GROUP-56 Fix Dependency Check

GroupHQ · Dec 5, 2023 · 85aedad · 85aedad
1 parent b9a4bec
commit 85aedad
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 30 deletions.
diff --git a/.run/Dependency Vulnerability Check.run.xml b/.run/Dependency Vulnerability Check.run.xml
diff --git a/build.gradle b/build.gradle
@@ -4,10 +4,10 @@ plugins {
 
     id 'idea'
 
-    id "org.springframework.boot" version "3.1.4"
-    id "io.spring.dependency-management" version "1.1.3"
+    id 'org.springframework.boot' version '3.1.+'
+    id 'io.spring.dependency-management' version '1.+'
 
-    id "org.owasp.dependencycheck" version "8.4.0"
+    id "org.owasp.dependencycheck" version "latest.release"
     id "checkstyle"
     id "pmd"
 }
@@ -22,12 +22,15 @@ java {
 // Checks Dependencies for Known Vulnerabilities
 dependencyCheck {
     suppressionFile = file("${project.rootDir}/config/dependency_check/suppressions.xml")
-    failBuildOnCVSS = 7.0 // fails on high and critical severity scores
+    failBuildOnCVSS = 8.0 // fails on mid-high to critical severity scores
+    nvd {
+        apiKey = project.findProperty('nvdApiKey') ?: 'NONE'
+    }
 }
 
 // Java Code Style Checker Following (mostly) Google Style Guidelines
 checkstyle {
-    toolVersion = "10.12.4"
+    toolVersion = "latest.release"
     configFile = file("${project.rootDir}/config/checkstyle/google_checks.xml")
     configProperties = [ "suppressionFile" : project(':').file('config/checkstyle/suppressions.xml')]
 }
@@ -45,7 +48,7 @@ pmd {
             "${project.rootDir}/config/pmd/multithreading.xml",
             "${project.rootDir}/config/pmd/performance.xml",
             "${project.rootDir}/config/pmd/security.xml")
-    toolVersion = "6.55.+"
+    toolVersion = "6.+"
 }
 
 configurations {