[jira] [Created] (KAFKA-21023) Improve the usage of dependencycheck

["Chia-Ping Tsai (Jira)" <ji...@apache.org>]

Chia-Ping Tsai created KAFKA-21023:
--------------------------------------

             Summary: Improve the usage of dependencycheck
                 Key: KAFKA-21023
                 URL: https://issues.apache.org/jira/browse/KAFKA-21023
             Project: Kafka
          Issue Type: Improvement
            Reporter: Chia-Ping Tsai
            Assignee: Chia-Ping Tsai


There are a few improvements we can make to the dependency-check setup:
 # Upgrade the dependency-check plugin to 13.0.0.
 # Read the NVD API key from the {{NVD_API_KEY}} environment variable ({{{}nvd.apiKey = System.getenv('NVD_API_KEY'){}}}) so users can supply their own key.
 # Exclude the build-tool-only configurations ({{{}spotbugs{}}}, {{{}spotbugsPlugins{}}}, {{{}spotbugsSlf4j{}}}, {{{}checkstyle{}}}, {{{}scoverage{}}}, {{{}jacocoAgent{}}}, {{{}jacocoAnt{}}}) from the scan, since they are not shipped with Kafka.
 # Add a usage example to the README.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)