Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependencies to more recent version to reduce security concerns #25

Closed
ebresie opened this issue Oct 7, 2022 · 3 comments
Closed
Labels
quality This is for code quality related items. security

Comments

@ebresie
Copy link
Owner

ebresie commented Oct 7, 2022

Need to update related dependencies to reduce security vulnerabilities.

This will be based on some of the findings found using dependency-check-maven and related checks.

@ebresie ebresie added quality This is for code quality related items. security labels Oct 7, 2022
@ebresie
Copy link
Owner Author

ebresie commented Oct 7, 2022

There may be some overlap with #16 which is Git Action based while the above is based on addition of maven plugins to assess things.

ebresie added a commit that referenced this issue Oct 29, 2022
- Update dependencies to more recent version to reduce security concerns #25
@ebresie
Copy link
Owner Author

ebresie commented Oct 30, 2022

As part of this, additional maven profiles have been added which include:

  • security-test
  • static-analysis-check
  • coverage

There are also a few other commented profiles to demonstrate possible used of os, jdk, properties, and/or activation attributes should these be used at a later time.

To evaluate this, use the security-test profile which will run security analysis. There may be some overlap with existing GitHub Security and dependabot analysis.

@ebresie
Copy link
Owner Author

ebresie commented Oct 30, 2022

Due to above commit, will close this one for now. In future will need to run it prior to next release (so a "release checklist" item)

@ebresie ebresie closed this as completed Oct 30, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
quality This is for code quality related items. security
Projects
None yet
Development

No branches or pull requests

1 participant