[
https://issues.apache.org/jira/browse/HADOOP-19786?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18070724#comment-18070724
]
ASF GitHub Bot commented on HADOOP-19786:
-----------------------------------------
edwardcapriolo commented on code in PR #8186:
URL: https://github.com/apache/hadoop/pull/8186#discussion_r3030803408
##########
pom.xml:
##########
@@ -525,7 +525,11 @@ xsi:schemaLocation="http://maven.apache.org/POM/4.0.0
https://maven.apache.org/x
<plugin>
<groupId>org.owasp</groupId>
<artifactId>dependency-check-maven</artifactId>
- <version>${dependency-check-maven.version}</version>
+ <version>${owasp-maven-plugin.version}</version>
+ <configuration>
+ <assemblyAnalyzerEnabled>false</assemblyAnalyzerEnabled>
+ <ossindexAnalyzerEnabled>false</ossindexAnalyzerEnabled>
+ </configuration>
Review Comment:
{quote}
so it seems to be unnecessary to explicitly set it.
{quote}
It isnt exactly true if it finds a file with a .net extension it may be
temped to scan it and look for .net stuff and its better to explicitly disable
things.
> owasp plugin does not run
> -------------------------
>
> Key: HADOOP-19786
> URL: https://issues.apache.org/jira/browse/HADOOP-19786
> Project: Hadoop Common
> Issue Type: Bug
> Reporter: Edward Capriolo
> Assignee: Edward Capriolo
> Priority: Major
> Labels: pull-request-available
>
> The owasp plugin doesn't specify a version and it does not run.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
