build: mark CVE-2022-33915 as a false positive
build: mark CVE-2022-33915 as a false positive


CVE-2022-33915 refers specifically to a hotfix produced by AWS for log4j. Basically their mitigation for
log4jshell is broken.  I don't see why they can't narrow the regexp to match log4j-cve-2021-44228-hotpatch-1.3-5
directly
adaptris/interlok