adjust dependency check plugin

This commit is contained in:
Armin Schrenk
2023-12-13 16:47:30 +01:00
parent 720fbd0e6b
commit 6929760979
2 changed files with 3 additions and 1 deletions

View File

@@ -31,7 +31,7 @@ jobs:
- name: Run org.owasp:dependency-check plugin
id: dependency-check
continue-on-error: true
run: mvn -B verify -Pdependency-check -DskipTests
run: mvn -B validate -Pdependency-check
env:
NVD_API_KEY: ${{ secrets.NVD_API_KEY }}
- name: Upload report on failure

View File

@@ -460,6 +460,7 @@
<groupId>org.owasp</groupId>
<artifactId>dependency-check-maven</artifactId>
<configuration>
<nvdValidForHours>24</nvdValidForHours>
<failBuildOnCVSS>0</failBuildOnCVSS>
<skipTestScope>true</skipTestScope>
<detail>true</detail>
@@ -471,6 +472,7 @@
<goals>
<goal>check</goal>
</goals>
<phase>validate</phase>
</execution>
</executions>
</plugin>