This commit is contained in:
Jeremy Long
2012-09-12 00:10:45 -04:00
parent 654a9227ed
commit 0bfdddd22c
7 changed files with 17 additions and 10 deletions

16
README.txt Normal file
View File

@@ -0,0 +1,16 @@
About:
DependencyCheck is a simple utility that attempts to detect publically disclosed
vulnerabilities contained within project dependencies. It does this by determining
if there is a Common Product Enumeration (CPE) identifier for a given dependency.
If found, it will generate a report linking to the associated CVE entries.
Usage:
$ mvn package
$ cd target
$ java -jar dependencycheck-0.1.jar -h
$ java -jar DependencyCheck-0.1.jar -a Testing -out . -scan ./test-classes/org.mortbay.jetty.jar -scan struts2-core-2.1.2.jar -scan ./lib
Author: Jeremy Long (jeremy.long@gmail.com)
Copyright (c) 2012 Jeremy Long. All Rights Reserved.