pom.xml 5.61 KB
Newer Older
1
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
2 3 4 5
   <modelVersion>4.0.0</modelVersion>
   <parent>
      <groupId>org.ow2.authzforce</groupId>
      <artifactId>authzforce-ce-parent</artifactId>
6
      <version>7.3.0</version>
7 8
   </parent>
   <artifactId>authzforce-ce-core-pdp-api</artifactId>
9
   <version>15.1.1-SNAPSHOT</version>
10
   <name>${project.groupId}:${project.artifactId}</name>
11
   <description>AuthzForce - Core PDP API</description>
12
   <url>${project.url}</url>
13 14 15 16 17 18 19 20 21
   <scm>
      <connection>scm:git:${git.url.base}/core-pdp-api.git</connection>
      <developerConnection>scm:git:${git.url.base}/core-pdp-api.git</developerConnection>
      <tag>HEAD</tag>
      <!-- Publicly browsable repository URL. For example, via Gitlab web UI. -->
      <url>${git.url.base}/core-pdp-api</url>
   </scm>
   <dependencies>
      <!-- Third-party dependencies -->
22
      <dependency>
23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43
         <!-- For logging -->
         <groupId>org.slf4j</groupId>
         <artifactId>slf4j-api</artifactId>
      </dependency>
      <dependency>
         <!-- For representing Attributes/Content (free form XML) in XML Data Model (XDM). This is used for XPath evaluation required by XACML AttributeSelector and XPath-based functions (making reference 
            to [XF]). -->
         <groupId>net.sf.saxon</groupId>
         <artifactId>Saxon-HE</artifactId>
      </dependency>
      <dependency>
         <!-- For validation of XACML RFC822Name (email address) -->
         <groupId>com.sun.mail</groupId>
         <artifactId>mailapi</artifactId>
         <version>1.5.6</version>
      </dependency>
      <dependency>
         <!-- For extra collections (Multiset class used for XACML Bags, Table class, ImmutableSet/ImmutableMap/ImmutableList), and validating IP addresses (XACML IPAdress datatype), Domain names (XACML 
            DNSName datatype), etc. without any DNS resolution -->
         <groupId>com.google.guava</groupId>
         <artifactId>guava</artifactId>
44
      </dependency>
45

46 47 48 49 50 51 52 53 54 55 56 57 58
      <!-- AuthZForce dependencies -->
      <dependency>
         <groupId>${project.groupId}</groupId>
         <artifactId>${artifactId.prefix}-xacml-model</artifactId>
      </dependency>
      <dependency>
         <groupId>${project.groupId}</groupId>
         <artifactId>${artifactId.prefix}-pdp-ext-model</artifactId>
      </dependency>
   </dependencies>
   <build>
      <plugins>
         <plugin>
59 60
            <groupId>org.apache.maven.plugins</groupId>
            <artifactId>maven-pmd-plugin</artifactId>
61
            <configuration>
62
               <verbose>true</verbose>
63 64 65
            </configuration>
            <executions>
               <execution>
66
                  <phase>verify</phase>
67 68
                  <goals>
                     <goal>check</goal>
69
                     <goal>cpd-check</goal>
70 71 72 73 74
                  </goals>
               </execution>
            </executions>
         </plugin>
         <plugin>
75 76
            <groupId>org.codehaus.mojo</groupId>
            <artifactId>findbugs-maven-plugin</artifactId>
77
            <configuration>
78
               <excludeFilterFile>findbugs-exclude-filter.xml</excludeFilterFile>
79 80 81 82 83 84 85 86 87 88 89
            </configuration>
            <executions>
               <execution>
                  <phase>verify</phase>
                  <goals>
                     <goal>check</goal>
                  </goals>
               </execution>
            </executions>
         </plugin>
         <plugin>
90 91 92
            <!-- Consider combining with Red Hat Victims and OSS Index. More info on Victims vs. Dependency-check: https://bugzilla.redhat.com/show_bug.cgi?id=1388712 -->
            <groupId>org.owasp</groupId>
            <artifactId>dependency-check-maven</artifactId>
93
            <configuration>
94 95 96 97
              <cveValidForHours>24</cveValidForHours>
               <!-- The plugin has numerous issues with version matching, which triggers false positives so we need a "suppresion" file for those. More info: https://github.com/jeremylong/DependencyCheck/issues -->
               <suppressionFile>owasp-dependency-check-suppression.xml</suppressionFile>
               <failBuildOnAnyVulnerability>true</failBuildOnAnyVulnerability>
98
            </configuration>
99 100 101 102 103 104 105 106 107 108 109 110 111
            <executions>
               <execution>
                  <goals>
                     <goal>check</goal>
                  </goals>
               </execution>
            </executions>
         </plugin>
         <plugin>
            <!-- Override license-maven-plugin configuration to exclude Sunxacml files from adding GPL license headers (different license) -->
            <groupId>com.mycila</groupId>
            <artifactId>license-maven-plugin</artifactId>
            <configuration>
112
               <header>license/alv2-header.txt</header>
113
               <!-- <skipExistingHeaders>true</skipExistingHeaders> -->
114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136
               <includes>
                  <include>src/**</include>
               </includes>
            </configuration>
            <executions>
               <execution>
                  <id>format-sources-license</id>
                  <phase>process-sources</phase>
                  <goals>
                     <goal>format</goal>
                  </goals>
               </execution>
               <execution>
                  <id>format-test-sources-license</id>
                  <phase>process-test-sources</phase>
                  <goals>
                     <goal>format</goal>
                  </goals>
               </execution>
            </executions>
         </plugin>
      </plugins>
   </build>
137
</project>