Apache
/
hadoop
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

HADOOP-13732. Upgrade OWASP dependency-check plugin version. Contributed by Mike Yoder.

This commit is contained in:
Andrew Wang 2016-10-21 16:41:30 -07:00
parent 25438526ed
commit c473490da0
2 changed files with 11 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
BUILDING.txt
View File

@ -212,6 +212,14 @@ Maven build goals:
and it ignores the -Disal.prefix option. If -Disal.lib isn't given, the
bundling and building will fail.
Special plugins: OWASP's dependency-check:
OWASP's dependency-check plugin will scan the third party dependencies
of this project for known CVEs (security vulnerabilities against them).
It will produce a report in target/dependency-check-report.html. To
invoke, run 'mvn dependency-check:aggregate'. Note that this plugin
requires maven 3.1.1 or greater.
----------------------------------------------------------------------------------
Building components separately

5
pom.xml
View File

@ -107,7 +107,7 @@ xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xs
<lifecycle-mapping.version>1.0.0</lifecycle-mapping.version>
<maven-checkstyle-plugin.version>2.15</maven-checkstyle-plugin.version>
<checkstyle.version>6.6</checkstyle.version>
<dependency-check-maven.version>1.3.6</dependency-check-maven.version>
<dependency-check-maven.version>1.4.3</dependency-check-maven.version>
<shell-executable>bash</shell-executable>
</properties>
@ -407,7 +407,8 @@ xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xs
dependencies of this project for known CVEs (security
vulnerabilities against them). It will produce a report
in target/dependency-check-report.html. To invoke, run
'mvn dependency-check:aggregate'
'mvn dependency-check:aggregate'. Note that this plugin
requires maven 3.1.1 or greater.
-->
<groupId>org.owasp</groupId>
<artifactId>dependency-check-maven</artifactId>