Merge pull request #23 from IABTechLab/gdm-UID2-3154-secret-scanning

Added .trivyignore and updated .gitignore

.github/workflows/build-and-test.yaml

@@ -0,0 +1,9 @@
+name: Build and Test
+on: [pull_request, push, workflow_dispatch]
+
+jobs:
+  build:
+    uses: IABTechLab/uid2-shared-actions/.github/workflows/shared-build-and-test.yaml@main
+    secrets: inherit
+    with:
+      working_dir: attestation-aws/

.gitignore

@@ -1 +1,2 @@
 */target/
+.idea/

.trivyignore

@@ -0,0 +1,5 @@
+# List any vulnerability that are to be accepted
+# See https://aquasecurity.github.io/trivy/v0.35/docs/vulnerability/examples/filter/
+# for more details
+# e.g.
+# CVE-2022-3996

attestation-aws/pom.xml

@@ -57,6 +57,18 @@
 
     <build>
         <plugins>
+            <plugin>
+                <groupId>org.jacoco</groupId>
+                <artifactId>jacoco-maven-plugin</artifactId>
+                <version>0.8.8</version>
+                <executions>
+                    <execution>
+                        <goals>
+                            <goal>prepare-agent</goal>
+                        </goals>
+                    </execution>
+                </executions>
+            </plugin>
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-compiler-plugin</artifactId>