#91: Add dependency-check to POM, plus basic Openfire exclusions

igniterealtime · Feb 8, 2024 · 96c1828 · 96c1828
1 parent 7dab84f
commit 96c1828
Show file tree

Hide file tree

Showing 2 changed files with 42 additions and 0 deletions.
diff --git a/.dependency-check-suppressions.xml b/.dependency-check-suppressions.xml
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
+    <suppress>
+        <notes>Ignore Openfire</notes>
+        <packageUrl regex="true">^pkg:maven/org\.igniterealtime\.openfire/xmppserver@.*$</packageUrl>
+        <cpe>cpe:/a:igniterealtime:openfire</cpe>
+    </suppress>
+    <suppress>
+        <notes>Ignore Openfire</notes>
+        <packageUrl regex="true">^pkg:maven/org\.igniterealtime\.openfire/xmppserver@.*$</packageUrl>
+        <cpe>cpe:/a:ignite_realtime:openfire</cpe>
+    </suppress>
+</suppressions>
diff --git a/pom.xml b/pom.xml
@@ -54,4 +54,33 @@
         </dependency>
     </dependencies>
 
+    <profiles>
+        <profile>
+            <id>deps</id>
+            <build>
+                <plugins>
+                    <plugin>
+                        <groupId>org.owasp</groupId>
+                        <artifactId>dependency-check-maven</artifactId>
+                        <version>9.0.9</version>
+                        <configuration>
+                            <suppressionFiles>
+                                <suppressionFile>.dependency-check-suppressions.xml</suppressionFile>
+                                <suppressionFile>https://raw.githubusercontent.com/igniterealtime/Openfire/main/.dependency-check-suppressions.xml</suppressionFile>
+                            </suppressionFiles>
+                            <nvdApiServerId>nvd</nvdApiServerId>
+                        </configuration>
+                        <executions>
+                            <execution>
+                                <goals>
+                                    <goal>aggregate</goal>
+                                </goals>
+                            </execution>
+                        </executions>
+                    </plugin>
+                </plugins>
+            </build>
+        </profile>
+    </profiles>
+
 </project>