taojintianxia opened a new issue, #30848:
URL: https://github.com/apache/shardingsphere/issues/30848
## Feature Request
**For English only**, other languages will not be accepted.
Please pay attention on issues you submitted, because we maybe need more
details.
If no response anymore and we cannot make decision by current information,
we will **close it**.
Please answer these questions before submitting your issue. Thanks!
### Is your feature request related to a problem?
Yes
### Describe the feature you would like.
Dependency-Check is a Software Composition Analysis (SCA) tool that attempts
to detect publicly disclosed vulnerabilities contained within a project’s
dependencies. It does this by determining if there is a Common Platform
Enumeration (CPE) identifier for a given dependency. If found, it will generate
a report linking to the associated CVE entries.
I'd like to add the maven plugin for dependency-check to shardingsphere
```xml
<plugin>
<groupId>org.owasp</groupId>
<artifactId>dependency-check-maven</artifactId>
</plugin>
```
and this plugin needs a API key to download the NVD data
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail:
[email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
