[FP]: JNA confused for Java SE

[chadlwilson]

Package URl

pkg:maven/net.java.dev.jna/jna-jpms@5.18.1

CPE

cpe:2.3:a:oracle:java_se:5.18.1:*:*:*:*:*:*:*

CVE

No response

ODC Integration

{"label" => "Gradle Plugin"}

ODC Version

12.2.0

Description

JNA is a complete different library.

[github-actions]

Maven Coordinates

<dependency>
  <groupId>net.java.dev.jna</groupId>
  <artifactId>jna-jpms</artifactId>
  <version>5.18.1</version>
</dependency>

Suppression rule:

<suppress base="true">
    <notes><![CDATA[
    FP per issue #8257
    ]]></notes>
    <packageUrl regex="true">^pkg:maven/net\.java\.dev\.jna/jna-jpms@.*$</packageUrl>
    <cpe>cpe:/a:oracle:java_se</cpe>
</suppress>

Link to test results: https://github.com/dependency-check/DependencyCheck/actions/runs/21404732376

[chadlwilson]

approved

[github-actions]

Suppress rule has been added to the generatedSuppressions branch.