build with OWASP plugin this as well

Author: mirabilos

pom.xml

@@ -34,6 +34,10 @@
 		</license>
 	</licenses>
 	<inceptionYear>2016</inceptionYear>
+	<properties>
+		<!-- ‣ maven plugins -->
+		<maven.owasp.dependency-check.version>9.2.0</maven.owasp.dependency-check.version>
+	</properties>
 	<scm>
 		<connection>scm:git:https://evolvis.org/anonscm/git/tartools/mvnparent.git</connection>
 		<developerConnection>scm:git:ssh://[email protected]/scmrepos/git/tartools/mvnparent.git</developerConnection>
@@ -68,6 +72,34 @@
 					</execution>
 				</executions>
 			</plugin>
+			<plugin>
+				<!-- mvn -Ddependency-check.skip … -->
+				<groupId>org.owasp</groupId>
+				<artifactId>dependency-check-maven</artifactId>
+				<version>${maven.owasp.dependency-check.version}</version>
+				<inherited>false</inherited>
+				<executions>
+					<execution>
+						<id>owasp-check</id>
+						<phase>install</phase>
+						<goals>
+							<goal>aggregate</goal>
+						</goals>
+						<configuration>
+							<failBuildOnCVSS>8</failBuildOnCVSS>
+							<scanSet>
+								<fileSet>
+									<directory>src</directory>
+								</fileSet>
+							</scanSet>
+							<skipArtifactType>pom</skipArtifactType>
+							<!-- suppressionFiles>
+								<suppressionFile>src/main/ancillary/dependency-check-suppressions.xml</suppressionFile>
+							</suppressionFiles -->
+						</configuration>
+					</execution>
+				</executions>
+			</plugin>
 			<plugin>
 				<groupId>org.codehaus.mojo</groupId>
 				<artifactId>exec-maven-plugin</artifactId>