fix: ensure proper owasp and update to latest

Ensono · Jul 19, 2024 · 31d3948 · 31d3948
1 parent ef9b77e
commit 31d3948
Show file tree

Hide file tree

Showing 3 changed files with 24 additions and 3 deletions.
diff --git a/api-tests-karate/pom.xml b/api-tests-karate/pom.xml
@@ -19,6 +19,7 @@
         <puppycrawl-tools-checkstyle.version>8.44</puppycrawl-tools-checkstyle.version>
         <spotbugs-maven-plugin.version>4.2.3</spotbugs-maven-plugin.version>
         <spotbugs.version>4.5.2</spotbugs.version>
+        <owasp-dependency-check-plugin.version>10.0.3</owasp-dependency-check-plugin.version>
         <exec-maven-plugin.version>3.0.0</exec-maven-plugin.version>
     </properties>
 
@@ -71,6 +72,25 @@
                 </plugins>
             </build>
         </profile>
+        <profile>
+            <id>owasp-dependency-check</id>
+            <build>
+                <plugins>
+                    <plugin>
+                        <groupId>org.owasp</groupId>
+                        <artifactId>dependency-check-maven</artifactId>
+                        <version>${owasp-dependency-check-plugin.version}</version>
+                        <executions>
+                            <execution>
+                                <goals>
+                                    <goal>check</goal>
+                                </goals>
+                            </execution>
+                        </executions>
+                    </plugin>
+                </plugins>
+            </build>
+        </profile>
     </profiles>
 
     <build>

diff --git a/api-tests/pom.xml b/api-tests/pom.xml
@@ -49,7 +49,7 @@
 
         <!-- Maven plugins -->
         <spotbugs-maven-plugin.version>4.2.3</spotbugs-maven-plugin.version>
-        <owasp-dependency-check-plugin.version>6.5.0</owasp-dependency-check-plugin.version>
+        <owasp-dependency-check-plugin.version>10.0.3</owasp-dependency-check-plugin.version>
         <fmt-maven-plugin.version>2.13</fmt-maven-plugin.version>
         <maven-checkstyle-plugin.version>3.1.2</maven-checkstyle-plugin.version>
         <maven-surefire-plugin.version>3.0.0-M5</maven-surefire-plugin.version>

diff --git a/java/pom.xml b/java/pom.xml
@@ -27,8 +27,7 @@
 
     <applicationinsights.version>2.6.4</applicationinsights.version>
     <azure.springboot.version>4.0.0</azure.springboot.version>
-    <au.com.dius.pact-jvm-provider-spring.version>4.0.10
-    </au.com.dius.pact-jvm-provider-spring.version>
+    <au.com.dius.pact-jvm-provider-spring.version>4.0.10</au.com.dius.pact-jvm-provider-spring.version>
     <au.com.dius.pact.consumer-version>4.3.2</au.com.dius.pact.consumer-version>
     <au.com.dius.pact.provider.maven-version>4.2.7</au.com.dius.pact.provider.maven-version>
     <aws-java-sdk-s3.version>1.12.470</aws-java-sdk-s3.version>
@@ -37,6 +36,7 @@
     <spring.cloud.dependencies.version>2022.0.4</spring.cloud.dependencies.version>
     <pact.version>3.5.24</pact.version>
     <spring.data.commons>3.3.1</spring.data.commons>
+    <owasp-dependency-check-plugin.version>10.0.3</owasp-dependency-check-plugin.version>
 
     <!-- Set 'pact.broker.url' and 'pact.broker.token' -->
     <pact.broker.url/>
@@ -457,6 +457,7 @@
           <plugin>
             <groupId>org.owasp</groupId>
             <artifactId>dependency-check-maven</artifactId>
+            <version>${owasp-dependency-check-plugin.version}</version>
             <executions>
               <execution>
                 <goals>