Move OWASP dependency check to a Maven profile

This takes way too long to perform each time on a Github action as we cannot cache the image
This commit is contained in:
Nanne Baars 2021-03-29 08:17:40 +02:00 committed by Nanne Baars
parent f959e0387e
commit b16e60f691

18
pom.xml
View File

@ -230,6 +230,17 @@
</execution>
</executions>
</plugin>
</plugins>
</build>
<profiles>
<profile>
<id>owasp</id>
<activation>
<activeByDefault>false</activeByDefault>
</activation>
<build>
<plugins>
<plugin>
<groupId>org.owasp</groupId>
<artifactId>dependency-check-maven</artifactId>
@ -240,7 +251,9 @@
<skipRuntimeScope>true</skipRuntimeScope>
<suppressionFiles>
<!--suppress UnresolvedMavenProperty -->
<suppressionFile>${maven.multiModuleProjectDirectory}/config/dependency-check/project-suppression.xml</suppressionFile>
<suppressionFile>
${maven.multiModuleProjectDirectory}/config/dependency-check/project-suppression.xml
</suppressionFile>
</suppressionFiles>
</configuration>
<executions>
@ -253,6 +266,8 @@
</plugin>
</plugins>
</build>
</profile>
</profiles>
<repositories>
<repository>
@ -273,4 +288,5 @@
</pluginRepository>
</pluginRepositories>
</project>