[jira] [Updated] (KAFKA-21023) Improve the dependency-check configuration

["Chia-Ping Tsai (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/KAFKA-21023?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Chia-Ping Tsai updated KAFKA-21023:
-----------------------------------
    Summary: Improve the dependency-check configuration  (was: Improve the usage of dependencycheck)

> Improve the dependency-check configuration
> ------------------------------------------
>
>                 Key: KAFKA-21023
>                 URL: https://issues.apache.org/jira/browse/KAFKA-21023
>             Project: Kafka
>          Issue Type: Improvement
>            Reporter: Chia-Ping Tsai
>            Assignee: Chia-Ping Tsai
>            Priority: Minor
>
> There are a few improvements we can make to the dependency-check setup:
>  # Upgrade the dependency-check plugin to 13.0.0.
>  # Read the NVD API key from the {{NVD_API_KEY}} environment variable ({{{}nvd.apiKey = System.getenv('NVD_API_KEY'){}}}) so users can supply their own key.
>  # Exclude the build-tool-only configurations ({{{}spotbugs{}}}, {{{}spotbugsPlugins{}}}, {{{}spotbugsSlf4j{}}}, {{{}checkstyle{}}}, {{{}scoverage{}}}, {{{}jacocoAgent{}}}, {{{}jacocoAnt{}}}) from the scan, since they are not shipped with Kafka.
>  # Add a usage example to the README.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)