pom.xml 5.61 KB
Newer Older
1
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
2
3
4
5
   <modelVersion>4.0.0</modelVersion>
   <parent>
      <groupId>org.ow2.authzforce</groupId>
      <artifactId>authzforce-ce-parent</artifactId>
6
      <version>7.2.0</version>
7
8
   </parent>
   <artifactId>authzforce-ce-core-pdp-api</artifactId>
9
   <version>14.0.1-SNAPSHOT</version>
10
   <name>${project.groupId}:${project.artifactId}</name>
11
   <description>AuthzForce - Core PDP API</description>
12
   <url>${project.url}</url>
13
14
15
16
17
18
19
20
21
   <scm>
      <connection>scm:git:${git.url.base}/core-pdp-api.git</connection>
      <developerConnection>scm:git:${git.url.base}/core-pdp-api.git</developerConnection>
      <tag>HEAD</tag>
      <!-- Publicly browsable repository URL. For example, via Gitlab web UI. -->
      <url>${git.url.base}/core-pdp-api</url>
   </scm>
   <dependencies>
      <!-- Third-party dependencies -->
22
      <dependency>
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
         <!-- For logging -->
         <groupId>org.slf4j</groupId>
         <artifactId>slf4j-api</artifactId>
      </dependency>
      <dependency>
         <!-- For representing Attributes/Content (free form XML) in XML Data Model (XDM). This is used for XPath evaluation required by XACML AttributeSelector and XPath-based functions (making reference 
            to [XF]). -->
         <groupId>net.sf.saxon</groupId>
         <artifactId>Saxon-HE</artifactId>
      </dependency>
      <dependency>
         <!-- For validation of XACML RFC822Name (email address) -->
         <groupId>com.sun.mail</groupId>
         <artifactId>mailapi</artifactId>
         <version>1.5.6</version>
      </dependency>
      <dependency>
         <!-- For extra collections (Multiset class used for XACML Bags, Table class, ImmutableSet/ImmutableMap/ImmutableList), and validating IP addresses (XACML IPAdress datatype), Domain names (XACML 
            DNSName datatype), etc. without any DNS resolution -->
         <groupId>com.google.guava</groupId>
         <artifactId>guava</artifactId>
44
      </dependency>
45

46
47
48
49
50
51
52
53
54
55
56
57
58
      <!-- AuthZForce dependencies -->
      <dependency>
         <groupId>${project.groupId}</groupId>
         <artifactId>${artifactId.prefix}-xacml-model</artifactId>
      </dependency>
      <dependency>
         <groupId>${project.groupId}</groupId>
         <artifactId>${artifactId.prefix}-pdp-ext-model</artifactId>
      </dependency>
   </dependencies>
   <build>
      <plugins>
         <plugin>
59
60
            <groupId>org.apache.maven.plugins</groupId>
            <artifactId>maven-pmd-plugin</artifactId>
61
            <configuration>
62
               <verbose>true</verbose>
63
64
65
            </configuration>
            <executions>
               <execution>
66
                  <phase>verify</phase>
67
68
                  <goals>
                     <goal>check</goal>
69
                     <goal>cpd-check</goal>
70
71
72
73
74
                  </goals>
               </execution>
            </executions>
         </plugin>
         <plugin>
75
76
            <groupId>org.codehaus.mojo</groupId>
            <artifactId>findbugs-maven-plugin</artifactId>
77
            <configuration>
78
               <excludeFilterFile>findbugs-exclude-filter.xml</excludeFilterFile>
79
80
81
82
83
84
85
86
87
88
89
            </configuration>
            <executions>
               <execution>
                  <phase>verify</phase>
                  <goals>
                     <goal>check</goal>
                  </goals>
               </execution>
            </executions>
         </plugin>
         <plugin>
90
91
92
            <!-- Consider combining with Red Hat Victims and OSS Index. More info on Victims vs. Dependency-check: https://bugzilla.redhat.com/show_bug.cgi?id=1388712 -->
            <groupId>org.owasp</groupId>
            <artifactId>dependency-check-maven</artifactId>
93
            <configuration>
94
95
96
97
              <cveValidForHours>24</cveValidForHours>
               <!-- The plugin has numerous issues with version matching, which triggers false positives so we need a "suppresion" file for those. More info: https://github.com/jeremylong/DependencyCheck/issues -->
               <suppressionFile>owasp-dependency-check-suppression.xml</suppressionFile>
               <failBuildOnAnyVulnerability>true</failBuildOnAnyVulnerability>
98
            </configuration>
99
100
101
102
103
104
105
106
107
108
109
110
111
            <executions>
               <execution>
                  <goals>
                     <goal>check</goal>
                  </goals>
               </execution>
            </executions>
         </plugin>
         <plugin>
            <!-- Override license-maven-plugin configuration to exclude Sunxacml files from adding GPL license headers (different license) -->
            <groupId>com.mycila</groupId>
            <artifactId>license-maven-plugin</artifactId>
            <configuration>
112
               <header>license/alv2-header.txt</header>
113
               <!-- <skipExistingHeaders>true</skipExistingHeaders> -->
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
               <includes>
                  <include>src/**</include>
               </includes>
            </configuration>
            <executions>
               <execution>
                  <id>format-sources-license</id>
                  <phase>process-sources</phase>
                  <goals>
                     <goal>format</goal>
                  </goals>
               </execution>
               <execution>
                  <id>format-test-sources-license</id>
                  <phase>process-test-sources</phase>
                  <goals>
                     <goal>format</goal>
                  </goals>
               </execution>
            </executions>
         </plugin>
      </plugins>
   </build>
137
</project>