mirror of
https://github.com/ysoftdevs/DependencyCheck.git
synced 2026-01-14 15:53:36 +01:00
436 lines
19 KiB
XML
436 lines
19 KiB
XML
<!--
|
|
This file is part of dependency-check-ant.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
|
|
Copyright (c) 2013 - Jeremy Long. All Rights Reserved.
|
|
-->
|
|
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
|
|
<modelVersion>4.0.0</modelVersion>
|
|
<parent>
|
|
<groupId>org.owasp</groupId>
|
|
<artifactId>dependency-check-parent</artifactId>
|
|
<version>1.2.11-SNAPSHOT</version>
|
|
</parent>
|
|
|
|
<artifactId>dependency-check-ant</artifactId>
|
|
<packaging>jar</packaging>
|
|
|
|
<name>Dependency-Check Ant Task</name>
|
|
<description>dependency-check-ant is an Ant Task that uses dependency-check-core to detect publicly disclosed vulnerabilities associated with the project's dependencies. The task will generate a report listing the dependency, any identified Common Platform Enumeration (CPE) identifiers, and the associated Common Vulnerability and Exposure (CVE) entries.</description>
|
|
<!-- begin copy from http://minds.coremedia.com/2012/09/11/problem-solved-deploy-multi-module-maven-project-site-as-github-pages/ -->
|
|
<distributionManagement>
|
|
<site>
|
|
<id>github-pages-site</id>
|
|
<name>Deployment through GitHub's site deployment plugin</name>
|
|
<url>${basedir}/../target/site/${project.version}/dependency-check-ant</url>
|
|
</site>
|
|
</distributionManagement>
|
|
<!-- end copy -->
|
|
<build>
|
|
<resources>
|
|
<resource>
|
|
<directory>${basedir}/src/main/resources</directory>
|
|
<includes>
|
|
<include>**/*.properties</include>
|
|
</includes>
|
|
<filtering>true</filtering>
|
|
</resource>
|
|
<resource>
|
|
<directory>${basedir}</directory>
|
|
<targetPath>META-INF</targetPath>
|
|
<includes>
|
|
<include>LICENSE.txt</include>
|
|
<include>NOTICE.txt</include>
|
|
</includes>
|
|
</resource>
|
|
</resources>
|
|
<testResources>
|
|
<testResource>
|
|
<directory>${basedir}/src/test/resources</directory>
|
|
<includes>
|
|
<include>**/*.xml</include>
|
|
</includes>
|
|
<filtering>true</filtering>
|
|
</testResource>
|
|
</testResources>
|
|
<plugins>
|
|
<plugin>
|
|
<groupId>org.apache.maven.plugins</groupId>
|
|
<artifactId>maven-resources-plugin</artifactId>
|
|
<configuration>
|
|
<escapeWindowsPaths>false</escapeWindowsPaths>
|
|
</configuration>
|
|
<executions>
|
|
<!-- the following executions are solely to setup the test environment -->
|
|
<execution>
|
|
<id>copy-test-data.zip</id>
|
|
<phase>validate</phase>
|
|
<goals>
|
|
<goal>copy-resources</goal>
|
|
</goals>
|
|
<configuration>
|
|
<outputDirectory>${project.build.directory}/test-classes</outputDirectory>
|
|
<resources>
|
|
<resource>
|
|
<directory>${basedir}/../src/test/resources</directory>
|
|
<filtering>false</filtering>
|
|
<includes>
|
|
<include>data.zip</include>
|
|
</includes>
|
|
</resource>
|
|
</resources>
|
|
</configuration>
|
|
</execution>
|
|
<execution>
|
|
<id>copy-test-resources-1</id>
|
|
<phase>validate</phase>
|
|
<goals>
|
|
<goal>copy-resources</goal>
|
|
</goals>
|
|
<configuration>
|
|
<outputDirectory>${project.build.directory}/test-classes/lib</outputDirectory>
|
|
<resources>
|
|
<resource>
|
|
<directory>${basedir}/../src/test/resources</directory>
|
|
<filtering>false</filtering>
|
|
<includes>
|
|
<include>org.mortbay.*.jar</include>
|
|
</includes>
|
|
</resource>
|
|
</resources>
|
|
</configuration>
|
|
</execution>
|
|
<execution>
|
|
<id>copy-test-resources-2</id>
|
|
<phase>validate</phase>
|
|
<goals>
|
|
<goal>copy-resources</goal>
|
|
</goals>
|
|
<configuration>
|
|
<outputDirectory>${project.build.directory}/test-classes/jars</outputDirectory>
|
|
<resources>
|
|
<resource>
|
|
<directory>${basedir}/../src/test/resources</directory>
|
|
<filtering>false</filtering>
|
|
<includes>
|
|
<include>axis-1.4.jar</include>
|
|
</includes>
|
|
</resource>
|
|
</resources>
|
|
</configuration>
|
|
</execution>
|
|
<execution>
|
|
<id>copy-test-resources-3</id>
|
|
<phase>validate</phase>
|
|
<goals>
|
|
<goal>copy-resources</goal>
|
|
</goals>
|
|
<configuration>
|
|
<outputDirectory>${project.build.directory}/test-classes/webroot</outputDirectory>
|
|
<resources>
|
|
<resource>
|
|
<directory>${basedir}/../src/test/resources</directory>
|
|
<filtering>false</filtering>
|
|
<includes>
|
|
<include>struts.jar</include>
|
|
</includes>
|
|
</resource>
|
|
</resources>
|
|
</configuration>
|
|
</execution>
|
|
<execution>
|
|
<id>copy-test-resources-4</id>
|
|
<phase>validate</phase>
|
|
<goals>
|
|
<goal>copy-resources</goal>
|
|
</goals>
|
|
<configuration>
|
|
<outputDirectory>${project.build.directory}/test-classes/list</outputDirectory>
|
|
<resources>
|
|
<resource>
|
|
<directory>${basedir}/../src/test/resources</directory>
|
|
<filtering>false</filtering>
|
|
<includes>
|
|
<include>org.mortbay.jetty.jar</include>
|
|
</includes>
|
|
</resource>
|
|
</resources>
|
|
</configuration>
|
|
</execution>
|
|
<execution>
|
|
<id>copy-data</id>
|
|
<phase>validate</phase>
|
|
<goals>
|
|
<goal>copy-resources</goal>
|
|
</goals>
|
|
<configuration>
|
|
<outputDirectory>${project.build.directory}/test-classes</outputDirectory>
|
|
<resources>
|
|
<resource>
|
|
<directory>${basedir}/../src/test/resources</directory>
|
|
<filtering>false</filtering>
|
|
<includes>
|
|
<include>db.cve.zip</include>
|
|
<include>index.cpe.zip</include>
|
|
</includes>
|
|
</resource>
|
|
</resources>
|
|
</configuration>
|
|
</execution>
|
|
</executions>
|
|
</plugin>
|
|
<plugin>
|
|
<groupId>org.apache.maven.plugins</groupId>
|
|
<artifactId>maven-compiler-plugin</artifactId>
|
|
</plugin>
|
|
<plugin>
|
|
<groupId>org.apache.maven.plugins</groupId>
|
|
<artifactId>maven-jar-plugin</artifactId>
|
|
</plugin>
|
|
<plugin>
|
|
<groupId>org.apache.maven.plugins</groupId>
|
|
<artifactId>maven-shade-plugin</artifactId>
|
|
<version>2.3</version>
|
|
<configuration>
|
|
<transformers>
|
|
<transformer implementation="org.apache.maven.plugins.shade.resource.ServicesResourceTransformer" />
|
|
<transformer implementation="org.apache.maven.plugins.shade.resource.AppendingTransformer">
|
|
<resource>META-INF/NOTICE.txt</resource>
|
|
</transformer>
|
|
<transformer implementation="org.apache.maven.plugins.shade.resource.DontIncludeResourceTransformer">
|
|
<resource>META-INF/NOTICE</resource>
|
|
</transformer>
|
|
<transformer implementation="org.apache.maven.plugins.shade.resource.DontIncludeResourceTransformer">
|
|
<resource>META-INF/LICENSE</resource>
|
|
</transformer>
|
|
</transformers>
|
|
</configuration>
|
|
<executions>
|
|
<execution>
|
|
<phase>package</phase>
|
|
<goals>
|
|
<goal>shade</goal>
|
|
</goals>
|
|
</execution>
|
|
</executions>
|
|
</plugin>
|
|
<plugin>
|
|
<groupId>org.codehaus.mojo</groupId>
|
|
<artifactId>cobertura-maven-plugin</artifactId>
|
|
<configuration>
|
|
<!--instrumentation>
|
|
<ignoreTrivial>true</ignoreTrivial>
|
|
</instrumentation-->
|
|
<check>
|
|
<branchRate>85</branchRate>
|
|
<lineRate>85</lineRate>
|
|
<haltOnFailure>false</haltOnFailure>
|
|
<totalBranchRate>85</totalBranchRate>
|
|
<totalLineRate>85</totalLineRate>
|
|
<packageLineRate>85</packageLineRate>
|
|
<packageBranchRate>85</packageBranchRate>
|
|
<regexes>
|
|
<regex>
|
|
<pattern>.*\$.*</pattern>
|
|
<branchRate>0</branchRate>
|
|
<lineRate>0</lineRate>
|
|
</regex>
|
|
</regexes>
|
|
</check>
|
|
</configuration>
|
|
<executions>
|
|
<execution>
|
|
<goals>
|
|
<goal>clean</goal>
|
|
</goals>
|
|
</execution>
|
|
</executions>
|
|
</plugin>
|
|
<plugin>
|
|
<groupId>org.apache.maven.plugins</groupId>
|
|
<artifactId>maven-surefire-plugin</artifactId>
|
|
<configuration>
|
|
<systemProperties>
|
|
<property>
|
|
<name>data.directory</name>
|
|
<value>${project.build.directory}/dependency-check-data</value>
|
|
</property>
|
|
</systemProperties>
|
|
</configuration>
|
|
</plugin>
|
|
</plugins>
|
|
</build>
|
|
<reporting>
|
|
<plugins>
|
|
<plugin>
|
|
<groupId>org.apache.maven.plugins</groupId>
|
|
<artifactId>maven-project-info-reports-plugin</artifactId>
|
|
<version>2.7</version>
|
|
<reportSets>
|
|
<reportSet>
|
|
<reports>
|
|
<report>summary</report>
|
|
<report>license</report>
|
|
<report>help</report>
|
|
</reports>
|
|
</reportSet>
|
|
</reportSets>
|
|
</plugin>
|
|
<plugin>
|
|
<groupId>org.apache.maven.plugins</groupId>
|
|
<artifactId>maven-javadoc-plugin</artifactId>
|
|
<version>2.9.1</version>
|
|
<configuration>
|
|
<failOnError>false</failOnError>
|
|
<bottom>Copyright© 2012-15 Jeremy Long. All Rights Reserved.</bottom>
|
|
</configuration>
|
|
<reportSets>
|
|
<reportSet>
|
|
<id>default</id>
|
|
<reports>
|
|
<report>javadoc</report>
|
|
</reports>
|
|
</reportSet>
|
|
</reportSets>
|
|
</plugin>
|
|
<plugin>
|
|
<groupId>org.codehaus.mojo</groupId>
|
|
<artifactId>versions-maven-plugin</artifactId>
|
|
<version>2.1</version>
|
|
<reportSets>
|
|
<reportSet>
|
|
<reports>
|
|
<report>dependency-updates-report</report>
|
|
<report>plugin-updates-report</report>
|
|
</reports>
|
|
</reportSet>
|
|
</reportSets>
|
|
</plugin>
|
|
<plugin>
|
|
<groupId>org.apache.maven.plugins</groupId>
|
|
<artifactId>maven-jxr-plugin</artifactId>
|
|
<version>2.4</version>
|
|
</plugin>
|
|
<plugin>
|
|
<groupId>org.codehaus.mojo</groupId>
|
|
<artifactId>cobertura-maven-plugin</artifactId>
|
|
<version>2.6</version>
|
|
</plugin>
|
|
<plugin>
|
|
<groupId>org.apache.maven.plugins</groupId>
|
|
<artifactId>maven-surefire-report-plugin</artifactId>
|
|
<version>2.16</version>
|
|
<reportSets>
|
|
<reportSet>
|
|
<reports>
|
|
<report>report-only</report>
|
|
</reports>
|
|
</reportSet>
|
|
</reportSets>
|
|
</plugin>
|
|
<plugin>
|
|
<groupId>org.codehaus.mojo</groupId>
|
|
<artifactId>taglist-maven-plugin</artifactId>
|
|
<version>2.4</version>
|
|
<configuration>
|
|
<tagListOptions>
|
|
<tagClasses>
|
|
<tagClass>
|
|
<displayName>Todo Work</displayName>
|
|
<tags>
|
|
<tag>
|
|
<matchString>todo</matchString>
|
|
<matchType>ignoreCase</matchType>
|
|
</tag>
|
|
<tag>
|
|
<matchString>FIXME</matchString>
|
|
<matchType>exact</matchType>
|
|
</tag>
|
|
</tags>
|
|
</tagClass>
|
|
</tagClasses>
|
|
</tagListOptions>
|
|
</configuration>
|
|
</plugin>
|
|
<plugin>
|
|
<groupId>org.apache.maven.plugins</groupId>
|
|
<artifactId>maven-checkstyle-plugin</artifactId>
|
|
<version>2.11</version>
|
|
<configuration>
|
|
<enableRulesSummary>false</enableRulesSummary>
|
|
<enableFilesSummary>false</enableFilesSummary>
|
|
<configLocation>${basedir}/../src/main/config/checkstyle-checks.xml</configLocation>
|
|
<headerLocation>${basedir}/../src/main/config/checkstyle-header.txt</headerLocation>
|
|
<suppressionsLocation>${basedir}/../src/main/config/checkstyle-suppressions.xml</suppressionsLocation>
|
|
<suppressionsFileExpression>checkstyle.suppressions.file</suppressionsFileExpression>
|
|
</configuration>
|
|
</plugin>
|
|
<plugin>
|
|
<groupId>org.apache.maven.plugins</groupId>
|
|
<artifactId>maven-pmd-plugin</artifactId>
|
|
<version>3.0.1</version>
|
|
<configuration>
|
|
<targetJdk>1.6</targetJdk>
|
|
<linkXref>true</linkXref>
|
|
<sourceEncoding>utf-8</sourceEncoding>
|
|
<excludes>
|
|
<exclude>**/generated/*.java</exclude>
|
|
</excludes>
|
|
<rulesets>
|
|
<ruleset>../src/main/config/dcrules.xml</ruleset>
|
|
<ruleset>/rulesets/java/basic.xml</ruleset>
|
|
<ruleset>/rulesets/java/imports.xml</ruleset>
|
|
<ruleset>/rulesets/java/unusedcode.xml</ruleset>
|
|
</rulesets>
|
|
</configuration>
|
|
</plugin>
|
|
<plugin>
|
|
<groupId>org.codehaus.mojo</groupId>
|
|
<artifactId>findbugs-maven-plugin</artifactId>
|
|
<version>2.5.3</version>
|
|
</plugin>
|
|
</plugins>
|
|
</reporting>
|
|
<dependencies>
|
|
<dependency>
|
|
<groupId>org.owasp</groupId>
|
|
<artifactId>dependency-check-core</artifactId>
|
|
<version>${project.parent.version}</version>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>org.owasp</groupId>
|
|
<artifactId>dependency-check-utils</artifactId>
|
|
<version>${project.parent.version}</version>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>org.owasp</groupId>
|
|
<artifactId>dependency-check-core</artifactId>
|
|
<version>${project.parent.version}</version>
|
|
<type>test-jar</type>
|
|
<scope>test</scope>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>org.apache.ant</groupId>
|
|
<artifactId>ant</artifactId>
|
|
<version>1.9.4</version>
|
|
</dependency>
|
|
<dependency>
|
|
<groupId>org.apache.ant</groupId>
|
|
<artifactId>ant-testutil</artifactId>
|
|
<version>1.9.4</version>
|
|
<scope>test</scope>
|
|
</dependency>
|
|
</dependencies>
|
|
</project>
|