mirror of
https://github.com/ysoftdevs/DependencyCheck.git
synced 2026-03-28 03:51:33 +01:00
minor update to documentation
Former-commit-id: b41917cd2cd2dbb1c3099f32bb3cb453ed6b9157
This commit is contained in:
@@ -1,7 +1,7 @@
|
|||||||
Archive Analyzer
|
Archive Analyzer
|
||||||
==============
|
==============
|
||||||
|
|
||||||
Dependency-check includes an analyzer an archive analyzer that will attempt
|
OWASP dependency-check includes an analyzer an archive analyzer that will attempt
|
||||||
to extract files from the archive that are supported by the other file type
|
to extract files from the archive that are supported by the other file type
|
||||||
analyzers.
|
analyzers.
|
||||||
|
|
||||||
|
|||||||
@@ -1,7 +1,7 @@
|
|||||||
Assembly Analyzer
|
Assembly Analyzer
|
||||||
==============
|
==============
|
||||||
|
|
||||||
Dependency-check includes an analyzer that scans .NET dll and exe files and collect as
|
OWASP dependency-check includes an analyzer that scans .NET dll and exe files and collect as
|
||||||
much information it can about the files as it can. The information collected
|
much information it can about the files as it can. The information collected
|
||||||
is internally referred to as evidence and is grouped into vendor, product, and version
|
is internally referred to as evidence and is grouped into vendor, product, and version
|
||||||
buckets. Other analyzers later use this evidence to identify any Common Platform
|
buckets. Other analyzers later use this evidence to identify any Common Platform
|
||||||
|
|||||||
@@ -1,7 +1,7 @@
|
|||||||
Central Analyzer
|
Central Analyzer
|
||||||
==============
|
==============
|
||||||
|
|
||||||
Dependency-check includes an analyzer that will check for the Maven GAV
|
OWASP dependency-check includes an analyzer that will check for the Maven GAV
|
||||||
(Group/Artifact/Version) information for artifacts in the scanned area. By
|
(Group/Artifact/Version) information for artifacts in the scanned area. By
|
||||||
default the information comes from [Maven Central][1]. If the artifact's hash
|
default the information comes from [Maven Central][1]. If the artifact's hash
|
||||||
is found in the configured Nexus repository, its GAV is recorded as an Identifier
|
is found in the configured Nexus repository, its GAV is recorded as an Identifier
|
||||||
|
|||||||
@@ -1,7 +1,7 @@
|
|||||||
Nuspec Analyzer
|
Nuspec Analyzer
|
||||||
==============
|
==============
|
||||||
|
|
||||||
Dependency-check includes an analyzer that will scan NuGet's Nuspec file to
|
OWASP dependency-check includes an analyzer that will scan NuGet's Nuspec file to
|
||||||
collect information about the component being used. The evidence collected
|
collect information about the component being used. The evidence collected
|
||||||
is used by other analyzers to determine if there are any known vulnerabilities
|
is used by other analyzers to determine if there are any known vulnerabilities
|
||||||
associated with the component.
|
associated with the component.
|
||||||
|
|||||||
Reference in New Issue
Block a user