Upgrades OWASP Dependency Check plugin to the latest version

and reduces CVSS to 7 to detect other important vulnerable libraries
This commit is contained in:
Lukasz Lenart
2018-02-20 07:07:28 +01:00
parent def4adacd6
commit 02c347afd4
+2 -2
View File
@@ -311,12 +311,12 @@
<plugin>
<groupId>org.owasp</groupId>
<artifactId>dependency-check-maven</artifactId>
<version>3.0.2</version>
<version>3.1.1</version>
<configuration>
<suppressionFiles>
<suppressionFile>src/etc/project-suppression.xml</suppressionFile>
</suppressionFiles>
<failBuildOnCVSS>8</failBuildOnCVSS>
<failBuildOnCVSS>7</failBuildOnCVSS>
<skipProvidedScope>true</skipProvidedScope>
<skipRuntimeScope>true</skipRuntimeScope>
</configuration>