mirror of
https://github.com/ysoftdevs/DependencyCheck.git
synced 2026-01-13 07:20:40 +01:00
214 lines
8.7 KiB
XML
214 lines
8.7 KiB
XML
<!--
|
|
This file is part of dependency-check-maven.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
|
|
Copyright (c) 2013 Jeremy Long. All Rights Reserved.
|
|
-->
|
|
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
|
|
<modelVersion>4.0.0</modelVersion>
|
|
<parent>
|
|
<groupId>org.owasp</groupId>
|
|
<artifactId>dependency-check-parent</artifactId>
|
|
<version>3.1.2-SNAPSHOT</version>
|
|
</parent>
|
|
<artifactId>dependency-check-maven</artifactId>
|
|
<packaging>maven-plugin</packaging>
|
|
<name>Dependency-Check Maven Plugin</name>
|
|
<description>dependency-check-maven is a Maven Plugin that uses dependency-check-core to detect publicly disclosed vulnerabilities associated with the project's dependencies. The plugin will generate a report listing the dependency, any identified Common Platform Enumeration (CPE) identifiers, and the associated Common Vulnerability and Exposure (CVE) entries.</description>
|
|
<inceptionYear>2013</inceptionYear>
|
|
<properties>
|
|
<version.maven-plugin-plugin>3.5</version.maven-plugin-plugin>
|
|
</properties>
|
|
<prerequisites>
|
|
<maven>3.0</maven>
|
|
</prerequisites>
|
|
<build>
|
|
<resources>
|
|
<resource>
|
|
<directory>src/main/resources</directory>
|
|
<includes>
|
|
<include>**/*.properties</include>
|
|
</includes>
|
|
<filtering>true</filtering>
|
|
</resource>
|
|
<resource>
|
|
<directory>${basedir}</directory>
|
|
<targetPath>META-INF</targetPath>
|
|
<includes>
|
|
<include>LICENSE.txt</include>
|
|
<include>NOTICE.txt</include>
|
|
</includes>
|
|
</resource>
|
|
</resources>
|
|
|
|
<plugins>
|
|
<plugin>
|
|
<groupId>org.apache.maven.plugins</groupId>
|
|
<artifactId>maven-plugin-plugin</artifactId>
|
|
<version>${version.maven-plugin-plugin}</version>
|
|
<configuration>
|
|
<skipErrorNoDescriptorsFound>true</skipErrorNoDescriptorsFound>
|
|
<goalPrefix>dependency-check</goalPrefix>
|
|
</configuration>
|
|
<executions>
|
|
<execution>
|
|
<id>mojo-descriptor</id>
|
|
<goals>
|
|
<goal>descriptor</goal>
|
|
</goals>
|
|
</execution>
|
|
<execution>
|
|
<id>generated-helpmojo</id>
|
|
<goals>
|
|
<goal>helpmojo</goal>
|
|
</goals>
|
|
</execution>
|
|
</executions>
|
|
</plugin>
|
|
</plugins>
|
|
</build>
|
|
<reporting>
|
|
<plugins>
|
|
<plugin>
|
|
<groupId>org.apache.maven.plugins</groupId>
|
|
<artifactId>maven-plugin-plugin</artifactId>
|
|
<version>${version.maven-plugin-plugin}</version>
|
|
<configuration>
|
|
<goalPrefix>dependency-check</goalPrefix>
|
|
</configuration>
|
|
</plugin>
|
|
</plugins>
|
|
</reporting>
|
|
<dependencies>
|
|
<dependency>
|
|
<groupId>org.owasp</groupId>
|
|
<artifactId>dependency-check-core</artifactId>
|
|
<version>${project.parent.version}</version>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>org.owasp</groupId>
|
|
<artifactId>dependency-check-utils</artifactId>
|
|
<version>${project.parent.version}</version>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>org.apache.maven</groupId>
|
|
<artifactId>maven-plugin-api</artifactId>
|
|
<scope>provided</scope>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>org.apache.maven</groupId>
|
|
<artifactId>maven-settings</artifactId>
|
|
<scope>provided</scope>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>org.apache.maven</groupId>
|
|
<artifactId>maven-core</artifactId>
|
|
<scope>provided</scope>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>org.apache.maven.shared</groupId>
|
|
<artifactId>file-management</artifactId>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>org.apache.maven.plugin-tools</groupId>
|
|
<artifactId>maven-plugin-annotations</artifactId>
|
|
<scope>provided</scope>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>org.apache.maven.reporting</groupId>
|
|
<artifactId>maven-reporting-api</artifactId>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>org.sonatype.plexus</groupId>
|
|
<artifactId>plexus-sec-dispatcher</artifactId>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>org.apache.maven.shared</groupId>
|
|
<artifactId>maven-dependency-tree</artifactId>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>org.jmockit</groupId>
|
|
<artifactId>jmockit</artifactId>
|
|
<scope>test</scope>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>org.apache.maven.plugin-testing</groupId>
|
|
<artifactId>maven-plugin-testing-harness</artifactId>
|
|
<scope>test</scope>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>org.apache.maven.shared</groupId>
|
|
<artifactId>maven-artifact-transfer</artifactId>
|
|
</dependency>
|
|
</dependencies>
|
|
<profiles>
|
|
<profile>
|
|
<id>FullIntegrationTesting</id>
|
|
<activation>
|
|
<property>
|
|
<name>releaseTesting</name>
|
|
</property>
|
|
</activation>
|
|
<build>
|
|
<plugins>
|
|
<plugin>
|
|
<groupId>org.codehaus.gmavenplus</groupId>
|
|
<artifactId>gmavenplus-plugin</artifactId>
|
|
<executions>
|
|
<execution>
|
|
<id>add-dynamic-properties-integ</id>
|
|
<phase>pre-integration-test</phase>
|
|
<goals>
|
|
<goal>execute</goal>
|
|
</goals>
|
|
<configuration>
|
|
<scripts>
|
|
<script><![CDATA[
|
|
if (project.properties!=null && project.properties.failsafeArgLine!=null) {
|
|
project.properties['invoker.mavenOpts']=project.properties.failsafeArgLine
|
|
}
|
|
]]></script>
|
|
</scripts>
|
|
</configuration>
|
|
</execution>
|
|
</executions>
|
|
</plugin>
|
|
<plugin>
|
|
<groupId>org.apache.maven.plugins</groupId>
|
|
<artifactId>maven-invoker-plugin</artifactId>
|
|
<configuration>
|
|
<!--streamLogs>true</streamLogs-->
|
|
<parallelThreads>4</parallelThreads>
|
|
<!--setupIncludes>
|
|
<setupInclude>690-threadsafety/pom.xml</setupInclude>
|
|
</setupIncludes-->
|
|
<cloneProjectsTo>${project.build.directory}/it</cloneProjectsTo>
|
|
<localRepositoryPath>target/local-repo</localRepositoryPath>
|
|
</configuration>
|
|
<executions>
|
|
<execution>
|
|
<id>integration-test</id>
|
|
<goals>
|
|
<goal>install</goal>
|
|
<goal>run</goal>
|
|
</goals>
|
|
</execution>
|
|
</executions>
|
|
</plugin>
|
|
</plugins>
|
|
</build>
|
|
</profile>
|
|
</profiles>
|
|
</project>
|