Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix: document scanning dependency-check with dependency-check #5095

Merged
merged 9 commits into from
Dec 9, 2022
Merged

fix: document scanning dependency-check with dependency-check #5095

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
081d21d
fix: upgrade and/or exclude dependencies
jeremylong Nov 27, 2022
769c80a
fix: plugin configuration
jeremylong Nov 27, 2022
d100360
fix: seperate test dependencies into profile
jeremylong Nov 27, 2022
df9ddb9
fix: correct minimum maven version
jeremylong Nov 27, 2022
fd8397a
fix: correct imports
jeremylong Nov 27, 2022
1d2988c
fix: ensure build passes using maven api 3.1.0
jeremylong Dec 4, 2022
4b3667d
chore: clean up unused maven dependencies
aikebah Dec 8, 2022
f5d5732
chore: replace deprecated hamcrest-core by its successor hamcrest
aikebah Dec 8, 2022
7aacc2c
chore: also exclude hamcrest-core from junit to avoid re-introduction…
aikebah Dec 8, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 15 additions & 2 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -241,13 +241,26 @@ docker run --rm ^
```

Building From Source
-------------
--------------------

To build dependency-check (using Java 8) run the command:

```
mvn -s settings.xml install
```

Running dependency-check on dependency-check
--------------------------------------------

Dependency-check references several vulnerables dependencies that are never used
except as test resources. All of these optional test dependencies are included in
the `test-dependencies` profile. To run dependency-check against itself simple
exclude the `test-dependencies` profile;

```shell
mvn org.owasp:dependency-check-maven:aggregate -P-test-dependencies
```

Building the documentation
--------------------------

Expand All @@ -258,7 +271,7 @@ The documentation on the [github pages](http://jeremylong.github.io/DependencyCh
Once done, point your browser to `./target/staging/index.html`.

Building The Docker Image
-------------
-------------------------
To build dependency-check docker image run the command:

```
Expand Down
Loading