bitrise-step-dependency-check

README

OWASP Dependency Check

Runs the OWASP Dependency-Check tool to identify depepdancies and potential security vulnerabilities.

Quick start

Add this step directly to your bitrise workflow.

1. Configure the scan path to the folders you want to scan, by default this scans all files and folders in the relative path.
2. Pick a CVSS score threshold if you want the step to fail if a severe enough vulnerability was found.
3. Pick the report formats your would like.
4. Specify where to write these reports, defaults to $BITRISE_DEPLOY_DIR