This commit is contained in:
Jeremy Long
2012-09-12 00:10:45 -04:00
parent 654a9227ed
commit 0bfdddd22c
7 changed files with 17 additions and 10 deletions

11
NOTICES.txt Normal file
View File

@@ -0,0 +1,11 @@
DependencyCheck
Copyright (c) 2012 Jeremy Long. All Rights Reserved.
This product includes software developed by
The Apache Software Foundation (http://www.apache.org/).
This product includes software developed by
Joda.org (http://www.joda.org/).
This product includes software developed by
Jquery.com (http://jquery.com/).

View File

@@ -1,6 +1,7 @@
About:
DependencyCheck is a simple utility that attempts to determine if there is a
Common Product Enumeration (CPE) identifier for a given project dependency.
DependencyCheck is a simple utility that attempts to detect publically disclosed
vulnerabilities contained within project dependencies. It does this by determining
if there is a Common Product Enumeration (CPE) identifier for a given dependency.
If found, it will generate a report linking to the associated CVE entries.
Usage:
@@ -10,11 +11,6 @@ $ java -jar dependencycheck-0.1.jar -h
$ java -jar DependencyCheck-0.1.jar -a Testing -out . -scan ./test-classes/org.mortbay.jetty.jar -scan struts2-core-2.1.2.jar -scan ./lib
TODO:
Add CVE download/indexing and CPE lookup.
Finish report generation (xml).
Consider utilizing the OSVDB in addition to CPE/CVE.
Author: Jeremy Long (jeremy.long@gmail.com)
Copyright (c) 2012 Jeremy Long. All Rights Reserved.

View File

@@ -270,7 +270,7 @@ along with DependencyCheck. If not, see <http://www.gnu.org/licenses/>.
<version>2.9.1</version>
<configuration>
<enableRulesSummary>false</enableRulesSummary>
<configLocation>checkstyle-checks.xml</configLocation>
<configLocation>src/main/config/checkstyle-checks.xml</configLocation>
</configuration>
</plugin>
</reportPlugins>

View File

@@ -41,7 +41,7 @@ under the License.
</module-->
<module name="SuppressionFilter">
<property name="file" value="checkstyle-suppressions.xml"/>
<property name="file" value="src/main/config/checkstyle-suppressions.xml"/>
</module>
<!-- Checks that property files contain the same keys. -->
@@ -53,7 +53,7 @@ under the License.
<!-- Checks for Headers -->
<!-- See http://checkstyle.sf.net/config_header.html -->
<module name="RegexpHeader">
<property name="headerFile" value="checkstyle-header.txt"/>
<property name="headerFile" value="src/main/config/checkstyle-header.txt"/>
</module>
<module name="FileTabCharacter">