You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@tika.apache.org by "Tim Allison (Jira)" <ji...@apache.org> on 2021/12/16 16:32:00 UTC

[jira] [Created] (TIKA-3621) Add an ossindex-fail profile to fail on vulnerable dependencies

Tim Allison created TIKA-3621:
---------------------------------

             Summary: Add an ossindex-fail profile to fail on vulnerable dependencies
                 Key: TIKA-3621
                 URL: https://issues.apache.org/jira/browse/TIKA-3621
             Project: Tika
          Issue Type: Task
            Reporter: Tim Allison


We added ossindex checks a while ago, but we found that failing the build was annoying for users who were building on their own after releases and in a few other cases...iirc.  We changed <fail/> to false.

[~lewismc] recommended that we add a profile to fail the build and set up a github action to run the profile.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)