-
Notifications
You must be signed in to change notification settings - Fork 9
/
pom.xml
125 lines (111 loc) · 4.32 KB
/
pom.xml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
<modelVersion>4.0.0</modelVersion>
<parent>
<groupId>org.jenkins-ci.plugins</groupId>
<artifactId>plugin</artifactId>
<version>4.56</version>
</parent>
<groupId>org.devops.framework</groupId>
<artifactId>devops-framework</artifactId>
<version>0.0.1-SNAPSHOT</version>
<packaging>pom</packaging>
<!--http://start.spring.io/-->
<name>DevOps-Framework</name>
<description>This plugin provides a DSL, command-line and Jenkins shared library DevOps framework for CI/CD projects</description>
<url>https://github.com/tpayne/devops-framework</url>
<repositories>
<repository>
<id>repo.jenkins-ci.org</id>
<url>https://repo.jenkins-ci.org/public/</url>
</repository>
</repositories>
<pluginRepositories>
<pluginRepository>
<id>repo.jenkins-ci.org</id>
<url>https://repo.jenkins-ci.org/public/</url>
</pluginRepository>
</pluginRepositories>
<licenses>
<license>
<name>The MIT license</name>
<url>https://opensource.org/licenses/MIT</url>
<distribution>repo</distribution>
</license>
</licenses>
<developers>
<developer>
<id>[email protected]</id>
<name>Tim Payne</name>
<organization>AND Digital</organization>
</developer>
</developers>
<scm>
<connection>scm:git:git://github.com/tpayne/${project.artifactId}.git</connection>
<developerConnection>scm:git:[email protected]:tpayne/${project.artifactId}.git</developerConnection>
<url>https://github.com/tpayne/${project.artifactId}</url>
<tag>HEAD</tag>
</scm>
<ciManagement>
<system>Travis CI</system>
<url>https://travis-ci.org/tpayne/devops-framework</url>
</ciManagement>
<issueManagement>
<system>GitHub Issue Management</system>
<url>https://github.com/tpayne/devops-framework/issues</url>
</issueManagement>
<properties>
<jenkins.version>2.319.3</jenkins.version>
<java.level>8</java.level>
<dependency-check-maven.version>6.5.3</dependency-check-maven.version>
<!-- If we want to be strict...
<maven.compiler.showDeprecation>true</maven.compiler.showDeprecation>
<maven.compiler.showWarnings>true</maven.compiler.showWarnings>
-->
</properties>
<modules>
<module>devops-framework-core</module>
<module>devops-framework-plugin</module>
<module>devops-framework-pipeline</module>
</modules>
<!-- To run a security/vulnerability check run 'mvn clean install -Psecurity-scans'
The process will take about 5-15 mins to run, so do not do it as part of normal build
For more info, see
https://itnext.io/owasp-dependency-check-maven-vulnerabilities-java-898a9cf99f5e
-->
<profiles>
<profile>
<id>security-scans</id>
<build>
<plugins>
<!-- Security scanners -->
<plugin>
<groupId>com.sonatype.clm</groupId>
<artifactId>clm-maven-plugin</artifactId>
<version>2.42.0-01</version>
<executions>
<execution>
<goals>
<goal>index</goal>
</goals>
</execution>
</executions>
</plugin>
<plugin>
<groupId>org.owasp</groupId>
<artifactId>dependency-check-maven</artifactId>
<version>${dependency-check-maven.version}</version>
<executions>
<execution>
<goals>
<goal>check</goal>
</goals>
</execution>
</executions>
</plugin>
</plugins>
</build>
</profile>
</profiles>
</project>