[TOBAGO-1532] Adding CVE check of OWASP to the release process

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 3.0.0-alpha-3, 3.0.0
• Component/s: Build
• Assignee: Udo Schnurpfeil
• Reporter: Udo Schnurpfeil
• Created: 18/Feb/16 09:34
• Updated: 08/Feb/17 13:17
• Resolved: 20/Apr/16 11:38

Description

There is a tool from OWASP to check for known security problems in dependent libraries.
See https://www.owasp.org/index.php/OWASP_Dependency_Check

Issue Links

• relates to: TOBAGO-1697 Suppression list for CVE check