diff --git a/libraries/owasp_dep_check/README.md b/libraries/owasp_dep_check/README.md index 22cfab5d..43ff3959 100644 --- a/libraries/owasp_dep_check/README.md +++ b/libraries/owasp_dep_check/README.md @@ -30,7 +30,7 @@ OWASP Dependency Check Library Configuration Options | `cvss_threshold` | A number between 0 and 10, inclusive, representing the failure threshold for vulnerabilities (**note:** will never fail unless a threshold is provided) | | | `allow_suppression_file` | Allows whitelisting vulnerabilities using a suppression XML file | `true` | | `suppression_file` | Path to the suppression file (see [here](https://jeremylong.github.io/DependencyCheck/general/suppression.html) for how to create a suppression file) | `dependency-check-suppression.xml` | -| `image_tag` | The tag for the scanner Docker image used | `latest` | +| `image_tag` | The tag for the scanner Docker image used | `7.3.0-8.6-2` | ## Example Configuration Snippet diff --git a/libraries/owasp_dep_check/steps/application_dependency_scan.groovy b/libraries/owasp_dep_check/steps/application_dependency_scan.groovy index 5e319f64..0a2d563c 100644 --- a/libraries/owasp_dep_check/steps/application_dependency_scan.groovy +++ b/libraries/owasp_dep_check/steps/application_dependency_scan.groovy @@ -25,7 +25,7 @@ void call() { } } - String image_tag = config?.image_tag ?: "latest" + String image_tag = config?.image_tag ?: "7.3.0-8.6-2" inside_sdp_image "owasp-dep-check:$image_tag", { unstash "workspace"