fix: add hint to resolve false negative

resolves #6789
jeremylong · Jul 4, 2024 · fc0343e · fc0343e
1 parent 926c9ee
commit fc0343e
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/core/src/main/resources/dependencycheck-base-hint.xml b/core/src/main/resources/dependencycheck-base-hint.xml
@@ -447,4 +447,13 @@
             <evidence type="vendor" source="hint analyzer" name="vendor" value="itextpdf" confidence="HIGH"/>
         </add>
     </hint>
+    <hint>
+        <!-- false negative per issue #6789 -->
+        <given>
+            <evidence type="product" source="msbuild" name="id" value="Newtonsoft.Json"/>
+        </given>
+        <add>
+            <evidence type="product" source="hint analyzer" name="vendor" value="net" confidence="MEDIUM"/>
+        </add>
+    </hint>
 </hints>