From 067f3917047a40bfee7bfea6f2d01ee64b02ce63 Mon Sep 17 00:00:00 2001
From: Chad Wilson <29788154+chadlwilson@users.noreply.github.com>
Date: Wed, 20 May 2026 14:59:36 +0800
Subject: [PATCH] fix(fp): extend Sentry server CPE suppression to other
 ecosystems

Signed-off-by: Chad Wilson <29788154+chadlwilson@users.noreply.github.com>
---
 generatedSuppressions.xml | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/generatedSuppressions.xml b/generatedSuppressions.xml
index 4f7ce5dead6..55b1989171b 100644
--- a/generatedSuppressions.xml
+++ b/generatedSuppressions.xml
@@ -1823,11 +1823,13 @@
 </suppress>
 <suppress base="true">
     <notes><![CDATA[
-    hand-curated better suppression for FP per issue #8057. The sentry server is/was only available on the specific
-    pypi package here. Not suppressed for other ecosystems as Sentry Server is still available open-source elsewhere.
+    hand-curated better suppression for FP per issues #8057, #8519. The Sentry Server is Python-based and was only
+    available on the specific pypi package here, or as an image. SDKs and other components of the server have their own CPEs.
+    For all vendor=sentry CVEs, can review the below:
+    https://nvd.nist.gov/vuln/search#/nvd/home?sortOrder=5&sortDirection=2&cpeFilterMode=applicability&cpeName=cpe:2.3:a:sentry:*:*:*:*:*:*:*:*:*&resultType=records
     ]]></notes>
-    <packageUrl regex="true">^pkg:pypi/(?!sentry@).*$</packageUrl>
-    <cpe>cpe:/a:sentry:sentry:</cpe>
+    <packageUrl regex="true">^pkg:(?!pypi/sentry@|docker|generic).*$</packageUrl>
+    <cpe regex="true">cpe:/a:sentry:sentry(:.*)?$</cpe>
 </suppress>
 <suppress base="true">
   <notes><![CDATA[