github-mirrors/DependencyCheck
1
0
Fork 0
mirror of https://github.com/ysoftdevs/DependencyCheck.git synced 2026-01-14 15:53:36 +01:00
Code Issues Packages Projects Releases Wiki Activity

added information about the central analyzer

Browse Source 
Former-commit-id: a01e805f5692b0db9b6260a0385271c60116b7b9
This commit is contained in:
Jeremy Long
2014-12-28 09:15:07 -05:00
parent 5078e32dc7
commit 09ff99823e
1 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
src/site/markdown/central-analyzer.md Normal file
View File

@@ -0,0 +1,11 @@
Central Analyzer
==============
Dependency-check includes an analyzer that will check for the Maven GAV
(Group/Artifact/Version) information for artifacts in the scanned area. By
default the information comes from [Maven Central][1]. If the artifact's hash
is found in the configured Nexus repository, its GAV is recorded as an Identifier
and the Group is collected as Vendor evidence, the Artifact is collected as Product
evidence, and the Version is collected as Version evidence.
[1]: http://search.maven.org/ "Maven Central"