瀏覽代碼

ZOOKEEPER-3256: Enable OWASP checks to Maven build

Author: Enrico Olivelli <eolivelli@apache.org>

Reviewers: andor@apache.org

Closes #788 from eolivelli/fix/owasp and squashes the following commits:

972ff67bf [Enrico Olivelli] Update ant task defs and force update of patterns
bd96cb669 [Enrico Olivelli] ZOOKEEPER-3256: Enable OWASP checks  to Maven build
Enrico Olivelli 6 年之前
父節點
當前提交
f40510534c
共有 2 個文件被更改,包括 18 次插入2 次删除
  1. 2 2
      build.xml
  2. 16 0
      pom.xml

+ 2 - 2
build.xml

@@ -56,7 +56,7 @@ xmlns:cs="antlib:com.puppycrawl.tools.checkstyle.ant">
 
     <property name="jetty.version" value="9.4.10.v20180503"/>
     <property name="jackson.version" value="2.9.5"/>
-    <property name="dependency-check-ant.version" value="3.2.1"/>
+    <property name="dependency-check-ant.version" value="4.0.2"/>
 
     <property name="commons-io.version" value="2.6"/>
     <property name="kerby.version" value="1.1.0"/>
@@ -1700,7 +1700,7 @@ xmlns:cs="antlib:com.puppycrawl.tools.checkstyle.ant">
 
     <target name="owasp" depends="owasp-taskdef,ivy-retrieve" description="OWASP dependency check">
         <property name="owasp.out.dir" value="${test.java.build.dir}/owasp" />
-
+        <owasp:dependency-check-update xmlns:owasp="antlib:org.owasp.dependencycheck.anttasks" />
         <owasp:dependency-check xmlns:owasp="antlib:org.owasp.dependencycheck.anttasks"
                           projectname="ZooKeeper"
                           reportoutputdirectory="${owasp.out.dir}"

+ 16 - 0
pom.xml

@@ -483,6 +483,11 @@
             <excludeFilterFile>excludeFindBugsFilter.xml</excludeFilterFile>
           </configuration>
         </plugin>
+        <plugin>
+          <groupId>org.owasp</groupId>
+          <artifactId>dependency-check-maven</artifactId>
+          <version>4.0.2</version>
+        </plugin>
       </plugins>
     </pluginManagement>
 
@@ -514,6 +519,17 @@
         <groupId>com.github.spotbugs</groupId>
         <artifactId>spotbugs-maven-plugin</artifactId>
       </plugin>
+      <plugin>
+         <groupId>org.owasp</groupId>
+         <artifactId>dependency-check-maven</artifactId>
+         <configuration>
+            <format>ALL</format>
+            <failBuildOnCVSS>0</failBuildOnCVSS>
+            <suppressionFiles>
+              <suppressionsFile>owaspSuppressions.xml</suppressionsFile>
+            </suppressionFiles>
+         </configuration>
+       </plugin>
       </plugins>
   </build>