dependency-check-ant
Used in:
components
- OverviewOverview
- VersionsVersions
- DependentsDependents
- DependenciesDependencies
<dependency> <groupId>org.owasp</groupId> <artifactId>dependency-check-ant</artifactId> <version>1.3.0</version> </dependency>
<?xml version="1.0" encoding="UTF-8"?> <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd"> <parent> <artifactId>dependency-check-parent</artifactId> <groupId>org.owasp</groupId> <version>1.3.0</version> </parent> <modelVersion>4.0.0</modelVersion> <artifactId>dependency-check-ant</artifactId> <name>Dependency-Check Ant Task</name> <description>dependency-check-ant is an Ant Task that uses dependency-check-core to detect publicly disclosed vulnerabilities associated with the project's dependencies. The task will generate a report listing the dependency, any identified Common Platform Enumeration (CPE) identifiers, and the associated Common Vulnerability and Exposure (CVE) entries.</description> <build> <resources> <resource> <filtering>true</filtering> <directory>${basedir}/src/main/resources</directory> <includes> <include>**/*.properties</include> </includes> </resource> <resource> <targetPath>META-INF</targetPath> <directory>${basedir}</directory> <includes> <include>LICENSE.txt</include> <include>NOTICE.txt</include> </includes> </resource> </resources> <testResources> <testResource> <filtering>true</filtering> <directory>${basedir}/src/test/resources</directory> <includes> <include>**/*.xml</include> </includes> </testResource> </testResources> <plugins> <plugin> <artifactId>maven-resources-plugin</artifactId> <executions> <execution> <id>copy-test-data.zip</id> <phase>validate</phase> <goals> <goal>copy-resources</goal> </goals> <configuration> <outputDirectory>${project.build.directory}/test-classes</outputDirectory> <resources> <resource> <directory>${basedir}/../src/test/resources</directory> <filtering>false</filtering> <includes> <include>data.zip</include> </includes> </resource> </resources> </configuration> </execution> <execution> <id>copy-test-resources-1</id> <phase>validate</phase> <goals> <goal>copy-resources</goal> </goals> <configuration> <outputDirectory>${project.build.directory}/test-classes/lib</outputDirectory> <resources> <resource> <directory>${basedir}/../src/test/resources</directory> <filtering>false</filtering> <includes> <include>org.mortbay.*.jar</include> </includes> </resource> </resources> </configuration> </execution> <execution> <id>copy-test-resources-2</id> <phase>validate</phase> <goals> <goal>copy-resources</goal> </goals> <configuration> <outputDirectory>${project.build.directory}/test-classes/jars</outputDirectory> <resources> <resource> <directory>${basedir}/../src/test/resources</directory> <filtering>false</filtering> <includes> <include>axis-1.4.jar</include> </includes> </resource> </resources> </configuration> </execution> <execution> <id>copy-test-resources-3</id> <phase>validate</phase> <goals> <goal>copy-resources</goal> </goals> <configuration> <outputDirectory>${project.build.directory}/test-classes/webroot</outputDirectory> <resources> <resource> <directory>${basedir}/../src/test/resources</directory> <filtering>false</filtering> <includes> <include>struts.jar</include> </includes> </resource> </resources> </configuration> </execution> <execution> <id>copy-test-resources-4</id> <phase>validate</phase> <goals> <goal>copy-resources</goal> </goals> <configuration> <outputDirectory>${project.build.directory}/test-classes/list</outputDirectory> <resources> <resource> <directory>${basedir}/../src/test/resources</directory> <filtering>false</filtering> <includes> <include>org.mortbay.jetty.jar</include> </includes> </resource> </resources> </configuration> </execution> <execution> <id>copy-data</id> <phase>validate</phase> <goals> <goal>copy-resources</goal> </goals> <configuration> <outputDirectory>${project.build.directory}/test-classes</outputDirectory> <resources> <resource> <directory>${basedir}/../src/test/resources</directory> <filtering>false</filtering> <includes> <include>db.cve.zip</include> <include>index.cpe.zip</include> </includes> </resource> </resources> </configuration> </execution> </executions> <configuration> <escapeWindowsPaths>false</escapeWindowsPaths> </configuration> </plugin> <plugin> <artifactId>maven-compiler-plugin</artifactId> </plugin> <plugin> <artifactId>maven-jar-plugin</artifactId> </plugin> <plugin> <artifactId>maven-shade-plugin</artifactId> <version>2.3</version> <executions> <execution> <phase>package</phase> <goals> <goal>shade</goal> </goals> </execution> </executions> <configuration> <transformers> <transformer /> <transformer> <resource>META-INF/NOTICE.txt</resource> </transformer> <transformer> <resource>META-INF/NOTICE</resource> </transformer> <transformer> <resource>META-INF/LICENSE</resource> </transformer> </transformers> </configuration> </plugin> <plugin> <groupId>org.codehaus.mojo</groupId> <artifactId>cobertura-maven-plugin</artifactId> <executions> <execution> <goals> <goal>clean</goal> </goals> </execution> </executions> <configuration> <check> <branchRate>85</branchRate> <lineRate>85</lineRate> <haltOnFailure>false</haltOnFailure> <totalBranchRate>85</totalBranchRate> <totalLineRate>85</totalLineRate> <packageLineRate>85</packageLineRate> <packageBranchRate>85</packageBranchRate> <regexes> <regex> <pattern>.*\$.*</pattern> <branchRate>0</branchRate> <lineRate>0</lineRate> </regex> </regexes> </check> </configuration> </plugin> <plugin> <artifactId>maven-surefire-plugin</artifactId> <configuration> <systemProperties> <property> <name>data.directory</name> <value>${project.build.directory}/dependency-check-data</value> </property> </systemProperties> </configuration> </plugin> </plugins> </build> <dependencies> <dependency> <groupId>org.owasp</groupId> <artifactId>dependency-check-core</artifactId> <version>1.3.0</version> <type>test-jar</type> <scope>test</scope> </dependency> <dependency> <groupId>org.apache.ant</groupId> <artifactId>ant-testutil</artifactId> <version>1.9.5</version> <scope>test</scope> </dependency> <dependency> <groupId>junit</groupId> <artifactId>junit</artifactId> <version>4.12</version> <scope>test</scope> </dependency> <dependency> <groupId>org.hamcrest</groupId> <artifactId>hamcrest-core</artifactId> <version>1.3</version> <scope>test</scope> </dependency> </dependencies> <reporting> <plugins> <plugin> <artifactId>maven-project-info-reports-plugin</artifactId> <version>${reporting.project-info-reports-plugin.version}</version> <reportSets> <reportSet> <reports> <report>summary</report> <report>license</report> <report>help</report> </reports> </reportSet> </reportSets> </plugin> <plugin> <artifactId>maven-javadoc-plugin</artifactId> <version>${reporting.javadoc-plugin.version}</version> <configuration> <failOnError>false</failOnError> <bottom>Copyright© 2012-15 Jeremy Long. All Rights Reserved.</bottom> </configuration> <reportSets> <reportSet> <reports> <report>javadoc</report> </reports> </reportSet> </reportSets> </plugin> <plugin> <groupId>org.codehaus.mojo</groupId> <artifactId>versions-maven-plugin</artifactId> <version>${reporting.versions-plugin.version}</version> <reportSets> <reportSet> <reports> <report>dependency-updates-report</report> <report>plugin-updates-report</report> </reports> </reportSet> </reportSets> </plugin> <plugin> <artifactId>maven-jxr-plugin</artifactId> <version>${reporting.jxr-plugin.version}</version> </plugin> <plugin> <groupId>org.codehaus.mojo</groupId> <artifactId>cobertura-maven-plugin</artifactId> <version>${reporting.cobertura-plugin.version}</version> </plugin> <plugin> <artifactId>maven-surefire-report-plugin</artifactId> <version>${reporting.surefire-report-plugin.version}</version> <reportSets> <reportSet> <reports> <report>report-only</report> </reports> </reportSet> </reportSets> </plugin> <plugin> <groupId>org.codehaus.mojo</groupId> <artifactId>taglist-maven-plugin</artifactId> <version>${reporting.taglist-plugin.version}</version> <configuration> <tagListOptions> <tagClasses> <tagClass> <displayName>Todo Work</displayName> <tags> <tag> <matchString>todo</matchString> <matchType>ignoreCase</matchType> </tag> <tag> <matchString>FIXME</matchString> <matchType>exact</matchType> </tag> </tags> </tagClass> </tagClasses> </tagListOptions> </configuration> </plugin> <plugin> <artifactId>maven-checkstyle-plugin</artifactId> <version>${reporting.checkstyle-plugin.version}</version> <configuration> <enableRulesSummary>false</enableRulesSummary> <enableFilesSummary>false</enableFilesSummary> <configLocation>${basedir}/../src/main/config/checkstyle-checks.xml</configLocation> <headerLocation>${basedir}/../src/main/config/checkstyle-header.txt</headerLocation> <suppressionsLocation>${basedir}/../src/main/config/checkstyle-suppressions.xml</suppressionsLocation> <suppressionsFileExpression>checkstyle.suppressions.file</suppressionsFileExpression> </configuration> </plugin> <plugin> <artifactId>maven-pmd-plugin</artifactId> <version>${reporting.pmd-plugin.version}</version> <configuration> <targetJdk>1.6</targetJdk> <linkXref>true</linkXref> <sourceEncoding>utf-8</sourceEncoding> <excludes> <exclude>**/generated/*.java</exclude> </excludes> <rulesets> <ruleset>../src/main/config/dcrules.xml</ruleset> <ruleset>/rulesets/java/basic.xml</ruleset> <ruleset>/rulesets/java/imports.xml</ruleset> <ruleset>/rulesets/java/unusedcode.xml</ruleset> </rulesets> </configuration> </plugin> <plugin> <groupId>org.codehaus.mojo</groupId> <artifactId>findbugs-maven-plugin</artifactId> <version>${reporting.findbugs-plugin.version}</version> </plugin> </plugins> </reporting> <distributionManagement> <site> <id>github-pages-site</id> <name>Deployment through GitHub's site deployment plugin</name> <url>${basedir}/../target/site/${project.version}/dependency-check-ant</url> </site> </distributionManagement> </project>