api-gateway icon indicating copy to clipboard operation
api-gateway copied to clipboard

Add reporting plugins to pom.xml

Open LarsTor opened this issue 6 years ago • 0 comments

Please add reporting plugins to pom.xml to update dependency versions properly.

Add dependency-updates-report for reporting project dependencies which have newer versions available. Add OWASP dependency-check for reporting any vulnerable components in the project dependencies.


	<reporting>
		<plugins>
		
		    ...

			<!-- OWASP dependency-check -->
            <plugin>
                <groupId>org.owasp</groupId>
                <artifactId>dependency-check-maven</artifactId>
                <version>4.0.0</version>
                <reportSets>
                    <reportSet>
                        <reports>
                            <report>aggregate</report>
                        </reports>
                    </reportSet>
                </reportSets>
            </plugin>
			
			<!-- Updates Reports -->
			<plugin>
				<groupId>org.codehaus.mojo</groupId>
				<artifactId>versions-maven-plugin</artifactId>
				<configuration>
					<rulesUri>file://${basedir}/maven-version-rules.xml</rulesUri>
				</configuration>
				<reportSets>
					<reportSet>
						<reports>
							<report>dependency-updates-report</report>
							<report>plugin-updates-report</report>
						</reports>
					</reportSet>
				</reportSets>
			</plugin>

LarsTor avatar Dec 07 '18 10:12 LarsTor