|
18 | 18 | <checkstyle.skip>${wc.qa.skip}</checkstyle.skip>
|
19 | 19 | <findbugs.skip>${wc.qa.skip}</findbugs.skip>
|
20 | 20 | <pmd.skip>${wc.qa.skip}</pmd.skip>
|
21 |
| - <badges.skip>${wc.qa.skip}</badges.skip> |
22 | 21 |
|
23 | 22 | <javadoc.excluded.packages />
|
24 | 23 | <checkstyle.excludes />
|
25 | 24 |
|
26 | 25 | <!--
|
27 | 26 | OWASP dependency vulnerability scanner.
|
28 | 27 | -->
|
29 |
| - <bt.owasp.dependency-check.version>4.0.1</bt.owasp.dependency-check.version> |
30 |
| - <bt.owasp.dependency-check.skip>false</bt.owasp.dependency-check.skip> |
31 | 28 | <!-- allow for proxy settings -->
|
32 |
| - <bt.owasp.dependency-check.proxy></bt.owasp.dependency-check.proxy> |
33 |
| - <!-- Non java analysers are off by default because, well this is a Maven builder! --> |
34 |
| - <!-- nodejs nsp requires nsp on the path at scan time --> |
35 |
| - <bt.owasp.dependency-check.enableNsp>false</bt.owasp.dependency-check.enableNsp> |
36 |
| - <!-- RetireJs analyser has a known bug https://github.com/jeremylong/DependencyCheck/issues/1467 --> |
37 |
| - <bt.owasp.dependency-check.enableRetireJs>false</bt.owasp.dependency-check.enableRetireJs> |
38 |
| - <!-- nuspec analyser --> |
39 |
| - <bt.owasp.dependency-check.enableNuspec>false</bt.owasp.dependency-check.enableNuspec> |
40 |
| - <!-- swift analyser --> |
41 |
| - <bt.owasp.dependency-check.enableSwift>false</bt.owasp.dependency-check.enableSwift> |
42 |
| - <!-- assembly .net analyser --> |
43 |
| - <bt.owasp.dependency-check.enableAssembly.Net>false</bt.owasp.dependency-check.enableAssembly.Net> |
| 29 | + <bt.owasp.dependency-check.proxy /> |
44 | 30 | </properties>
|
45 | 31 |
|
46 | 32 | <description>
|
|
56 | 42 | <plugin>
|
57 | 43 | <groupId>org.owasp</groupId>
|
58 | 44 | <artifactId>dependency-check-maven</artifactId>
|
59 |
| - <version>${bt.owasp.dependency-check.version}</version> |
| 45 | + <version>4.0.1</version> |
60 | 46 | <configuration>
|
61 | 47 | <failBuildOnAnyVulnerability>true</failBuildOnAnyVulnerability>
|
62 | 48 | <mavenSettingsProxyId>${bt.owasp.dependency-check.proxy}</mavenSettingsProxyId>
|
63 |
| - <retireJsAnalyzerEnabled>${bt.owasp.dependency-check.enableRetireJs}</retireJsAnalyzerEnabled><!-- see https://github.com/jeremylong/DependencyCheck/issues/1467 before turning this on --> |
64 |
| - <nspAnalyzerEnabled>${bt.owasp.dependency-check.enableNsp}</nspAnalyzerEnabled> |
65 |
| - <nuspecAnalyzerEnabled>${bt.owasp.dependency-check.enableNuspec}</nuspecAnalyzerEnabled> |
66 |
| - <swiftPackageManagerAnalyzerEnabled>${bt.owasp.dependency-check.enableSwift}</swiftPackageManagerAnalyzerEnabled> |
67 |
| - <assemblyAnalyzerEnabled>${bt.owasp.dependency-check.enableAssembly.Net}</assemblyAnalyzerEnabled> |
| 49 | + <retireJsAnalyzerEnabled>false</retireJsAnalyzerEnabled><!-- see https://github.com/jeremylong/DependencyCheck/issues/1467 before turning this on --> |
| 50 | + <nspAnalyzerEnabled>false</nspAnalyzerEnabled> |
| 51 | + <nuspecAnalyzerEnabled>false</nuspecAnalyzerEnabled> |
| 52 | + <swiftPackageManagerAnalyzerEnabled>false</swiftPackageManagerAnalyzerEnabled> |
| 53 | + <assemblyAnalyzerEnabled>false</assemblyAnalyzerEnabled> |
68 | 54 | </configuration>
|
69 | 55 | </plugin>
|
70 | 56 | </plugins>
|
|
127 | 113 | <plugin>
|
128 | 114 | <groupId>org.codehaus.mojo</groupId>
|
129 | 115 | <artifactId>findbugs-maven-plugin</artifactId>
|
130 |
| - <version>3.0.3</version> |
| 116 | + <version>3.0.5</version> |
131 | 117 | <configuration>
|
132 | 118 | <failOnError>true</failOnError>
|
133 | 119 | <effort>Max</effort>
|
|
173 | 159 | </executions>
|
174 | 160 | </plugin>
|
175 | 161 |
|
176 |
| - <!-- Generate badges. --> |
177 |
| - <plugin> |
178 |
| - <groupId>com.github.bordertech.buildtools</groupId> |
179 |
| - <artifactId>badger</artifactId> |
180 |
| - <version>1.0.0</version> |
181 |
| - <executions> |
182 |
| - <execution> |
183 |
| - <phase>post-site</phase> |
184 |
| - <goals> |
185 |
| - <goal>badges</goal> |
186 |
| - </goals> |
187 |
| - <configuration> |
188 |
| - <skip>${badges.skip}</skip> |
189 |
| - <outputDir>target/site/badges</outputDir> |
190 |
| - <inputFiles> |
191 |
| - <inputFile>target/pmd.xml</inputFile> |
192 |
| - <inputFile>target/findbugs-report.xml</inputFile> |
193 |
| - <inputFile>target/findbugsXml.xml</inputFile> |
194 |
| - <inputFile>target/checkstyle-result.xml</inputFile> |
195 |
| - <inputFile>target/coverage-report.xml</inputFile> |
196 |
| - </inputFiles> |
197 |
| - </configuration> |
198 |
| - </execution> |
199 |
| - </executions> |
200 |
| - </plugin> |
201 |
| - |
202 | 162 | <plugin>
|
203 | 163 | <groupId>org.owasp</groupId>
|
204 | 164 | <artifactId>dependency-check-maven</artifactId>
|
205 |
| - <configuration> |
206 |
| - <skip>${bt.owasp.dependency-check.skip}</skip> |
207 |
| - </configuration> |
208 | 165 | <executions>
|
209 | 166 | <execution>
|
210 | 167 | <id>checkDependencies</id>
|
|
219 | 176 | </plugins>
|
220 | 177 | </build>
|
221 | 178 |
|
222 |
| - <reporting> |
223 |
| - <plugins> |
224 |
| - |
225 |
| - <!-- Generate Reports Information about the project. --> |
226 |
| - <plugin> |
227 |
| - <groupId>org.apache.maven.plugins</groupId> |
228 |
| - <artifactId>maven-project-info-reports-plugin</artifactId> |
229 |
| - <version>3.0.0</version> |
230 |
| - <reportSets> |
231 |
| - <reportSet> |
232 |
| - <reports> |
233 |
| - <report>index</report> |
234 |
| - <report>license</report> |
235 |
| - <report>mailing-list</report> |
236 |
| - <report>summary</report> |
237 |
| - </reports> |
238 |
| - </reportSet> |
239 |
| - </reportSets> |
240 |
| - </plugin> |
241 |
| - |
242 |
| - <!-- Self Aggregating. Plugin automatically aggregates sub modules. --> |
243 |
| - <!-- Produce a cross-reference of the project's source. (Self Aggregating). --> |
244 |
| - <plugin> |
245 |
| - <groupId>org.apache.maven.plugins</groupId> |
246 |
| - <artifactId>maven-jxr-plugin</artifactId> |
247 |
| - <version>2.5</version> |
248 |
| - <reportSets> |
249 |
| - <reportSet> |
250 |
| - <inherited>false</inherited> |
251 |
| - <reports> |
252 |
| - <report>aggregate</report> |
253 |
| - <!-- |
254 |
| - <report>test-aggregate</report> |
255 |
| - --> |
256 |
| - </reports> |
257 |
| - </reportSet> |
258 |
| - </reportSets> |
259 |
| - </plugin> |
260 |
| - |
261 |
| - <!-- Generate Javadoc. (Self Aggregating)--> |
262 |
| - <plugin> |
263 |
| - <groupId>org.apache.maven.plugins</groupId> |
264 |
| - <artifactId>maven-javadoc-plugin</artifactId> |
265 |
| - <version>3.0.1</version> |
266 |
| - <configuration> |
267 |
| - <charset>UTF-8</charset> |
268 |
| - <encoding>UTF-8</encoding> |
269 |
| - <docencoding>UTF-8</docencoding> |
270 |
| - <breakiterator>true</breakiterator> |
271 |
| - <version>true</version> |
272 |
| - <keywords>true</keywords> |
273 |
| - <excludePackageNames>${javadoc.excluded.packages}</excludePackageNames> |
274 |
| - </configuration> |
275 |
| - <reportSets> |
276 |
| - <reportSet> |
277 |
| - <inherited>false</inherited> |
278 |
| - <reports> |
279 |
| - <report>aggregate</report> |
280 |
| - <!-- |
281 |
| - <report>test-aggregate</report> |
282 |
| - --> |
283 |
| - </reports> |
284 |
| - </reportSet> |
285 |
| - </reportSets> |
286 |
| - </plugin> |
287 |
| - |
288 |
| - <!-- Generate the web interface version of the test results (Aggregate Parameter). --> |
289 |
| - <!-- Run site twice to get correct results. --> |
290 |
| - <plugin> |
291 |
| - <groupId>org.apache.maven.plugins</groupId> |
292 |
| - <artifactId>maven-surefire-report-plugin</artifactId> |
293 |
| - <version>${surefire.version}</version> |
294 |
| - <configuration> |
295 |
| - <aggregate>true</aggregate> |
296 |
| - </configuration> |
297 |
| - <reportSets> |
298 |
| - <reportSet> |
299 |
| - <inherited>false</inherited> |
300 |
| - <reports> |
301 |
| - <report>report</report> |
302 |
| - </reports> |
303 |
| - </reportSet> |
304 |
| - </reportSets> |
305 |
| - </plugin> |
306 |
| - |
307 |
| - <!-- QA Reports. --> |
308 |
| - <!-- Generate the Checkstyle report. (Self Aggregating) --> |
309 |
| - <plugin> |
310 |
| - <groupId>org.apache.maven.plugins</groupId> |
311 |
| - <artifactId>maven-checkstyle-plugin</artifactId> |
312 |
| - <version>3.0.0</version> |
313 |
| - <configuration> |
314 |
| - <skip>false</skip> |
315 |
| - <configLocation>bordertech/checkstyle.xml</configLocation> |
316 |
| - <consoleOutput>true</consoleOutput> |
317 |
| - <excludes>${checkstyle.excludes}</excludes> |
318 |
| - <headerFile /> |
319 |
| - </configuration> |
320 |
| - <reportSets> |
321 |
| - <reportSet> |
322 |
| - <inherited>false</inherited> |
323 |
| - <reports> |
324 |
| - <report>checkstyle-aggregate</report> |
325 |
| - </reports> |
326 |
| - </reportSet> |
327 |
| - </reportSets> |
328 |
| - </plugin> |
329 |
| - |
330 |
| - <!-- PMD and CPD Reports (Aggregate Parameter). --> |
331 |
| - <plugin> |
332 |
| - <groupId>org.apache.maven.plugins</groupId> |
333 |
| - <artifactId>maven-pmd-plugin</artifactId> |
334 |
| - <version>3.10.0</version> |
335 |
| - <configuration> |
336 |
| - <skip>false</skip> |
337 |
| - <aggregate>true</aggregate> |
338 |
| - <failurePriority>5</failurePriority> |
339 |
| - </configuration> |
340 |
| - <reportSets> |
341 |
| - <reportSet> |
342 |
| - <inherited>false</inherited> |
343 |
| - <reports> |
344 |
| - <report>pmd</report> |
345 |
| - <report>cpd</report> |
346 |
| - </reports> |
347 |
| - </reportSet> |
348 |
| - </reportSets> |
349 |
| - </plugin> |
350 |
| - |
351 |
| - <!-- Generate Findbugs reports. (Does not support aggregate.) --> |
352 |
| - <!-- Run site twice to get Findbugs report.--> |
353 |
| - <plugin> |
354 |
| - <groupId>org.codehaus.mojo</groupId> |
355 |
| - <artifactId>findbugs-maven-plugin</artifactId> |
356 |
| - <version>3.0.5</version> |
357 |
| - <configuration> |
358 |
| - <skip>false</skip> |
359 |
| - <effort>Max</effort> |
360 |
| - <includeTests>false</includeTests> |
361 |
| - <excludeFilterFile>bordertech/findbugs-exclude-filter.xml</excludeFilterFile> |
362 |
| - <threshold>Low</threshold> |
363 |
| - <failOnError>false</failOnError> |
364 |
| - <findbugsXmlOutputDirectory>${project.build.directory}/findbugs-rep</findbugsXmlOutputDirectory> |
365 |
| - </configuration> |
366 |
| - </plugin> |
367 |
| - |
368 |
| - <!-- Generate the dependency vulnerability check report --> |
369 |
| - <plugin> |
370 |
| - <groupId>org.owasp</groupId> |
371 |
| - <artifactId>dependency-check-maven</artifactId> |
372 |
| - <version>${bt.owasp.dependency-check.version}</version> |
373 |
| - <reportSets> |
374 |
| - <reportSet> |
375 |
| - <reports> |
376 |
| - <report>aggregate</report> |
377 |
| - </reports> |
378 |
| - <configuration> |
379 |
| - <skip>false</skip> |
380 |
| - <failOnError>false</failOnError> |
381 |
| - <retireJsAnalyzerEnabled>${bt.owasp.dependency-check.enableRetireJs}</retireJsAnalyzerEnabled><!-- see https://github.com/jeremylong/DependencyCheck/issues/1467 before turning this on --> |
382 |
| - <nspAnalyzerEnabled>${bt.owasp.dependency-check.enableNsp}</nspAnalyzerEnabled> |
383 |
| - <nuspecAnalyzerEnabled>${bt.owasp.dependency-check.enableNuspec}</nuspecAnalyzerEnabled> |
384 |
| - <swiftPackageManagerAnalyzerEnabled>${bt.owasp.dependency-check.enableSwift}</swiftPackageManagerAnalyzerEnabled> |
385 |
| - <assemblyAnalyzerEnabled>${bt.owasp.dependency-check.enableAssembly.Net}</assemblyAnalyzerEnabled> |
386 |
| - </configuration> |
387 |
| - </reportSet> |
388 |
| - </reportSets> |
389 |
| - </plugin> |
390 |
| - |
391 |
| - </plugins> |
392 |
| - </reporting> |
393 |
| - |
394 | 179 | </project>
|
0 commit comments