[TAMAYA-177] Add security improved findbugs rules and OWASP dependency checker to Tamaya build process

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 0.2-incubating, 0.3-incubating
• Component/s: Infrastructure
• Assignee: Philipp Ottlinger
• Reporter: Philipp Ottlinger
• Created: 12/Sep/16 18:28
• Updated: 25/Aug/19 11:42

Description

Since Tamaya is such a vital part of a running software it should not have too many security problems, thus:

• enable security findbugs rules - https://find-sec-bugs.github.io
• add special build profile that checks for dependencies with known CVEs (owasp dependency scanner) - https://github.com/jeremylong/DependencyCheck
  to Tamaya main repo.