add OWASP dependencyCheck

2022-08-04 12:26:41 +02:00
parent d9ee0017dd
commit 80b1e0ff25
3 changed files with 39 additions and 1 deletions
--- a/build.gradle
+++ b/build.gradle
@ -72,3 +72,13 @@ spotless {
        toggleOffOn()
    }
 }
+project.tasks.check.dependsOn(spotlessCheck)
+
+dependencyCheck {
+    cveValidForHours=4
+    format = 'ALL'
+    suppressionFile = 'etc/owasp-dependency-check-suppression.xml'
+    failOnError = true
+    failBuildOnCVSS = 7
+}
+project.tasks.check.dependsOn(dependencyCheckAnalyze)