dependency-check.md

Dependecy check example

Parameters

Argument	Description
-v	Prints Dependency Check version and exit
without parameters	Scans the current directory (must be a git repo)

Detect outdated dependencies in the current project using OWASP DependencyCheck

• One 'analysis' stage with one job
• Allows the job to fail without impacting the rest of the CI (allow_failure: true)

stages:
  - analysis 
variables:
  stage: analysis
  tags:
    - docker
  script:
    - docker run --rm -v "${PWD}:/work" -w /work its-registry.unl.edu/unl-its/docker-ci/detect-secrets -s -e 4.5
    - docker run --rm -v "${PWD}:/work" -w /work its-registry.unl.edu/unl-its/docker-ci/dependency-check
  allow_failure: true

Scan the current directory (must be a git repo)

docker run -it --rm -v "${PWD}:/work" -w /work -e CI_PROJECT_NAMESPACE=`basename $(git rev-parse --show-toplevel)` its-registry.unl.edu/unl-its/docker-ci/dependency-check