Add security issues analysis for Track 2 SDKs (#10103)

AzureSDKAutomation · Apr 14, 2020 · 074fea8 · 074fea8
1 parent 7327ec2
commit 074fea8
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/eng/versioning/external_dependencies.txt b/eng/versioning/external_dependencies.txt
@@ -9,6 +9,7 @@ com.github.spotbugs:spotbugs;4.0.0-beta3
 com.github.spotbugs:spotbugs-maven-plugin;3.1.12.2
 com.google.code.gson:gson;2.8.5
 com.google.guava:guava;24.1.1-jre
+com.h3xstream.findsecbugs:findsecbugs-plugin;1.9.0
 com.microsoft.azure:azure-annotations;1.7.0
 com.microsoft.azure:azure-arm-client-runtime;1.7.3
 com.microsoft.azure:azure-client-authentication;1.7.3

diff --git a/sdk/parents/azure-client-sdk-parent/pom.xml b/sdk/parents/azure-client-sdk-parent/pom.xml
@@ -184,6 +184,15 @@
           <excludeFilterFile>spotbugs/spotbugs-exclude.xml</excludeFilterFile>
           <failOnError>true</failOnError>
           <!-- Set this to true when src/samples and src/test are spotbugs clean in all Track 2 SDKs -->
+
+          <!-- Enable this plugin when issues documented are fixed -->
+<!--          <plugins>-->
+<!--            <plugin>-->
+<!--              <groupId>com.h3xstream.findsecbugs</groupId>-->
+<!--              <artifactId>findsecbugs-plugin</artifactId>-->
+<!--              <version>1.9.0</version> &lt;!&ndash; {x-version-update;com.h3xstream.findsecbugs:findsecbugs-plugin;external_dependency} &ndash;&gt;-->
+<!--            </plugin>-->
+<!--          </plugins>-->
           <includeTests>false</includeTests>
           <fork>true</fork>
         </configuration>