The only current path i found to move past this was this comment:
When you have a legitimate reason for disabling this check, as in your situation, you can so do by adding this to your AMPS configuration:
<banningExcludes> <exclude>commons-io:commons-io</exclude> <exclude>com.foo:bar</exclude> ... </banningExcludes>But I’ll just reiterate that most AMPS users should not do this, they should use the dependencies that the platform provides.
Adding jackson-dataformat-yaml to the <banningExcludes> and excluding its transitive dependency on jackson-core in its <dependency> entry gets the project to compile and not mention:
... Package com.fasterxml.jackson.dataformat.yaml is internal and is not available for export to plugin org.mitre.avsvsrp.avsvsrp-plugin