color":"0e8a16","default":false}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/jeremylong/DependencyCheck/milestones/9","html_url":"https://github.com/jeremylong/DependencyCheck/milestone/9","labels_url":"https://api.github.com/repos/jeremylong/DependencyCheck/milestones/9/labels","id":4834085,"node_id":"MDk6TWlsZXN0b25lNDgzNDA4NQ==","number":9,"title":"5.2.3","description":"","creator":{"login":"jeremylong","id":862914,"node_id":"MDQ6VXNlcjg2MjkxNA==","avatar_url":"https://avatars2.githubusercontent.com/u/862914?v=4","gravatar_id":"","url":"https://api.github.com/users/jeremylong","html_url":"https://github.com/jeremylong","followers_url":"https://api.github.com/users/jeremylong/followers","following_url":"https://api.github.com/users/jeremylong/following{/other_user}","gists_url":"https://api.github.com/users/jeremylong/gists{/gist_id}","starred_url":"https://api.github.com/users/jeremylong/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jeremylong/subscriptions","organizations_url":"https://api.github.com/users/jeremylong/orgs","repos_url":"https://api.github.com/users/jeremylong/repos","events_url":"https://api.github.com/users/jeremylong/events{/privacy}","received_events_url":"https://api.github.com/users/jeremylong/received_events","type":"User","site_admin":false},"open_issues":11,"closed_issues":9,"state":"open","created_at":"2019-11-11T12:59:28Z","updated_at":"2019-11-11T13:00:15Z","due_on":"2019-11-11T08:00:00Z","closed_at":null},"comments":0,"created_at":"2019-10-08T23:11:35Z","updated_at":"2019-11-11T13:00:15Z","closed_at":"2019-11-11T13:00:15Z","author_association":"CONTRIBUTOR","body":"While scanning Zimbra Collaboration Server OSE with the CLI-scanner 5.2.2 (`bin/dependency-check.sh --project Zimbra -s /opt/zimbra`) I found a false positive on library ehcache-3.1.2.jar - which gets reported as `cpe:2.3:a:gradle:gradle:3.1.2:*:*:*:*:*:*:* `\r\n\r\nbased on hash it is properly detected as \r\n```text\r\n    pkg:maven/org.ehcache/ehcache@3.1.2  (Confidence:High)\r\n```\r\nbut wrongly linked to cpe\r\n```text\r\n    cpe:2.3:a:gradle:gradle:3.1.2:*:*:*:*:*:*:*  (Confidence:Low)  \r\n```"}}
{"actor":{"display_login":"jeremylong"}}