mirror of
https://github.com/apache/struts.git
synced 2026-08-05 22:56:59 +00:00
Upgrades OWASP Dependency Check plugin to the latest version
and reduces CVSS to 7 to detect other important vulnerable libraries
This commit is contained in:
@@ -311,12 +311,12 @@
|
||||
<plugin>
|
||||
<groupId>org.owasp</groupId>
|
||||
<artifactId>dependency-check-maven</artifactId>
|
||||
<version>3.0.2</version>
|
||||
<version>3.1.1</version>
|
||||
<configuration>
|
||||
<suppressionFiles>
|
||||
<suppressionFile>src/etc/project-suppression.xml</suppressionFile>
|
||||
</suppressionFiles>
|
||||
<failBuildOnCVSS>8</failBuildOnCVSS>
|
||||
<failBuildOnCVSS>7</failBuildOnCVSS>
|
||||
<skipProvidedScope>true</skipProvidedScope>
|
||||
<skipRuntimeScope>true</skipRuntimeScope>
|
||||
</configuration>
|
||||
|
||||
Reference in New Issue
Block a user