forked from finos/common-domain-model
-
Notifications
You must be signed in to change notification settings - Fork 7
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge origin/master and resolve conflicts on release notes
- Loading branch information
Showing
21 changed files
with
237 additions
and
86 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,44 @@ | ||
# Proposed Enhancement to the Common Domain Model # | ||
|
||
> [!NOTE] | ||
> All _Notes_, _Tips_ and other alerts can be deleted from this page once you are happy with its content. | ||
## Pull Request Summary ## | ||
|
||
_Please enter a brief summary of the changes here_ | ||
|
||
> [!TIP] | ||
> Keep the summary brief, this does not have to be the full release notes. Any additional | ||
> description of the contents of the Pull Request can be provided in the _Supporting Documentation_ | ||
> section that follows. | ||
## Content ## | ||
**This Pull Request contains (tick each list item once completed):** | ||
|
||
- [ ] A link to an Issue describing the work, background and any associated documentation | ||
- [ ] Been reviewed by one of the following Working Groups: | ||
- [ ] Contribution Review Working Group (CRWG) | ||
- [ ] Steering Working Group (SWG) | ||
- [ ] Technology Architecture Working Group (TAWG) | ||
- [ ] A CDM Domain Working Group maintained by FINOS | ||
- [ ] An External Industry Association CDM Working Group e.g. run by ISLA, ISDA, ICMA | ||
- [ ] Been assessed for compliance with CDM Design Principles (where applicable) | ||
- [ ] A Release Note that describes the changes, which contains: | ||
- [ ] A section explaining the business or technical reasoning for the change | ||
- [ ] A section detailing the changes themselves | ||
- [ ] A section on any changes that break backwards compatibility | ||
- [ ] A link to this Pull Request as a cross reference | ||
|
||
> [!IMPORTANT] | ||
> Where a list item has not been ticked please provide a brief description of why here. | ||
> The more evidence that you can provide of analysis and review by CDM maintainers and | ||
> subject matter experts the better. | ||
## Supporting Documentation ## | ||
|
||
_Add any additional details that support the changes here_ | ||
|
||
> [!TIP] | ||
> This section is optional, and only needs to be populated if there are additional notes that | ||
> you feel would help the reviewers of the Pull Request to better understand the scope and | ||
> functionality of the changes. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -3,6 +3,8 @@ name: CVE Scanning for Maven | |
on: | ||
workflow_dispatch: | ||
push: | ||
branches: | ||
- master | ||
paths: | ||
- 'pom.xml' | ||
- 'allow-list.xml' | ||
|
@@ -14,7 +16,7 @@ on: | |
- '.github/workflows/cve-scanning.yml' | ||
|
||
jobs: | ||
build: | ||
depcheck: | ||
|
||
runs-on: ubuntu-latest | ||
|
||
|
@@ -29,4 +31,19 @@ jobs: | |
- name: Build with Maven | ||
run: mvn clean install -DskipTests | ||
- name: CVE scanning | ||
run: mvn org.owasp:dependency-check-maven:check -DfailBuildOnCVSS=7 -DsuppressionFile="allow-list.xml" | ||
uses: dependency-check/[email protected] | ||
env: | ||
JAVA_HOME: /opt/jdk | ||
with: | ||
project: 'Common Domain Model' | ||
path: '.' | ||
format: 'HTML' | ||
out: 'reports' | ||
args: > | ||
--suppression allow-list.xml | ||
--failOnCVSS 7 | ||
- name: Upload results | ||
uses: actions/upload-artifact@v3 | ||
with: | ||
name: CVE Scan Report | ||
path: ${{github.workspace}}/reports |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.