adobe / adobe/aem-project-archetype

Include OWASP dependency-check-maven plugin

Open
#1,048 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
596
Forks
431
Avg merge
10d 6h
Merged PRs (30d)
1

Description

### Feature Request

To serve a secure website it would be nice to benefit from the [OWASP dependency-check-maven plugin](https://github.com/jeremylong/DependencyCheck) when creating a new project. It can run on each build and developers get informed early in case of a security issue(s).

When embedding we will probably have to upgrade as well some of the dependencies within this archetype project.

Contributor guide

Open the contributing guide

Research direction

No file or test is named. Start by locating the archetype's Maven build and plugin configuration, then review the OWASP dependency-check-maven documentation; done means new projects include the plugin, it runs during builds, and any required dependency upgrades are accounted for.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
build-system, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.