Dependency check maven plugin moved to reporting section and upgraded to latest plugin version
#CTCTOWALTZ-1388
<build>
<plugins>
+ <plugin>
+ <groupId>org.apache.maven.plugins</groupId>
+ <artifactId>maven-site-plugin</artifactId>
+ <version>3.7.1</version>
+ </plugin>
+ <plugin>
+ <groupId>org.apache.maven.plugins</groupId>
+ <artifactId>maven-project-info-reports-plugin</artifactId>
+ <version>3.0.0</version>
+ </plugin>
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-compiler-plugin</artifactId>
<doUpdate>false</doUpdate>
</configuration>
</plugin>
+ </plugins>
+ </build>
+ <reporting>
+ <plugins>
<plugin>
<groupId>org.owasp</groupId>
<artifactId>dependency-check-maven</artifactId>
- <version>1.4.5</version>
<configuration>
<cveValidForHours>48</cveValidForHours>
<!--<failBuildOnCVSS>7</failBuildOnCVSS>-->
+ <!--mavenSettingsProxyId>artifactory</mavenSettingsProxyId-->
</configuration>
- <executions>
- <execution>
- <goals>
- <goal>check</goal>
- </goals>
- </execution>
- </executions>
+ <reportSets>
+ <reportSet>
+ <reports>
+ <report>aggregate</report>
+ </reports>
+ </reportSet>
+ </reportSets>
</plugin>
</plugins>
- </build>
+ </reporting>
</project>
