[
https://issues.apache.org/jira/browse/MPOM-210?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Elliotte Rusty Harold resolved MPOM-210.
----------------------------------------
Resolution: Won't Fix
> Adding CVE Checks via OWASP
> ---------------------------
>
> Key: MPOM-210
> URL: https://issues.apache.org/jira/browse/MPOM-210
> Project: Maven POMs
> Issue Type: Improvement
> Components: maven
> Affects Versions: MAVEN-33
> Reporter: Karl Heinz Marbaise
> Priority: Minor
> Fix For: MAVEN-35
>
>
> We should add a configuration for CVS checks for example via OWASP maven
> plugin.
> I think the first step should be add at least an entry in pluginManagement:
> {code}
> <plugin>
> <groupId>org.owasp</groupId>
> <artifactId>dependency-check-maven</artifactId>
> <version>3.3.2</version>
> </plugin>
> {code}
> The other parts would be to add an entry for:
> https://github.com/sonatype/ossindex-maven
> which is not a good idea at the moment, cause it does not support JDK 10...
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
