mirror of
https://github.com/ysoftdevs/DependencyCheck.git
synced 2026-01-16 00:33:46 +01:00
316 lines
13 KiB
XML
316 lines
13 KiB
XML
<!--
|
||
This file is part of dependency-check-maven.
|
||
|
||
Licensed under the Apache License, Version 2.0 (the "License");
|
||
you may not use this file except in compliance with the License.
|
||
You may obtain a copy of the License at
|
||
|
||
http://www.apache.org/licenses/LICENSE-2.0
|
||
|
||
Unless required by applicable law or agreed to in writing, software
|
||
distributed under the License is distributed on an "AS IS" BASIS,
|
||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||
See the License for the specific language governing permissions and
|
||
limitations under the License.
|
||
|
||
Copyright (c) 2013 Jeremy Long. All Rights Reserved.
|
||
-->
|
||
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
|
||
<modelVersion>4.0.0</modelVersion>
|
||
<url>http://maven.apache.org</url>
|
||
|
||
<parent>
|
||
<groupId>org.owasp</groupId>
|
||
<artifactId>dependency-check-parent</artifactId>
|
||
<version>1.3.1-SNAPSHOT</version>
|
||
</parent>
|
||
|
||
<artifactId>dependency-check-maven</artifactId>
|
||
<packaging>maven-plugin</packaging>
|
||
|
||
<name>Dependency-Check Maven Plugin</name>
|
||
<description>dependency-check-maven is a Maven Plugin that uses dependency-check-core to detect publicly disclosed vulnerabilities associated with the project's dependencies. The plugin will generate a report listing the dependency, any identified Common Platform Enumeration (CPE) identifiers, and the associated Common Vulnerability and Exposure (CVE) entries.</description>
|
||
<inceptionYear>2013</inceptionYear>
|
||
<!-- begin copy from http://minds.coremedia.com/2012/09/11/problem-solved-deploy-multi-module-maven-project-site-as-github-pages/ -->
|
||
<distributionManagement>
|
||
<site>
|
||
<id>github-pages-site</id>
|
||
<name>Deployment through GitHub's site deployment plugin</name>
|
||
<url>${basedir}/../target/site/${project.version}/dependency-check-maven</url>
|
||
</site>
|
||
</distributionManagement>
|
||
<!-- end copy -->
|
||
<build>
|
||
<resources>
|
||
<resource>
|
||
<directory>src/main/resources</directory>
|
||
<includes>
|
||
<include>**/*.properties</include>
|
||
</includes>
|
||
<filtering>true</filtering>
|
||
</resource>
|
||
<resource>
|
||
<directory>${basedir}</directory>
|
||
<targetPath>META-INF</targetPath>
|
||
<includes>
|
||
<include>LICENSE.txt</include>
|
||
<include>NOTICE.txt</include>
|
||
</includes>
|
||
</resource>
|
||
</resources>
|
||
|
||
<plugins>
|
||
<plugin>
|
||
<groupId>org.apache.maven.plugins</groupId>
|
||
<artifactId>maven-plugin-plugin</artifactId>
|
||
<configuration>
|
||
<skipErrorNoDescriptorsFound>true</skipErrorNoDescriptorsFound>
|
||
<goalPrefix>dependency-check</goalPrefix>
|
||
</configuration>
|
||
<executions>
|
||
<execution>
|
||
<id>mojo-descriptor</id>
|
||
<goals>
|
||
<goal>descriptor</goal>
|
||
</goals>
|
||
</execution>
|
||
<execution>
|
||
<id>generated-helpmojo</id>
|
||
<goals>
|
||
<goal>helpmojo</goal>
|
||
</goals>
|
||
</execution>
|
||
</executions>
|
||
</plugin>
|
||
<plugin>
|
||
<groupId>org.apache.maven.plugins</groupId>
|
||
<artifactId>maven-surefire-plugin</artifactId>
|
||
<configuration>
|
||
<systemProperties>
|
||
<property>
|
||
<name>data.directory</name>
|
||
<value>${project.build.directory}/dependency-check-data</value>
|
||
</property>
|
||
<property>
|
||
<name>temp.directory</name>
|
||
<value>${project.build.directory}/temp</value>
|
||
</property>
|
||
</systemProperties>
|
||
</configuration>
|
||
</plugin>
|
||
<plugin>
|
||
<inherited>true</inherited>
|
||
<groupId>org.apache.maven.plugins</groupId>
|
||
<artifactId>maven-enforcer-plugin</artifactId>
|
||
<executions>
|
||
<execution>
|
||
<id>enforce-maven-3</id>
|
||
<goals>
|
||
<goal>enforce</goal>
|
||
</goals>
|
||
<configuration>
|
||
<rules>
|
||
<requireMavenVersion>
|
||
<version>[3.0,]</version>
|
||
</requireMavenVersion>
|
||
</rules>
|
||
<fail>true</fail>
|
||
</configuration>
|
||
</execution>
|
||
</executions>
|
||
</plugin>
|
||
<plugin>
|
||
<groupId>org.apache.maven.plugins</groupId>
|
||
<artifactId>maven-compiler-plugin</artifactId>
|
||
</plugin>
|
||
</plugins>
|
||
</build>
|
||
<reporting>
|
||
<plugins>
|
||
<plugin>
|
||
<groupId>org.apache.maven.plugins</groupId>
|
||
<artifactId>maven-project-info-reports-plugin</artifactId>
|
||
<version>${reporting.project-info-reports-plugin.version}</version>
|
||
<reportSets>
|
||
<reportSet>
|
||
<reports>
|
||
<report>summary</report>
|
||
<report>license</report>
|
||
<report>help</report>
|
||
</reports>
|
||
</reportSet>
|
||
</reportSets>
|
||
</plugin>
|
||
<plugin>
|
||
<groupId>org.apache.maven.plugins</groupId>
|
||
<artifactId>maven-plugin-plugin</artifactId>
|
||
<version>${reporting.maven-plugin-plugin.version}</version>
|
||
<configuration>
|
||
<goalPrefix>dependency-check</goalPrefix>
|
||
</configuration>
|
||
</plugin>
|
||
<plugin>
|
||
<groupId>org.apache.maven.plugins</groupId>
|
||
<artifactId>maven-javadoc-plugin</artifactId>
|
||
<version>${reporting.javadoc-plugin.version}</version>
|
||
<configuration>
|
||
<failOnError>false</failOnError>
|
||
<bottom>Copyright<EFBFBD> 2012-15 Jeremy Long. All Rights Reserved.</bottom>
|
||
</configuration>
|
||
<reportSets>
|
||
<reportSet>
|
||
<id>default</id>
|
||
<reports>
|
||
<report>javadoc</report>
|
||
</reports>
|
||
</reportSet>
|
||
</reportSets>
|
||
</plugin>
|
||
<plugin>
|
||
<groupId>org.codehaus.mojo</groupId>
|
||
<artifactId>versions-maven-plugin</artifactId>
|
||
<version>${reporting.versions-plugin.version}</version>
|
||
<reportSets>
|
||
<reportSet>
|
||
<reports>
|
||
<report>dependency-updates-report</report>
|
||
<report>plugin-updates-report</report>
|
||
</reports>
|
||
</reportSet>
|
||
</reportSets>
|
||
</plugin>
|
||
<plugin>
|
||
<groupId>org.apache.maven.plugins</groupId>
|
||
<artifactId>maven-jxr-plugin</artifactId>
|
||
<version>${reporting.jxr-plugin.version}</version>
|
||
</plugin>
|
||
<plugin>
|
||
<groupId>org.codehaus.mojo</groupId>
|
||
<artifactId>cobertura-maven-plugin</artifactId>
|
||
<version>${reporting.cobertura-plugin.version}</version>
|
||
</plugin>
|
||
<plugin>
|
||
<groupId>org.apache.maven.plugins</groupId>
|
||
<artifactId>maven-surefire-report-plugin</artifactId>
|
||
<version>${reporting.surefire-report-plugin.version}</version>
|
||
<reportSets>
|
||
<reportSet>
|
||
<reports>
|
||
<report>report-only</report>
|
||
</reports>
|
||
</reportSet>
|
||
</reportSets>
|
||
</plugin>
|
||
<plugin>
|
||
<groupId>org.codehaus.mojo</groupId>
|
||
<artifactId>taglist-maven-plugin</artifactId>
|
||
<version>${reporting.taglist-plugin.version}</version>
|
||
<configuration>
|
||
<tagListOptions>
|
||
<tagClasses>
|
||
<tagClass>
|
||
<displayName>Todo Work</displayName>
|
||
<tags>
|
||
<tag>
|
||
<matchString>todo</matchString>
|
||
<matchType>ignoreCase</matchType>
|
||
</tag>
|
||
<tag>
|
||
<matchString>FIXME</matchString>
|
||
<matchType>exact</matchType>
|
||
</tag>
|
||
</tags>
|
||
</tagClass>
|
||
</tagClasses>
|
||
</tagListOptions>
|
||
</configuration>
|
||
</plugin>
|
||
<plugin>
|
||
<groupId>org.apache.maven.plugins</groupId>
|
||
<artifactId>maven-checkstyle-plugin</artifactId>
|
||
<version>${reporting.checkstyle-plugin.version}</version>
|
||
<configuration>
|
||
<excludes>**/HelpMojo.java</excludes>
|
||
<enableRulesSummary>false</enableRulesSummary>
|
||
<enableFilesSummary>false</enableFilesSummary>
|
||
<configLocation>${basedir}/../src/main/config/checkstyle-checks.xml</configLocation>
|
||
<headerLocation>${basedir}/../src/main/config/checkstyle-header.txt</headerLocation>
|
||
<suppressionsLocation>${basedir}/../src/main/config/checkstyle-suppressions.xml</suppressionsLocation>
|
||
<suppressionsFileExpression>checkstyle.suppressions.file</suppressionsFileExpression>
|
||
</configuration>
|
||
</plugin>
|
||
<plugin>
|
||
<groupId>org.apache.maven.plugins</groupId>
|
||
<artifactId>maven-pmd-plugin</artifactId>
|
||
<version>${reporting.pmd-plugin.version}</version>
|
||
<configuration>
|
||
<targetJdk>1.6</targetJdk>
|
||
<linkXref>true</linkXref>
|
||
<sourceEncoding>utf-8</sourceEncoding>
|
||
<excludes>
|
||
<exclude>**/generated/**/*.java</exclude>
|
||
<exclude>**/HelpMojo.java</exclude>
|
||
</excludes>
|
||
<rulesets>
|
||
<ruleset>../src/main/config/dcrules.xml</ruleset>
|
||
<ruleset>/rulesets/java/basic.xml</ruleset>
|
||
<ruleset>/rulesets/java/imports.xml</ruleset>
|
||
<ruleset>/rulesets/java/unusedcode.xml</ruleset>
|
||
</rulesets>
|
||
</configuration>
|
||
</plugin>
|
||
<plugin>
|
||
<groupId>org.codehaus.mojo</groupId>
|
||
<artifactId>findbugs-maven-plugin</artifactId>
|
||
<version>${reporting.findbugs-plugin.version}</version>
|
||
</plugin>
|
||
</plugins>
|
||
</reporting>
|
||
<dependencies>
|
||
<dependency>
|
||
<groupId>org.owasp</groupId>
|
||
<artifactId>dependency-check-core</artifactId>
|
||
<version>${project.parent.version}</version>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.owasp</groupId>
|
||
<artifactId>dependency-check-utils</artifactId>
|
||
<version>${project.parent.version}</version>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.apache.maven</groupId>
|
||
<artifactId>maven-plugin-api</artifactId>
|
||
<scope>provided</scope>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.apache.maven</groupId>
|
||
<artifactId>maven-settings</artifactId>
|
||
<scope>provided</scope>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.apache.maven</groupId>
|
||
<artifactId>maven-core</artifactId>
|
||
<scope>provided</scope>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.apache.maven.plugin-tools</groupId>
|
||
<artifactId>maven-plugin-annotations</artifactId>
|
||
<scope>provided</scope>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.apache.maven.reporting</groupId>
|
||
<artifactId>maven-reporting-api</artifactId>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.jmockit</groupId>
|
||
<artifactId>jmockit</artifactId>
|
||
<scope>test</scope>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.apache.maven.plugin-testing</groupId>
|
||
<artifactId>maven-plugin-testing-harness</artifactId>
|
||
<scope>test</scope>
|
||
</dependency>
|
||
</dependencies>
|
||
</project>
|