From a9793e4430a3aae38f1c8ec647fb6c50ff69b70a Mon Sep 17 00:00:00 2001 From: "Krzysztof Massalski (Extern)" Date: Fri, 5 Apr 2024 11:02:16 +0200 Subject: [PATCH] feat(impl):[#499] docs cleanup --- .config/README.md | 1 - README.md | 3 -- .../arc42/architecture-constraints/index.adoc | 19 ++++--------- pom.xml | 28 ------------------- 4 files changed, 5 insertions(+), 46 deletions(-) diff --git a/.config/README.md b/.config/README.md index d128507341..64e967555e 100644 --- a/.config/README.md +++ b/.config/README.md @@ -14,6 +14,5 @@ This folder contains configuration, rules and suppression files for code quality | irs.header | Copyright header definition for the checkstyle module RegexpHeader. | see checkstyle.xml file | | owasp-suppressions.xml | [OWASP dependendy check](https://owasp.org/www-project-dependency-check/) suppressions. | [OWASP suppressions documentation](https://jeremylong.github.io/DependencyCheck/general/suppression.html) | | pmd-rules.xml | [PMD Source Code Analyzer](https://pmd.github.io/) rules. | [PMD rules documentation](https://pmd.github.io/pmd/pmd_userdocs_making_rulesets.html) | -| spotbugs-excludes.xml | [Spotbugs](https://spotbugs.github.io/) excludes. | [Spotbugs excludes documentation](https://spotbugs.readthedocs.io/en/stable/filter.html) | diff --git a/README.md b/README.md index 603ac6b4f1..c05772d516 100644 --- a/README.md +++ b/README.md @@ -7,11 +7,8 @@ [![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=eclipse-tractusx_item-relationship-service&metric=alert_status)](https://sonarcloud.io/summary/new_code?id=eclipse-tractusx_item-relationship-service) [![CodeQL](https://github.com/eclipse-tractusx/item-relationship-service/actions/workflows/codeql.yml/badge.svg)](https://github.com/eclipse-tractusx/item-relationship-service/actions/workflows/codeql.yml) [![Kics](https://github.com/eclipse-tractusx/item-relationship-service/actions/workflows/kics.yml/badge.svg)](https://github.com/eclipse-tractusx/item-relationship-service/actions/workflows/kics.yml) -[![Trivy](https://github.com/eclipse-tractusx/item-relationship-service/actions/workflows/trivy.yml/badge.svg)](https://github.com/eclipse-tractusx/item-relationship-service/actions/workflows/trivy.yml) [![Trivy Docker Hub Scan](https://github.com/eclipse-tractusx/item-relationship-service/actions/workflows/trivy-docker-hub-scan.yml/badge.svg)](https://github.com/eclipse-tractusx/item-relationship-service/actions/workflows/trivy-docker-hub-scan.yml) -[![VeraCode](https://github.com/eclipse-tractusx/item-relationship-service/actions/workflows/veracode.yaml/badge.svg)](https://github.com/eclipse-tractusx/item-relationship-service/actions/workflows/veracode.yaml) [![OWASP Dependency Check](https://github.com/eclipse-tractusx/item-relationship-service/actions/workflows/owasp.yml/badge.svg)](https://github.com/eclipse-tractusx/item-relationship-service/actions/workflows/owasp.yml) -[![Spotbugs](https://github.com/eclipse-tractusx/item-relationship-service/actions/workflows/spotbugs.yml/badge.svg)](https://github.com/eclipse-tractusx/item-relationship-service/actions/workflows/spotbugs.yml) [![Eclipse-dash](https://github.com/eclipse-tractusx/item-relationship-service/actions/workflows/eclipse-dash.yml/badge.svg)](https://github.com/eclipse-tractusx/item-relationship-service/actions/workflows/eclipse-dash.yml) [![Tavern IRS API test](https://github.com/eclipse-tractusx/item-relationship-service/actions/workflows/tavern.yml/badge.svg)](https://github.com/eclipse-tractusx/item-relationship-service/actions/workflows/tavern.yml) diff --git a/docs/src/docs/arc42/architecture-constraints/index.adoc b/docs/src/docs/arc42/architecture-constraints/index.adoc index 3470e4643c..680fc8c937 100644 --- a/docs/src/docs/arc42/architecture-constraints/index.adoc +++ b/docs/src/docs/arc42/architecture-constraints/index.adoc @@ -97,12 +97,6 @@ Orchestration of application components and integration with other libraries/fra |Fail build on untidy pom.xml |N/A -|SpotBugs -|Static analysis to find bugs in Java code. Successor to the popular FindBugs tool -|Fail build on violations -|.config/spotbugs-excludes.xml -@SuppressFBWarnings(...) - |FindSecBugs |SpotBugs plugin to add security bug coverage |Fail build on violations @@ -126,14 +120,6 @@ Orchestration of application components and integration with other libraries/fra |pom.xml @ExcludeFromCodeCoverageGeneratedReport -|Veracode -a| -- Scan source code for vulnerabilities (SAST) -- Scan dependencies for known vulnerabilities (SCA) -- Check used licenses (FOSS licenses) -| -|https://web.analysiscenter.veracode.com/ - |Dependabot |Automated dependency updates built into GitHub. Provides pull requests for dependency updates. |Every dependency update automatically generates a pull request. @@ -143,4 +129,9 @@ a| |Discover vulnerabilities across a code base. | |.github/workflows/codeql.yml + +|KICS +|Infrastructure as Code scannings. +| +|.github/workflows/kics.yml |=== \ No newline at end of file diff --git a/pom.xml b/pom.xml index 96611cfa6b..471a4ee3c0 100644 --- a/pom.xml +++ b/pom.xml @@ -107,7 +107,6 @@ 1.19.1 - 4.7.3.2 1.12.0 3.3.1 10.12.6 @@ -206,33 +205,6 @@ - - com.github.spotbugs - spotbugs-maven-plugin - ${spotbugs-plugin.version} - - Max - Low - true - Low - .config/spotbugs-excludes.xml - - - com.h3xstream.findsecbugs - findsecbugs-plugin - ${findsecbugs-plugin.version} - - - - - - validate - - check - - - - org.owasp dependency-check-maven