Procházet zdrojové kódy

Adding a "ci" profile to run Dependency Checks

If you are going to contribute to L2J, please run it locally with `mvnw
clean install -Pci` so you can check that there are no known
vulnerabilities.
Zoey76 před 1 rokem
rodič
revize
d72552fb4d
2 změnil soubory, kde provedl 29 přidání a 20 odebrání
  1. 1 1
      bitbucket-pipelines.yml
  2. 28 19
      pom.xml

+ 1 - 1
bitbucket-pipelines.yml

@@ -6,7 +6,7 @@ pipelines:
          caches:
          - maven
          script:
-         - /bin/sh mvnw install
+         - /bin/sh mvnw clean install
          artifacts:
          - target/*.zip
    -  step:

+ 28 - 19
pom.xml

@@ -4,7 +4,7 @@
 	<modelVersion>4.0.0</modelVersion>
 	<groupId>com.l2jserver</groupId>
 	<artifactId>l2j-server-cli</artifactId>
-	<version>1.2.0</version>
+	<version>1.2.1</version>
 	<name>L2J Server Command Line</name>
 	<properties>
 		<maven.compiler.source>21</maven.compiler.source>
@@ -29,7 +29,7 @@
 		<!-- L2J -->
 		<l2j-server-commons.version>2.6.7.0</l2j-server-commons.version>
 		<!-- Plugins -->
-		<dependency-check-maven.version>9.0.4</dependency-check-maven.version>
+		<dependency-check-maven.version>9.0.6</dependency-check-maven.version>
 		<maven-dependency-plugin.version>3.6.1</maven-dependency-plugin.version>
 		<maven-jar-plugin.version>3.3.0</maven-jar-plugin.version>
 		<maven-assembly-plugin.version>3.6.0</maven-assembly-plugin.version>
@@ -156,23 +156,32 @@
 					</execution>
 				</executions>
 			</plugin>
-			<plugin>
-				<groupId>org.owasp</groupId>
-				<artifactId>dependency-check-maven</artifactId>
-				<version>${dependency-check-maven.version}</version>
-				<configuration>
-					<failBuildOnCVSS>8</failBuildOnCVSS>
-					<assemblyAnalyzerEnabled>false</assemblyAnalyzerEnabled>
-					<nvdApiKey>${env.NVD_API_KEY}</nvdApiKey>
-				</configuration>
-				<executions>
-					<execution>
-						<goals>
-							<goal>check</goal>
-						</goals>
-					</execution>
-				</executions>
-			</plugin>
 		</plugins>
 	</build>
+	<profiles>
+		<profile>
+			<id>ci</id>
+			<build>
+				<plugins>
+					<plugin>
+						<groupId>org.owasp</groupId>
+						<artifactId>dependency-check-maven</artifactId>
+						<version>${dependency-check-maven.version}</version>
+						<configuration>
+							<failBuildOnCVSS>8</failBuildOnCVSS>
+							<assemblyAnalyzerEnabled>false</assemblyAnalyzerEnabled>
+							<nvdApiKey>${env.NVD_API_KEY}</nvdApiKey>
+						</configuration>
+						<executions>
+							<execution>
+								<goals>
+									<goal>check</goal>
+								</goals>
+							</execution>
+						</executions>
+					</plugin>
+				</plugins>
+			</build>
+		</profile>
+	</profiles>
 </project>