commit 3af39fdf20808c8b315e2ef45fba3df7e10491b1
author Colm O hEigeartaigh <coheigea@apache.org> Mon Aug 13 09:28:58 2018 +0000
committer Colm O hEigeartaigh <coheigea@apache.org> Mon Aug 13 09:28:58 2018 +0000
tree 530173f489dd6883622c8d8351953e8ea3369426
parent 27065be084c4b12c02331a89349f19d7c11c4aa7

Adding owasp dependency check

git-svn-id: https://svn.apache.org/repos/asf/santuario/xml-security-java/trunk@1837931 13f79535-47bb-0310-9956-ffa450edef68

pom.xml

diff --git a/pom.xml b/pom.xml
index edda83e..3fe1f62 100644
--- a/pom.xml
+++ b/pom.xml
@@ -341,6 +341,19 @@
                         <minSeverity>${minSeverity}</minSeverity>
                     </configuration>
                 </plugin>
+                <plugin>
+                    <groupId>org.owasp</groupId>
+                    <artifactId>dependency-check-maven</artifactId>
+                    <version>${maven-owasp-plugin-version}</version>
+                    <executions>
+                        <execution>
+                            <phase>validate</phase>
+                            <goals>
+                                <goal>check</goal>
+                            </goals>
+                        </execution>
+                    </executions>
+                </plugin>
 
             </plugins>
         </pluginManagement>
@@ -502,6 +515,18 @@
                 </repository>
             </repositories>
         </profile>
+        <profile>
+            <id>dependencycheck</id>
+            <build>
+                <plugins>
+                    <plugin>
+                        <groupId>org.owasp</groupId>
+                        <artifactId>dependency-check-maven</artifactId>
+                    </plugin>
+                </plugins>
+            </build>
+        </profile>
+
     </profiles>
 
     <properties>
@@ -520,6 +545,7 @@
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <targetJdk>1.8</targetJdk>
         <clirr.version>2.8</clirr.version>
+        <maven-owasp-plugin-version>3.3.1</maven-owasp-plugin-version>
 
         <!-- Allow Clirr severity to be overriden by the command-line option -DminSeverity=level -->
         <minSeverity>info</minSeverity>
@@ -639,6 +665,11 @@
                     <minSeverity>${minSeverity}</minSeverity>
                 </configuration>
             </plugin>
+            <plugin>
+                <groupId>org.owasp</groupId>
+                <artifactId>dependency-check-maven</artifactId>
+                <version>${maven-owasp-plugin-version}</version>
+            </plugin>
         </plugins>
     </reporting>
 </project>