# Advisory identifiers use the invented NOVUS-SAMPLE namespace with SAMPLE-CVE aliases; no identifier here refers to a published CVE, GHSA or OSV record, and no package named exists.

version: 1
policy: sample-suppressions
expiresAfterDays: 90
suppressions:
  - id: NOVUS-SAMPLE-2026-0001
    package: example-logger
    version: 3.4.1
    reason: triage-in-progress
    approvedBy: sample-security-team@orchard.example
    expires: 2026-04-01
    note: "SAMPLE suppression. Upgrade path is 3.5.0."
  - id: NOVUS-SAMPLE-2026-0002
    package: example-cache
    version: 0.9.2
    reason: not-reachable
    approvedBy: sample-security-team@orchard.example
    expires: 2026-04-01
    note: "SAMPLE suppression. Upgrade path is 0.9.5."
  - id: NOVUS-SAMPLE-2026-0003
    package: example-yaml-lite
    version: 1.1.7
    reason: fixed-in-next-release
    approvedBy: sample-security-team@orchard.example
    expires: 2026-04-01
    note: "SAMPLE suppression. Upgrade path is 1.2.0."
  - id: NOVUS-SAMPLE-2026-0004
    package: example-json-path
    version: 2.0.5
    reason: accepted-risk
    approvedBy: sample-security-team@orchard.example
    expires: 2026-04-01
    note: "SAMPLE suppression. Upgrade path is 2.1.0."