From 02c347afd4e83ea147be434739ceaeb83044393a Mon Sep 17 00:00:00 2001
From: Lukasz Lenart <lukaszlenart@apache.org>
Date: Tue, 20 Feb 2018 07:07:28 +0100
Subject: [PATCH] Upgrades OWASP Dependency Check plugin to the latest version
 and reduces CVSS to 7 to detect other important vulnerable libraries

---
 pom.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index a948f5f21..738ddc72e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -311,12 +311,12 @@
                 <plugin>
                     <groupId>org.owasp</groupId>
                     <artifactId>dependency-check-maven</artifactId>
-                    <version>3.0.2</version>
+                    <version>3.1.1</version>
                     <configuration>
                         <suppressionFiles>
                             <suppressionFile>src/etc/project-suppression.xml</suppressionFile>
                         </suppressionFiles>
-                        <failBuildOnCVSS>8</failBuildOnCVSS>
+                        <failBuildOnCVSS>7</failBuildOnCVSS>
                         <skipProvidedScope>true</skipProvidedScope>
                         <skipRuntimeScope>true</skipRuntimeScope>
                     </configuration>