Stack Overflow
Stack Overflow

Questions tagged [maven-dependency-check-plugin]

22 questions
0
votes
0 answers

dependency-check maven plugin marking project modules itself as vulnerabilities

We are using the dependency-check maven plugin to analyze vulnerabilities in the project. Project structure: ordermpd - order-mpd-common - order-mpd-app - order-mpd-domain Problem is : The plugin is marking my own maven modules i.e.…
humbleCoder
  • 667
  • 14
  • 27
0
votes
1 answer

I can't run a dependency check using dependency-check-maven version 7.1.2. Getting Existing update in progress; waiting for update to complete

I can't run the dependency check. I have waiting a long time. I have these messages: I have an [INFO} message Lock file found [INFO] Lock file found…
Suzy
  • 21
  • 2
0
votes
1 answer

Maven Dependency plugin throwing Sonatype Error

We implemented Dependency-check-maven and this was working fine up till now. But suddenly getting this error now, [WARNING] An error occurred while analyzing 'oldui/includes/ckeditor/lang/no.js' (Sonatype OSS Index Analyzer). Not sure where this is…
Cool Techie
  • 756
  • 2
  • 18
  • 39
0
votes
0 answers

How to fix vulnerability maven-core 3.0 in exec-maven-plugin

I have a spring boot project with maven. The POM.XML for a certaun service looks like this: [...] org.springframework.boot spring-boot-maven-plugin …
Chai
  • 1,796
  • 2
  • 18
  • 31
0
votes
1 answer

Jenkins, Gradle : How to publish Dependency report to Sonar Dashboard

Currently we're using Jenkins free style job for Gradle project and using following commands to run Sonar and Dependencycheck ./gradlew clean build sonarqube dependencyCheckAnalyze \ and I'm getting following message Analyzing…
karthikN
  • 25
  • 8
0
votes
1 answer

Can't get the html generated report using dependency-check-sonar-plugin

I'm trying to generate an html report to identify vulnerabilities in a project 'Angularjs & php' using dependency-check-sonar-plugin & sonarqube in Windows os on local sonar server. After running this command : sonar-scanner…
Taha Lamti
  • 74
  • 1
  • 8
-1
votes
1 answer

Why are certain dependencies on my dependency report not suppresssing?

I am generating a dependency report using Dependency-Check within Eclipse Version 2022-06(4.24.0). It is a maven project. I created a suppression.xml file in same directory as the pom.xml file. I then modified the pom.xml file to include the…
A.V.S.
  • 27
  • 8
1
2