Chia-Ping Tsai created KAFKA-21023:
--------------------------------------
Summary: Improve the usage of dependencycheck
Key: KAFKA-21023
URL: https://issues.apache.org/jira/browse/KAFKA-21023
Project: Kafka
Issue Type: Improvement
Reporter: Chia-Ping Tsai
Assignee: Chia-Ping Tsai
There are a few improvements we can make to the dependency-check setup:
# Upgrade the dependency-check plugin to 13.0.0.
# Read the NVD API key from the {{NVD_API_KEY}} environment variable
({{{}nvd.apiKey = System.getenv('NVD_API_KEY'){}}}) so users can supply their
own key.
# Exclude the build-tool-only configurations ({{{}spotbugs{}}},
{{{}spotbugsPlugins{}}}, {{{}spotbugsSlf4j{}}}, {{{}checkstyle{}}},
{{{}scoverage{}}}, {{{}jacocoAgent{}}}, {{{}jacocoAnt{}}}) from the scan, since
they are not shipped with Kafka.
# Add a usage example to the README.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
