Skip to content
This repository has been archived by the owner on Feb 26, 2024. It is now read-only.

Commit

Permalink
Browse files Browse the repository at this point in the history
Add dependency-check plugin (#80)
  • Loading branch information
johnlcox authored and John Leacox committed Jul 10, 2018
1 parent 2fddc9d commit 36f3285
Show file tree
Hide file tree
Showing 2 changed files with 59 additions and 1 deletion.
19 changes: 19 additions & 0 deletions dependency-check-suppressions.xml
@@ -0,0 +1,19 @@
<?xml version="1.0" encoding="UTF-8"?>
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.1.xsd">
<!-- This CVE is regarding the javascript not the Java implementation -->
<suppress>
<notes><![CDATA[
file name: compiler-0.9.5.jar
]]></notes>
<gav regex="true">^com\.github\.spullara\.mustache\.java:compiler:.*$</gav>
<cve>CVE-2015-8862</cve>
</suppress>
<!-- This CVE is regarding xzgrep not the Java implementation -->
<suppress>
<notes><![CDATA[
file name: xz-1.8.jar
]]></notes>
<gav regex="true">^org\.tukaani:xz:.*$</gav>
<cve>CVE-2015-4035</cve>
</suppress>
</suppressions>
41 changes: 40 additions & 1 deletion pom.xml
Expand Up @@ -87,7 +87,7 @@
<properties>
<beadledom.url>http://cerner.github.io/beadledom/${project.version}</beadledom.url>
<java.version>1.8</java.version>
<scala.version>2.11.7</scala.version>
<scala.version>2.11.12</scala.version>
<scala.binary.version>2.11</scala.binary.version>
<governator.version>1.17.4</governator.version>
<jackson.version>2.9.2</jackson.version>
Expand Down Expand Up @@ -462,6 +462,11 @@
<artifactId>stagemonitor-web</artifactId>
<version>${stagemonitor.version}</version>
</dependency>
<dependency>
<groupId>org.tukaani</groupId>
<artifactId>xz</artifactId>
<version>1.8</version>
</dependency>

<!--Test Dependencies-->
<dependency>
Expand All @@ -476,12 +481,30 @@
<version>2.12.0</version>
<scope>test</scope>
</dependency>
<dependency>
<groupId>org.scala-lang</groupId>
<artifactId>scalap</artifactId>
<version>${scala.version}</version>
<scope>test</scope>
</dependency>
<dependency>
<groupId>org.scala-lang</groupId>
<artifactId>scala-compiler</artifactId>
<version>${scala.version}</version>
<scope>test</scope>
</dependency>
<dependency>
<groupId>org.scala-lang</groupId>
<artifactId>scala-library</artifactId>
<version>${scala.version}</version>
<scope>test</scope>
</dependency>
<dependency>
<groupId>org.scala-lang</groupId>
<artifactId>scala-reflect</artifactId>
<version>${scala.version}</version>
<scope>test</scope>
</dependency>
<dependency>
<groupId>org.scalacheck</groupId>
<artifactId>scalacheck_${scala.binary.version}</artifactId>
Expand Down Expand Up @@ -656,6 +679,22 @@
</dependency>
</dependencies>
</plugin>
<plugin>
<groupId>org.owasp</groupId>
<artifactId>dependency-check-maven</artifactId>
<version>3.1.0</version>
<configuration>
<failBuildOnAnyVulnerability>true</failBuildOnAnyVulnerability>
<suppressionFile>dependency-check-suppressions.xml</suppressionFile>
</configuration>
<executions>
<execution>
<goals>
<goal>aggregate</goal>
</goals>
</execution>
</executions>
</plugin>
<plugin>
<groupId>com.github.spotbugs</groupId>
<artifactId>spotbugs-maven-plugin</artifactId>
Expand Down

0 comments on commit 36f3285

Please sign in to comment.