From 9fbb99685970ec6a50824ac19dd06c8c12907f93 Mon Sep 17 00:00:00 2001
From: Jeremy Long <jeremy.long@gmail.com>
Date: Thu, 4 Jul 2024 07:54:32 -0400
Subject: [PATCH] fix: add hint to resolve false negative (#6802)

---
 core/src/main/resources/dependencycheck-base-hint.xml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/core/src/main/resources/dependencycheck-base-hint.xml b/core/src/main/resources/dependencycheck-base-hint.xml
index b85ad3b8f8c..976569148da 100644
--- a/core/src/main/resources/dependencycheck-base-hint.xml
+++ b/core/src/main/resources/dependencycheck-base-hint.xml
@@ -447,4 +447,13 @@
             <evidence type="vendor" source="hint analyzer" name="vendor" value="itextpdf" confidence="HIGH"/>
         </add>
     </hint>
+    <hint>
+        <!-- false negative per issue #6789 -->
+        <given>
+            <evidence type="product" source="msbuild" name="id" value="Newtonsoft.Json"/>
+        </given>
+        <add>
+            <evidence type="product" source="hint analyzer" name="vendor" value="net" confidence="MEDIUM"/>
+        </add>
+    </hint>
 </hints>