From e9ea740c4b4d539b5ebad901cb0cf21c82e6c2e3 Mon Sep 17 00:00:00 2001 From: Mark Kempster Date: Thu, 19 Oct 2017 22:47:26 -0400 Subject: [PATCH] Add project.url to satisfy the dependency-check-maven plugin The MANIFEST.MF contains an Implementation-URL key, that comes from project.url if defined. If not defined, jjwt's url comes from sonatype which seems to falsely associate it with a sonatype/nexus CVE and fails the project build. https://github.com/jwtk/jjwt/issues/234 --- pom.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/pom.xml b/pom.xml index 0f30bb3d..1c34c5b5 100644 --- a/pom.xml +++ b/pom.xml @@ -28,6 +28,7 @@ 0.10.0-SNAPSHOT JSON Web Token support for the JVM jar + https://github.com/jwtk/jjwt