Add CodeQL (SAST), SpotBugs+FindSecBugs (SAST via verify), OWASP Dependency Check and OWASP ZAP baseline scan (DAST) to the CI/CD pipeline. Docker deploy is gated behind ci, sast-codeql and dast jobs. Fix DM_DEFAULT_ENCODING spotted by SpotBugs: use StandardCharsets.UTF_8 in Basic Auth encoding.
3.0 KiB
3.0 KiB