fix: Merge pull request #5095 from jeremylong/fix-scan

fix: document scanning dependency-check with dependency-check
jeremylong · Dec 9, 2022 · 0e83491 · 0e83491
2 parents 01d6cd7 + 7aacc2c
commit 0e83491
Show file tree

Hide file tree

Showing 6 changed files with 153 additions and 259 deletions.
diff --git a/README.md b/README.md
@@ -241,13 +241,26 @@ docker run --rm ^
 ```
 
 Building From Source
--------------
+--------------------
+
 To build dependency-check (using Java 8) run the command:
 
 ```
 mvn -s settings.xml install
 ```
 
+Running dependency-check on dependency-check
+--------------------------------------------
+
+Dependency-check references several vulnerables dependencies that are never used
+except as test resources. All of these optional test dependencies are included in
+the `test-dependencies` profile. To run dependency-check against itself simple
+exclude the `test-dependencies` profile;
+
+```shell
+mvn org.owasp:dependency-check-maven:aggregate -P-test-dependencies
+```
+
 Building the documentation
 --------------------------
 
@@ -258,7 +271,7 @@ The documentation on the [github pages](http://jeremylong.github.io/DependencyCh
 Once done, point your browser to `./target/staging/index.html`.
 
 Building The Docker Image
--------------
+-------------------------
 To build dependency-check docker image run the command:
 
 ```