Update dependency-check to 12.1.0 due to

jeremylong/DependencyCheck#7406 Leverage NVD mirror provided at https://dependency-check.github.io/DependencyCheck_Builder
Netcentric · Feb 19, 2025 · 425fd9c · 425fd9c
1 parent f0f1a75
commit 425fd9c
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/pom.xml b/pom.xml
@@ -422,13 +422,16 @@
                 <plugin>
                     <groupId>org.owasp</groupId>
                     <artifactId>dependency-check-maven</artifactId>
-                    <version>10.0.2</version>
+                    <version>12.1.0</version>
                     <configuration>
                         <failBuildOnCVSS>11</failBuildOnCVSS>
                         <skipProvidedScope>true</skipProvidedScope>
                         <skipSystemScope>true</skipSystemScope>
                         <retireJsAnalyzerEnabled>false</retireJsAnalyzerEnabled>
                         <skip>true</skip><!-- only enable in specific submodules -->
+                        <!-- use the mirror provided by https://github.com/dependency-check/DependencyCheck_Builder which is updated daily -->
+                        <!-- compare with https://jeremylong.github.io/DependencyCheck/data/mirrornvd.html -->
+                        <nvdDatafeedUrl>https://dependency-check.github.io/DependencyCheck_Builder/nvd_cache/</nvdDatafeedUrl>
                     </configuration>
                 </plugin>
                 <plugin>