mirror of
https://github.com/ysoftdevs/DependencyCheck.git
synced 2026-03-02 22:20:18 +01:00
cleanup
This commit is contained in:
11
NOTICES.txt
Normal file
11
NOTICES.txt
Normal file
@@ -0,0 +1,11 @@
|
||||
DependencyCheck
|
||||
Copyright (c) 2012 Jeremy Long. All Rights Reserved.
|
||||
|
||||
This product includes software developed by
|
||||
The Apache Software Foundation (http://www.apache.org/).
|
||||
|
||||
This product includes software developed by
|
||||
Joda.org (http://www.joda.org/).
|
||||
|
||||
This product includes software developed by
|
||||
Jquery.com (http://jquery.com/).
|
||||
@@ -1,6 +1,7 @@
|
||||
About:
|
||||
DependencyCheck is a simple utility that attempts to determine if there is a
|
||||
Common Product Enumeration (CPE) identifier for a given project dependency.
|
||||
DependencyCheck is a simple utility that attempts to detect publically disclosed
|
||||
vulnerabilities contained within project dependencies. It does this by determining
|
||||
if there is a Common Product Enumeration (CPE) identifier for a given dependency.
|
||||
If found, it will generate a report linking to the associated CVE entries.
|
||||
|
||||
Usage:
|
||||
@@ -10,11 +11,6 @@ $ java -jar dependencycheck-0.1.jar -h
|
||||
$ java -jar DependencyCheck-0.1.jar -a Testing -out . -scan ./test-classes/org.mortbay.jetty.jar -scan struts2-core-2.1.2.jar -scan ./lib
|
||||
|
||||
|
||||
TODO:
|
||||
Add CVE download/indexing and CPE lookup.
|
||||
Finish report generation (xml).
|
||||
Consider utilizing the OSVDB in addition to CPE/CVE.
|
||||
|
||||
Author: Jeremy Long (jeremy.long@gmail.com)
|
||||
|
||||
Copyright (c) 2012 Jeremy Long. All Rights Reserved.
|
||||
2
pom.xml
2
pom.xml
@@ -270,7 +270,7 @@ along with DependencyCheck. If not, see <http://www.gnu.org/licenses/>.
|
||||
<version>2.9.1</version>
|
||||
<configuration>
|
||||
<enableRulesSummary>false</enableRulesSummary>
|
||||
<configLocation>checkstyle-checks.xml</configLocation>
|
||||
<configLocation>src/main/config/checkstyle-checks.xml</configLocation>
|
||||
</configuration>
|
||||
</plugin>
|
||||
</reportPlugins>
|
||||
|
||||
@@ -41,7 +41,7 @@ under the License.
|
||||
</module-->
|
||||
|
||||
<module name="SuppressionFilter">
|
||||
<property name="file" value="checkstyle-suppressions.xml"/>
|
||||
<property name="file" value="src/main/config/checkstyle-suppressions.xml"/>
|
||||
</module>
|
||||
|
||||
<!-- Checks that property files contain the same keys. -->
|
||||
@@ -53,7 +53,7 @@ under the License.
|
||||
<!-- Checks for Headers -->
|
||||
<!-- See http://checkstyle.sf.net/config_header.html -->
|
||||
<module name="RegexpHeader">
|
||||
<property name="headerFile" value="checkstyle-header.txt"/>
|
||||
<property name="headerFile" value="src/main/config/checkstyle-header.txt"/>
|
||||
</module>
|
||||
|
||||
<module name="FileTabCharacter">
|
||||
Reference in New Issue
Block a user