2017-10-18 17:57 GMT+02:00 Tilman Hausherr <thaush...@t-online.de>: >> Do you fail a build when the plugin finds something? > > Yes: > > <plugin> > <groupId>org.owasp</groupId> > <artifactId>dependency-check-maven</artifactId> > <version>2.1.0</version> > <configuration> > <failBuildOnAnyVulnerability>true</failBuildOnAnyVulnerability> > </configuration> > <executions> > <execution> > <goals> > <goal>check</goal> > </goals> > </execution> > </executions> > </plugin>
Great, thanks! I have decided to use <failBuildOnCVSS>8</failBuildOnCVSS> to start with something :) Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/
