[jira] [Updated] (MPOM-210) Adding CVE Checks via OWASP

["Herve Boutemy (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/MPOM-210?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Herve Boutemy updated MPOM-210:
-------------------------------
    Fix Version/s:     (was: MAVEN-34)
                   MAVEN-35

> Adding CVE Checks via OWASP
> ---------------------------
>
>                 Key: MPOM-210
>                 URL: https://issues.apache.org/jira/browse/MPOM-210
>             Project: Maven POMs
>          Issue Type: Improvement
>          Components: maven
>    Affects Versions: MAVEN-33
>            Reporter: Karl Heinz Marbaise
>            Priority: Minor
>             Fix For: MAVEN-35
>
>
> We should add a configuration for CVS checks for example via OWASP maven plugin.
> I think the first step should be add at least an entry in pluginManagement:
> {code}
>     <plugin>
>               <groupId>org.owasp</groupId>
>               <artifactId>dependency-check-maven</artifactId>
>               <version>3.3.2</version>
>   </plugin>
> {code}
> The other parts would be to add an entry for:
> https://github.com/sonatype/ossindex-maven
> which is not a good idea at the moment, cause it does not support JDK 10...



--
This message was sent by Atlassian Jira
(v8.3.4#803005)