Skip to content

Commit 534412e

Browse files
committed
Add NVD vulnerability checker Maven plugin
Checks fail if any found vulnerability's severity is 7 (high) or more. CVSS Severity ratings are explained here https://www.first.org/cvss/specification-document
1 parent db6c5ac commit 534412e

File tree

2 files changed

+22
-0
lines changed

2 files changed

+22
-0
lines changed

.nvd-suppressions.xml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
<?xml version="1.0" encoding="UTF-8"?>
2+
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.2.xsd">
3+
4+
</suppressions>

pom.xml

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -93,6 +93,24 @@
9393
</execution>
9494
</executions>
9595
</plugin>
96+
<plugin>
97+
<groupId>org.owasp</groupId>
98+
<artifactId>dependency-check-maven</artifactId>
99+
<version>5.0.0-M1</version>
100+
<configuration>
101+
<failBuildOnCVSS>7</failBuildOnCVSS>
102+
<suppressionFiles>
103+
<suppressionFile>.nvd-suppressions.xml</suppressionFile>
104+
</suppressionFiles>
105+
</configuration>
106+
<executions>
107+
<execution>
108+
<goals>
109+
<goal>check</goal>
110+
</goals>
111+
</execution>
112+
</executions>
113+
</plugin>
96114
</plugins>
97115
<pluginManagement>
98116
<plugins>

0 commit comments

Comments
 (0)