Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Security] Add configuration for running OWASP Dependency Check for all modules #10288

Merged
merged 9 commits into from
Apr 21, 2021
Merged

[Security] Add configuration for running OWASP Dependency Check for all modules #10288

merged 9 commits into from
Apr 21, 2021

Commits on Apr 20, 2021

  1. Add owasp dependency check config 

    Example report:
mvn -Pskip-all,core-modules,owasp-dependency-check -pl distribution/server verify
    @lhotari
    lhotari committed Apr 20, 2021
    Configuration menu
    Copy the full SHA
    f6f84b0 View commit details
    Browse the repository at this point in the history

  2. Make it possible to skip shading

    @lhotari
    lhotari committed Apr 20, 2021
    Configuration menu
    Copy the full SHA
    165aae4 View commit details
    Browse the repository at this point in the history

  3. Make it possible to skip nar file creation

    @lhotari
    lhotari committed Apr 20, 2021
    Configuration menu
    Copy the full SHA
    1916d8d View commit details
    Browse the repository at this point in the history

  4. Skip license and rat checks in skip-all profile

    @lhotari
    lhotari committed Apr 20, 2021
    Configuration menu
    Copy the full SHA
    64e702e View commit details
    Browse the repository at this point in the history

  5. Skip Docker too

    @lhotari
    lhotari committed Apr 20, 2021
    Configuration menu
    Copy the full SHA
    bc3d64e View commit details
    Browse the repository at this point in the history

  6. Skip tests completely

    @lhotari
    lhotari committed Apr 20, 2021
    Configuration menu
    Copy the full SHA
    e11b8ae View commit details
    Browse the repository at this point in the history

  7. Skip requirement of tar.gz dependency in presto-distribution

    @lhotari
    lhotari committed Apr 20, 2021
    Configuration menu
    Copy the full SHA
    fa7d37d View commit details
    Browse the repository at this point in the history

  8. Add bash function for running the dependency check

    @lhotari
    lhotari committed Apr 20, 2021
    Configuration menu
    Copy the full SHA
    2409d1a View commit details
    Browse the repository at this point in the history

  9. Remove leftover from experiment

    @lhotari
    lhotari committed Apr 20, 2021
    Configuration menu
    Copy the full SHA
    b2116af View commit details
    Browse the repository at this point in the history