Skip to content
This repository has been archived by the owner on Jun 9, 2022. It is now read-only.

Create module to find outdated dependencies of maven projects #124

Merged
merged 1 commit into from
Sep 16, 2019

Conversation

csokol
Copy link

@csokol csokol commented Jul 11, 2019

Description

Use maven versions plugin to find outdated java dependencies in maven projects.

This partially addresses #87

Type of change

  • New feature (non-breaking change which adds functionality)

Toolchain

  • Java

How Has This Been Tested?

Build the docker image:

docker build . -t hawkeyesec/scanner-cli:maven-deps

Then run it against a java project:

curl https://start.spring.io/starter.tgz \
         -d type=maven-project \
         -d baseDir=spring-boot-java-maven \
         -d language=java | tar -xzvf -

cd spring-boot-java-maven
cat << EOF > .hawkeyerc
{
  "all": true,
  "modules": ["java-outdated-dependencies"],
  "json": "results.json"
}
EOF

docker run --rm -v /Users/csokol/.m2/:/root/.m2 -v $PWD:/target hawkeyesec/scanner-cli:maven-deps

Checklist:

  • My code follows the style guidelines of this project
  • I have performed a self-review of my own code
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • I have added tests that prove my fix is effective or that my feature works
  • New and existing unit tests pass locally with my changes

@felixhammerl felixhammerl merged commit 0f49c42 into hawkeyesec:master Sep 16, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants