[TIKA-3621] Add an ossindex-fail profile to fail on vulnerable dependencies

• Type: Task
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 2.2.0
• Assignee: Unassigned
• Reporter: Tim Allison
• Created: 16/Dec/21 16:31
• Updated: 16/Dec/21 21:18
• Resolved: 16/Dec/21 17:02

Description

We added ossindex checks a while ago, but we found that failing the build was annoying for users who were building on their own after releases and in a few other cases...iirc. We changed <fail/> to false.

lewismc recommended that we add a profile to fail the build and set up a github action to run the profile.