fixed missing transitive dependencies for Activiti/Activiti#1790

dependency-check-suppression.xml

@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.1.xsd">
+  <suppress>
+    <notes><![CDATA[
+   false positive on file name: spring-tuple-1.0.0.RELEASE.jar
+   ]]></notes>
+    <gav regex="true">^org\.springframework:spring-tuple:.*$</gav>
+    <cve>CVE-2011-2730</cve>
+  </suppress>
+  <suppress>
+    <notes><![CDATA[
+   false positive file name: jersey-apache-client4-1.19.1.jar
+   ]]></notes>
+    <gav regex="true">^com\.sun\.jersey\.contribs:jersey-apache-client4:.*$</gav>
+    <cve>CVE-2006-0550</cve>
+  </suppress>
+  <suppress>
+    <notes><![CDATA[
+    false positive file name: java-dataloader-2.0.1.jar
+    ]]></notes>
+    <gav regex="true">^com\.graphql-java:java-dataloader:.*$</gav>
+    <cve>CVE-2008-0660</cve>
+  </suppress>
+</suppressions>

pom.xml

@@ -17,6 +17,9 @@
     <developerConnection>scm:git:https://github.com/Activiti/${project.artifactId}.git</developerConnection>
     <tag>HEAD</tag>
   </scm>
+  <properties>
+    <suppressionFile>${basedir}/dependency-check-suppression.xml</suppressionFile>
+  </properties>
   <dependencies>
     <dependency>
       <groupId>org.activiti.cloud</groupId>