From 1fffebd497d6b911337c381d6416634ecfdcf692 Mon Sep 17 00:00:00 2001 From: Dale Visser Date: Wed, 26 Aug 2015 14:40:36 -0400 Subject: [PATCH] Docs: Added Ruby Gemspec analyzer page, fixed typos on Node.js page. --- src/site/markdown/analyzers/nodejs.md | 2 +- src/site/markdown/analyzers/ruby-gemspec.md | 15 +++++++++++++++ src/site/site.xml | 3 +++ 3 files changed, 19 insertions(+), 1 deletion(-) create mode 100644 src/site/markdown/analyzers/ruby-gemspec.md diff --git a/src/site/markdown/analyzers/nodejs.md b/src/site/markdown/analyzers/nodejs.md index e987d7541..103a0354f 100644 --- a/src/site/markdown/analyzers/nodejs.md +++ b/src/site/markdown/analyzers/nodejs.md @@ -2,7 +2,7 @@ Node.js Analyzer ================ OWASP dependency-check includes an analyzer that will scan [Node Package Manager](https://www.npmjs.com/) -package specification files. The analyzer(s) will collect as much information +package specification files. The analyzer will collect as much information as it can about the package. The information collected is internally referred to as evidence and is grouped into vendor, product, and version buckets. Other analyzers later use this evidence to identify any Common Platform Enumeration diff --git a/src/site/markdown/analyzers/ruby-gemspec.md b/src/site/markdown/analyzers/ruby-gemspec.md new file mode 100644 index 000000000..ece5d3bb8 --- /dev/null +++ b/src/site/markdown/analyzers/ruby-gemspec.md @@ -0,0 +1,15 @@ +Ruby Gemspec Analyzer +===================== + +OWASP dependency-check includes an analyzer that will scan [Ruby Gem](https://rubygems.org/) +[specifications](http://guides.rubygems.org/specification-reference/). The +analyzer will collect as much information as it can about the Gem. The +information collected is internally referred to as evidence and is grouped +into vendor, product, and version buckets. Other analyzers later use this +evidence to identify any Common Platform Enumeration (CPE) identifiers that +apply. + +__Note:__ Also consider using the Ruby +[bundler-audit](https://github.com/rubysec/bundler-audit#readme) tool. + +Files Types Scanned: Rakefile, \*.gemspec \ No newline at end of file diff --git a/src/site/site.xml b/src/site/site.xml index 78750b929..0ee832dae 100644 --- a/src/site/site.xml +++ b/src/site/site.xml @@ -140,6 +140,9 @@ Copyright (c) 2013 Jeremy Long. All Rights Reserved. Python Analyzer + + Ruby Gemspec Analyzer +