fixed missing transitive dependencies for Activiti/Activiti#1790

AlfrescoArchive · Mar 9, 2018 · 8843352 · 8843352
1 parent a0102a8
commit 8843352
Show file tree

Hide file tree

Showing 7 changed files with 40 additions and 1 deletion.
diff --git a/.travis.yml b/.travis.yml
@@ -17,7 +17,7 @@ before_script:
 
 # Enable integration tests
 script:
-  - mvn verify -B
+  - mvn verify -B -Pdependency-check
 
 # Send coverage data
 after_success:

diff --git a/activiti-cloud-services-query/activiti-cloud-services-query-graphql-ws/pom.xml b/activiti-cloud-services-query/activiti-cloud-services-query-graphql-ws/pom.xml
@@ -9,6 +9,9 @@
   </parent>
   <artifactId>activiti-cloud-services-query-graphql-ws</artifactId>
   <name>Activiti Cloud Query :: Services :: Query GraphQL WebSockets</name>
+  <properties>
+    <suppressionFile>${basedir}/../../dependency-check-suppression.xml</suppressionFile>
+  </properties>
   <dependencies>
     <dependency>
       <groupId>org.activiti.cloud</groupId>

diff --git a/activiti-cloud-services-query/activiti-cloud-services-query-graphql/pom.xml b/activiti-cloud-services-query/activiti-cloud-services-query-graphql/pom.xml
@@ -9,6 +9,9 @@
   </parent>
   <artifactId>activiti-cloud-services-query-graphql</artifactId>
   <name>Activiti Cloud Query :: Services :: Query GraphQL</name>
+  <properties>
+    <suppressionFile>${basedir}/../../dependency-check-suppression.xml</suppressionFile>
+  </properties>
   <dependencies>
     <dependency>
       <groupId>org.activiti.cloud</groupId>

diff --git a/activiti-cloud-services-query/activiti-cloud-services-query-notifications/pom.xml b/activiti-cloud-services-query/activiti-cloud-services-query-notifications/pom.xml
@@ -9,6 +9,9 @@
   </parent>
   <artifactId>activiti-cloud-services-query-notifications</artifactId>
   <name>Activiti Cloud Query :: Services :: Query Notifications</name>
+  <properties>
+    <suppressionFile>${basedir}/../../dependency-check-suppression.xml</suppressionFile>
+  </properties>
   <dependencies>
     <dependency>
       <groupId>org.springframework</groupId>

diff --git a/activiti-cloud-services-query/activiti-cloud-services-query-rest/pom.xml b/activiti-cloud-services-query/activiti-cloud-services-query-rest/pom.xml
@@ -9,6 +9,9 @@
   <modelVersion>4.0.0</modelVersion>
   <artifactId>activiti-cloud-services-query-rest</artifactId>
   <name>Activiti Cloud Query :: Services :: Query REST</name>
+  <properties>
+    <suppressionFile>${basedir}/../../dependency-check-suppression.xml</suppressionFile>
+  </properties>
   <dependencies>
     <!-- keycloak included as default identity provider to be excluded if overridden -->
     <dependency>

diff --git a/activiti-cloud-starter-query/pom.xml b/activiti-cloud-starter-query/pom.xml
@@ -9,6 +9,9 @@
   </parent>
   <artifactId>activiti-cloud-starter-query</artifactId>
   <name>Activiti Cloud Query :: Starter :: Query</name>
+  <properties>
+    <suppressionFile>${basedir}/../dependency-check-suppression.xml</suppressionFile>
+  </properties>
   <dependencies>
     <dependency>
       <groupId>org.activiti.cloud</groupId>

diff --git a/dependency-check-suppression.xml b/dependency-check-suppression.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.1.xsd">
+  <suppress>
+    <notes><![CDATA[
+   false positive on file name: spring-tuple-1.0.0.RELEASE.jar
+   ]]></notes>
+    <gav regex="true">^org\.springframework:spring-tuple:.*$</gav>
+    <cve>CVE-2011-2730</cve>
+  </suppress>
+  <suppress>
+    <notes><![CDATA[
+   false positive file name: jersey-apache-client4-1.19.1.jar
+   ]]></notes>
+    <gav regex="true">^com\.sun\.jersey\.contribs:jersey-apache-client4:.*$</gav>
+    <cve>CVE-2006-0550</cve>
+  </suppress>
+  <suppress>
+    <notes><![CDATA[
+    false positive file name: java-dataloader-2.0.1.jar
+    ]]></notes>
+    <gav regex="true">^com\.graphql-java:java-dataloader:.*$</gav>
+    <cve>CVE-2008-0660</cve>
+  </suppress>
+</suppressions>