diff --git a/pom.xml b/pom.xml index 36be6af2c06bf4f2161aedea34accfe48a130225..83564d1f1ffa037fe0d3a42767b9ec6727ca8749 100644 --- a/pom.xml +++ b/pom.xml @@ -4,7 +4,7 @@ <parent> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-parent</artifactId> - <version>2.6.3</version> + <version>2.6.6</version> <relativePath /> </parent> <groupId>de.landsh.opendata</groupId> @@ -120,6 +120,51 @@ </execution> </executions> </plugin> + <!--plugin> + <groupId>org.apache.maven.plugins</groupId> + <artifactId>maven-enforcer-plugin</artifactId> + <configuration> + <rules> + <bannedDependencies> + <excludes> + <exclude>junit:junit</exclude> + <exclude>junit:junit-dep</exclude> + </excludes> + </bannedDependencies> + <dependencyConvergence /> + </rules> + </configuration> + <executions> + <execution> + <goals> + <goal>enforce</goal> + </goals> + </execution> + </executions> + </plugin--> + <plugin> + <groupId>org.owasp</groupId> + <artifactId>dependency-check-maven</artifactId> + <version>6.5.3</version> + <configuration> + <failBuildOnCVSS>8</failBuildOnCVSS> + <assemblyAnalyzerEnabled>false</assemblyAnalyzerEnabled> + <failOnError>true</failOnError> + </configuration> + <executions> + <execution> + <goals> + <goal>check</goal> + </goals> + </execution> + </executions> + </plugin> + <plugin> + <groupId>com.github.spotbugs</groupId> + <artifactId>spotbugs-maven-plugin</artifactId> + <version>4.5.3.0</version> + + </plugin> </plugins> </build> </project>