• Type: Task
• Resolution: Unresolved
• Priority: L3 - Default
• Fix Version/s: None
• Affects Version/s: None
• Component/s: run
• Labels:

  None

This is the controller panel for Smart Panels app

[CAM-14396] Include Swagger UI package-lock.json in vulnerability scan

Collapse comment: Thorben Lindhauer added a comment - 23/Feb/22 11:48 AM

Thorben Lindhauer added a comment - 23/Feb/22 11:48 AM

Implementation notes:

• The OWASP plugin defines a scanSet configuration property for where it looks for sources to scan: https://jeremylong.github.io/DependencyCheck/dependency-check-maven/configuration.html
• With the change, it still picks up Maven dependencies declared in the pom file. I tested that with an old Spring version.

Expand comment: Thorben Lindhauer added a comment - 23/Feb/22 11:48 AM

Thorben Lindhauer added a comment - 23/Feb/22 11:48 AM Implementation notes: The OWASP plugin defines a scanSet configuration property for where it looks for sources to scan: https://jeremylong.github.io/DependencyCheck/dependency-check-maven/configuration.html With the change, it still picks up Maven dependencies declared in the pom file. I tested that with an old Spring version.

Collapse comment: Thorben Lindhauer added a comment - 25/Feb/22 4:31 PM

Thorben Lindhauer added a comment - 25/Feb/22 4:31 PM

Reopening, because swagger ui is still not respected in the Scan performed by the github action.

Expand comment: Thorben Lindhauer added a comment - 25/Feb/22 4:31 PM

Thorben Lindhauer added a comment - 25/Feb/22 4:31 PM Reopening, because swagger ui is still not respected in the Scan performed by the github action.

Collapse comment: Thorben Lindhauer added a comment - 12/Oct/22 11:51 AM

Thorben Lindhauer added a comment - 12/Oct/22 11:51 AM

This ticket was migrated to github: https://github.com/camunda/camunda-bpm-platform/issues/2699. Please use this link for any future references and continue any discussion there.

Expand comment: Thorben Lindhauer added a comment - 12/Oct/22 11:51 AM

Thorben Lindhauer added a comment - 12/Oct/22 11:51 AM This ticket was migrated to github: https://github.com/camunda/camunda-bpm-platform/issues/2699 . Please use this link for any future references and continue any discussion there.