Suppress bzip CVE false positives (#1212)

Author: labkey-tchad

dependencyCheckSuppression.xml

@@ -164,4 +164,22 @@
         <packageUrl regex="true">^pkg:maven/org\.labkey\.api/labkey-api-jdbc@.*$</packageUrl>
         <cpe>cpe:/a:labkey:labkey_server</cpe>
     </suppress>
+
+    <!--
+    False positives from CVEs in the bzip2 Debian package
+    -->
+    <suppress>
+        <notes><![CDATA[
+        file name: bzip2-0.9.1.jar
+        ]]></notes>
+        <packageUrl regex="true">^pkg:maven/org\.itadaki/bzip2@.*$</packageUrl>
+        <cpe>cpe:/a:bzip:bzip2</cpe>
+    </suppress>
+    <suppress>
+        <notes><![CDATA[
+        file name: bzip2-0.9.1.jar
+        ]]></notes>
+        <packageUrl regex="true">^pkg:maven/org\.itadaki/bzip2@.*$</packageUrl>
+        <cpe>cpe:/a:bzip2_project:bzip2</cpe>
+    </suppress>
 </suppressions>