Working on a project of almost any size will almost always require the use of external dependencies that can often put us in a position of alert fatigue where we might have to chase our projects for CVE's that have been announced where it can feel like constantly plugging a dam. Using a technique to automate this chore which can be reviewed at a later date is extremely helpful.
There are widely available tools in the ecosystem, however; I'm presenting this as a fun exercise to demonstrate how we can get in touch with the machinery that we can implement to do this.
What we will do:
Use start.spring.io to create a simple project.
Configure pom project with specific dependency rules.
