diff --git a/dependency-check-supress.xml b/dependency-check-supress.xml
new file mode 100644
index 0000000..d483366
--- /dev/null
+++ b/dependency-check-supress.xml
@@ -0,0 +1,34 @@
+
+
+
+
+ ^pkg:maven/com\.google\.guava/guava@.*$
+ CVE-2020-8908
+
+
+
+ ^pkg:maven/org\.apache\.poi/poi@.*$
+ CVE-2022-26336
+
+
+
+ ^pkg:maven/org\.apache\.poi/poi\-ooxml@.*$
+ CVE-2022-26336
+
+
+
+ ^pkg:maven/org\.apache\.poi/poi\-ooxml\-schemas@.*$
+ CVE-2022-26336
+
+
\ No newline at end of file
diff --git a/pom.xml b/pom.xml
index c623bea..d5f712f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -55,6 +55,7 @@
https://sonarcloud.io
spdx
tools-java
+ 7.2.1
@@ -176,117 +177,125 @@
-
- org.apache.maven.plugins
- maven-compiler-plugin
- 3.6.1
-
- 1.8
- 1.8
- ${project.build.sourceEncoding}
- true
- true
- true
-
-
-
- maven-assembly-plugin
-
-
-
- org.spdx.tools.Main
-
-
-
- jar-with-dependencies
-
-
-
-
- make-assembly
- package
-
- single
-
-
-
-
-
- org.apache.maven.plugins
- maven-javadoc-plugin
- 2.9
-
- true
- 8
- ${env.JAVA_HOME}/bin/javadoc
- -Xdoclint:none
-
-
-
- attach-javadocs
-
- ${javadoc.opts}
-
-
- jar
-
-
-
-
-
- org.apache.maven.plugins
- maven-source-plugin
- 3.2.1
-
-
- attach-sources
- verify
-
- jar-no-fork
-
-
-
-
-
- org.spdx
- spdx-maven-plugin
- 0.6.0
+
+ org.owasp
+ dependency-check-maven
+ ${dependency-check-maven.version}
+
+ dependency-check-supress.xml
+
+
+
+ org.apache.maven.plugins
+ maven-compiler-plugin
+ 3.6.1
+
+ 1.8
+ 1.8
+ ${project.build.sourceEncoding}
+ true
+ true
+ true
+
+
+
+ maven-assembly-plugin
+
+
+
+ org.spdx.tools.Main
+
+
+
+ jar-with-dependencies
+
+
+
+
+ make-assembly
+ package
+
+ single
+
+
+
+
+
+ org.apache.maven.plugins
+ maven-javadoc-plugin
+ 2.9
+
+ true
+ 8
+ ${env.JAVA_HOME}/bin/javadoc
+ -Xdoclint:none
+
- build-spdx
- prepare-package
+ attach-javadocs
+
+ ${javadoc.opts}
+
- createSPDX
+ jar
-
- http://spdx.org/documents/tools-java-{$version}
- Copyright (c) 2020 Source Auditor Inc.
-
- Gary O'Neall
-
- Apache-2.0
- Apache-2.0
- Licensed under the Apache License, Version 2.0 (the "License");
- you may not use this file except in compliance with the License.
- You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
- Unless required by applicable law or agreed to in writing, software
- distributed under the License is distributed on an "AS IS" BASIS,
- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- See the License for the specific language governing permissions and
- limitations under the License.
- Apache-2.0
- Apache-2.0
-
- Person: Gary O'Neall
-
- Organization: Linux Foundation
-
-
-
-
+
+
+ org.apache.maven.plugins
+ maven-source-plugin
+ 3.2.1
+
+
+ attach-sources
+ verify
+
+ jar-no-fork
+
+
+
+
+
+ org.spdx
+ spdx-maven-plugin
+ 0.6.0
+
+
+ build-spdx
+ prepare-package
+
+ createSPDX
+
+
+
+
+ http://spdx.org/documents/tools-java-{$version}
+ Copyright (c) 2020 Source Auditor Inc.
+
+ Gary O'Neall
+
+ Apache-2.0
+ Apache-2.0
+ Licensed under the Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+ Apache-2.0
+ Apache-2.0
+
+ Person: Gary O'Neall
+
+ Organization: Linux Foundation
+
+
+
+