HADOOP-13732. Upgrade OWASP dependency-check plugin version. Contributed by Mike Yoder.
This commit is contained in:
parent
25438526ed
commit
c473490da0
@ -212,6 +212,14 @@ Maven build goals:
|
||||
and it ignores the -Disal.prefix option. If -Disal.lib isn't given, the
|
||||
bundling and building will fail.
|
||||
|
||||
Special plugins: OWASP's dependency-check:
|
||||
|
||||
OWASP's dependency-check plugin will scan the third party dependencies
|
||||
of this project for known CVEs (security vulnerabilities against them).
|
||||
It will produce a report in target/dependency-check-report.html. To
|
||||
invoke, run 'mvn dependency-check:aggregate'. Note that this plugin
|
||||
requires maven 3.1.1 or greater.
|
||||
|
||||
----------------------------------------------------------------------------------
|
||||
Building components separately
|
||||
|
||||
|
5
pom.xml
5
pom.xml
@ -107,7 +107,7 @@ xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xs
|
||||
<lifecycle-mapping.version>1.0.0</lifecycle-mapping.version>
|
||||
<maven-checkstyle-plugin.version>2.15</maven-checkstyle-plugin.version>
|
||||
<checkstyle.version>6.6</checkstyle.version>
|
||||
<dependency-check-maven.version>1.3.6</dependency-check-maven.version>
|
||||
<dependency-check-maven.version>1.4.3</dependency-check-maven.version>
|
||||
|
||||
<shell-executable>bash</shell-executable>
|
||||
</properties>
|
||||
@ -407,7 +407,8 @@ xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xs
|
||||
dependencies of this project for known CVEs (security
|
||||
vulnerabilities against them). It will produce a report
|
||||
in target/dependency-check-report.html. To invoke, run
|
||||
'mvn dependency-check:aggregate'
|
||||
'mvn dependency-check:aggregate'. Note that this plugin
|
||||
requires maven 3.1.1 or greater.
|
||||
-->
|
||||
<groupId>org.owasp</groupId>
|
||||
<artifactId>dependency-check-maven</artifactId>
|
||||
|
Loading…
Reference in New Issue
Block a user