-
Type:
Bug
-
Resolution: Won't Fix
-
Priority:
Major
-
Component/s: dependency-check-jenkins-plugin
-
None
Dependency Check Plugin run Dependency Check core and scan all workspace contents, including local maven repositories.
This raise many false positive about vulnerabilities in artifacts not bundled in product but used in scope test, provided, runtime and even Maven plugins (ie Maven site using vulnerable Struts).
Maven support is allready available in Dependency Check core and Jenkins integration in Dependency Check Plugin, this one should be able to use Jenkins/Maven integration fluently