Added vulnerable dependency to verify security-issues workflow

exasol · Oct 30, 2023 · e0ce73c · e0ce73c
1 parent d67296d
commit e0ce73c
Show file tree

Hide file tree

Showing 3 changed files with 34 additions and 23 deletions.
diff --git a/dependencies.md b/dependencies.md
diff --git a/doc/changes/changes_2.9.16.md b/doc/changes/changes_2.9.16.md
@@ -35,6 +35,7 @@ This release updates the `dependencies_check.yml` GitHub workflow to use new [se
 #### Test Dependency Updates
 
 * Updated `com.exasol:project-keeper-shared-test-setup:2.9.14` to `2.9.16`
+* Added `io.netty:netty-handler:4.1.100.Final`
 
 ### Project Keeper Maven Plugin
 

diff --git a/project-keeper-cli/pom.xml b/project-keeper-cli/pom.xml
@@ -56,6 +56,13 @@
             <artifactId>maven-project-version-getter</artifactId>
             <scope>test</scope>
         </dependency>
+        <dependency>
+            <!-- Vulnerable dependency for testing security-issues workflow -->
+            <groupId>io.netty</groupId>
+            <artifactId>netty-handler</artifactId>
+            <version>4.1.100.Final</version>
+            <scope>test</scope>
+        </dependency>
     </dependencies>
     <build>
         <plugins>