Springboot项目集成dependency-check

Springboot项目集成dependency-check

用法：在target目录中创建dependency-check-report.html

1.pom.xml文件中加入依赖

<dependency>
		   <groupId>org.owasp</groupId>
           <artifactId>dependency-check-maven</artifactId>
           <version>5.1.1</version>
</dependency>

<plugins>
<plugin>
        <groupId>org.owasp</groupId>
        <artifactId>dependency-check-maven</artifactId>
        <version>5.1.1</version>
        <configuration>
            <autoUpdate>true</autoUpdate>
        </configuration>
        <executions>
            <execution>
                <goals>
                    <goal>check</goal>
                </goals>
            </execution>
        </executions>
    </plugin>  
    </plugins>

2.打开maven build …输入红框中内容，点击run命令

了解更多：https://my.oschina.net/keking/blog/3007912