Maven plugin: improve documentation by mentioning how to run it

I see that both pages (https://github.com/jeremylong/DependencyCheck#maven-plugin and https://jeremylong.github.io/DependencyCheck/dependency-check-maven/) only mentions how to configure a plugin but they don’t say how to run it.

I see that we bind check goal but it’s not clear to what phase it was bind. I tried mvn compile and mvn package but the plugin wasn’t triggered.

Also I just to try it and I’m looking for a way to run it as-is, without binding. mvn dependency-check-maven:check didn’t work to me. Could you mention that it could be run by command mvn org.owasp:dependency-check-maven:check ?

Thanks!

[jeremylong]

The check and aggregate goals are bound to the verify phase by default. This can be changed via configuration (note the addition of the phase element to the execution):

<plugin>
  <groupId>org.owasp</groupId>
  <artifactId>dependency-check-maven</artifactId>
  <executions>
    <execution>
      <phase>test</phase>
      <goals>
        <goal>check</goal>
      </goals>
    </execution>
  </executions>
</plugin>

[lock[bot]]

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.