CB-8896 updated whitelist dependency to use spec