Add org.owasp.dependencycheck

Author: Vincent Potucek

.buildkite/pipelines/pull-request/owasp.yml

@@ -0,0 +1,12 @@
+config:
+  allow-labels: ">test-mute"
+  skip-labels: []
+steps:
+  - label: owasp:dependencyCheckAnalyze
+    command: .ci/scripts/run-gradle.sh dependencyCheckAnalyze
+    timeout_in_minutes: 300
+    agents:
+      provider: gcp
+      image: family/elasticsearch-ubuntu-2404
+      machineType: custom-32-98304
+      buildDirectory: /dev/shm/bk

build-conventions/build.gradle

@@ -14,9 +14,13 @@ buildscript {
   repositories {
     mavenCentral()
   }
+  dependencies {
+    classpath "org.owasp:dependency-check-gradle:12.1.3"
+  }
 }
 
 plugins {
+  id 'org.owasp.dependencycheck' version "12.1.3"
   id 'java-gradle-plugin'
   id 'java-test-fixtures'
   id 'eclipse'

build.gradle

@@ -30,6 +30,9 @@ buildscript {
   repositories {
     mavenCentral()
   }
+  dependencies {
+    classpath 'org.owasp:dependency-check-gradle:12.1.3'
+  }
 }
 
 plugins {
@@ -54,6 +57,8 @@ plugins {
   id 'com.gradleup.nmcp.aggregation'
 }
 
+apply plugin: 'org.owasp.dependencycheck'
+
 version = VersionProperties.elasticsearch
 
 /**