owasp maven plugin added and versions as properties

Author: Daan Hoogland

pom.xml

@@ -65,13 +65,15 @@
         <cs.failsafe-plugin.version>2.21.0</cs.failsafe-plugin.version>
         <cs.findbugs-plugin.version>3.0.5</cs.findbugs-plugin.version>
         <cs.jar-plugin.version>3.1.0</cs.jar-plugin.version>
+        <cs.owasp.dependency-checker-plugin.version>3.1.1</cs.owasp.dependency-checker-plugin.version>
         <cs.pmd-plugin.version>3.9.0</cs.pmd-plugin.version>
         <cs.project-info-plugin.version>2.9</cs.project-info-plugin.version>
         <cs.release-plugin.version>2.5.3</cs.release-plugin.version>
         <cs.resources-plugin.version>3.1.0</cs.resources-plugin.version>
         <cs.site-plugin.version>3.7.1</cs.site-plugin.version>
         <cs.surefire-plugin.version>2.21.0</cs.surefire-plugin.version>
 
+
         <!-- Logging versions -->
         <cs.log4j.version>1.2.17</cs.log4j.version>
         <cs.log4j.extras.version>1.2.17</cs.log4j.extras.version>
@@ -152,6 +154,7 @@
         <cs.neethi.version>2.0.4</cs.neethi.version>
         <cs.nitro.version>10.1</cs.nitro.version>
         <cs.opensaml.version>2.6.4</cs.opensaml.version>
+        <cs.owasp.esapi.version>2.1.0.1</cs.owasp.esapi.version>
         <cs.rados-java.version>0.2.0</cs.rados-java.version>
         <cs.rampart.version>1.5.1</cs.rampart.version>
         <cs.reflections.version>0.9.11</cs.reflections.version>
@@ -577,7 +580,7 @@
             <dependency>
                 <groupId>org.owasp.esapi</groupId>
                 <artifactId>esapi</artifactId>
-                <version>2.1.0.1</version>
+                <version>${cs.owasp.esapi.version}</version>
             </dependency>
             <!-- Test dependency in mysql for db tests -->
             <dependency>
@@ -717,6 +720,22 @@
                     </execution>
                 </executions>
             </plugin>
+            <plugin>
+                <groupId>org.owasp</groupId>
+                <artifactId>dependency-check-maven</artifactId>
+                <version>${cs.owasp.dependency-checker-plugin.version}</version>
+                <configuration>
+                    <skipProvidedScope>true</skipProvidedScope>
+                    <skipRuntimeScope>true</skipRuntimeScope>
+                </configuration>
+                <executions>
+                    <execution>
+                        <goals>
+                            <goal>check</goal>
+                        </goals>
+                    </execution>
+                </executions>
+            </plugin>
         </plugins>
         <pluginManagement>
             <plugins>
@@ -1124,6 +1143,18 @@
     </build>
     <reporting>
         <plugins>
+            <plugin>
+                <groupId>org.owasp</groupId>
+                <artifactId>dependency-check-maven</artifactId>
+                <version>${cs.owasp.dependency-checker-plugin.version}</version>
+                <reportSets>
+                    <reportSet>
+                        <reports>
+                            <report>aggregate</report>
+                        </reports>
+                    </reportSet>
+                </reportSets>
+            </plugin>
             <plugin>
                 <groupId>org.codehaus.mojo</groupId>
                 <artifactId>findbugs-maven-plugin</artifactId>