[
https://issues.apache.org/jira/browse/KAFKA-21023?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Chia-Ping Tsai updated KAFKA-21023:
-----------------------------------
Summary: Improve the dependency-check configuration (was: Improve the
usage of dependencycheck)
> Improve the dependency-check configuration
> ------------------------------------------
>
> Key: KAFKA-21023
> URL: https://issues.apache.org/jira/browse/KAFKA-21023
> Project: Kafka
> Issue Type: Improvement
> Reporter: Chia-Ping Tsai
> Assignee: Chia-Ping Tsai
> Priority: Minor
>
> There are a few improvements we can make to the dependency-check setup:
> # Upgrade the dependency-check plugin to 13.0.0.
> # Read the NVD API key from the {{NVD_API_KEY}} environment variable
> ({{{}nvd.apiKey = System.getenv('NVD_API_KEY'){}}}) so users can supply their
> own key.
> # Exclude the build-tool-only configurations ({{{}spotbugs{}}},
> {{{}spotbugsPlugins{}}}, {{{}spotbugsSlf4j{}}}, {{{}checkstyle{}}},
> {{{}scoverage{}}}, {{{}jacocoAgent{}}}, {{{}jacocoAnt{}}}) from the scan,
> since they are not shipped with Kafka.
> # Add a usage example to the README.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
