mirror of
https://github.com/ysoftdevs/DependencyCheck.git
synced 2026-03-23 17:41:28 +01:00
updated documentation per issue #782
This commit is contained in:
@@ -3,13 +3,28 @@ Tasks
|
|||||||
|
|
||||||
Task | Description
|
Task | Description
|
||||||
----------------------------------------------------|-----------------------
|
----------------------------------------------------|-----------------------
|
||||||
[dependencyCheck](configuration.html) | Runs dependency-check against the project and generates a report.
|
[dependencyCheckAnalyze](configuration.html) | Runs dependency-check against the project and generates a report.
|
||||||
[dependencyCheckUpdate](configuration-update.html) | Updates the local cache of the NVD data from NIST.
|
[dependencyCheckUpdate](configuration-update.html) | Updates the local cache of the NVD data from NIST.
|
||||||
dependencyCheckPurge | Deletes the local copy of the NVD. This is used to force a refresh of the data.
|
dependencyCheckPurge | Deletes the local copy of the NVD. This is used to force a refresh of the data.
|
||||||
|
|
||||||
Configuration: dependencyCheckPurge
|
Configuration
|
||||||
====================
|
====================
|
||||||
The following properties can be configured for the dependencyCheckPurge task:
|
|
||||||
|
```groovy
|
||||||
|
buildscript {
|
||||||
|
repositories {
|
||||||
|
mavenCentral()
|
||||||
|
}
|
||||||
|
dependencies {
|
||||||
|
classpath 'org.owasp:dependency-check-gradle:${project.version}'
|
||||||
|
}
|
||||||
|
}
|
||||||
|
apply plugin: 'org.owasp.dependencycheck'
|
||||||
|
```
|
||||||
|
|
||||||
|
```bash
|
||||||
|
$ gradle dependencyCheckPurge
|
||||||
|
```
|
||||||
|
|
||||||
Property | Description | Default Value
|
Property | Description | Default Value
|
||||||
---------------------|------------------------------------|------------------
|
---------------------|------------------------------------|------------------
|
||||||
@@ -17,7 +32,8 @@ failOnError | Fails the build if an error occurs during the dependency-
|
|||||||
|
|
||||||
#### Example
|
#### Example
|
||||||
```groovy
|
```groovy
|
||||||
dependencyCheckPurge {
|
dependencyCheck {
|
||||||
|
failOnError=true
|
||||||
}
|
}
|
||||||
```
|
```
|
||||||
|
|
||||||
@@ -31,7 +47,7 @@ data | directory | Sets the data directory to hold SQL CVEs cont
|
|||||||
|
|
||||||
#### Example
|
#### Example
|
||||||
```groovy
|
```groovy
|
||||||
dependencyCheckPurge {
|
dependencyCheck {
|
||||||
data {
|
data {
|
||||||
directory='d:/nvd'
|
directory='d:/nvd'
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -3,13 +3,26 @@ Tasks
|
|||||||
|
|
||||||
Task | Description
|
Task | Description
|
||||||
-------------------------------------------------|-----------------------
|
-------------------------------------------------|-----------------------
|
||||||
[dependencyCheck](configuration.html) | Runs dependency-check against the project and generates a report.
|
[dependencyCheckAnalyze](configuration.html) | Runs dependency-check against the project and generates a report.
|
||||||
dependencyCheckUpdate | Updates the local cache of the NVD data from NIST.
|
dependencyCheckUpdate | Updates the local cache of the NVD data from NIST.
|
||||||
[dependencyCheckPurge](configuration-purge.html) | Deletes the local copy of the NVD. This is used to force a refresh of the data.
|
[dependencyCheckPurge](configuration-purge.html) | Deletes the local copy of the NVD. This is used to force a refresh of the data.
|
||||||
|
|
||||||
Configuration: dependencyCheckUpdate
|
Configuration
|
||||||
====================
|
====================
|
||||||
The following properties can be configured for the dependencyCheckUpdate task:
|
|
||||||
|
```groovy
|
||||||
|
buildscript {
|
||||||
|
repositories {
|
||||||
|
mavenCentral()
|
||||||
|
}
|
||||||
|
dependencies {
|
||||||
|
classpath 'org.owasp:dependency-check-gradle:${project.version}'
|
||||||
|
}
|
||||||
|
}
|
||||||
|
apply plugin: 'org.owasp.dependencycheck'
|
||||||
|
|
||||||
|
check.dependsOn dependencyCheckUpdate
|
||||||
|
```
|
||||||
|
|
||||||
Property | Description | Default Value
|
Property | Description | Default Value
|
||||||
---------------------|------------------------------------|------------------
|
---------------------|------------------------------------|------------------
|
||||||
@@ -18,7 +31,7 @@ failOnError | Fails the build if an error occurs during the dependency-
|
|||||||
|
|
||||||
#### Example
|
#### Example
|
||||||
```groovy
|
```groovy
|
||||||
dependencyCheckUpdate {
|
dependencyCheck {
|
||||||
cveValidForHours=1
|
cveValidForHours=1
|
||||||
}
|
}
|
||||||
```
|
```
|
||||||
@@ -35,7 +48,7 @@ connectionTimeout | The URL Connection Timeout. |
|
|||||||
|
|
||||||
#### Example
|
#### Example
|
||||||
```groovy
|
```groovy
|
||||||
dependencyCheckUpdate {
|
dependencyCheck {
|
||||||
proxy {
|
proxy {
|
||||||
server=some.proxy.server
|
server=some.proxy.server
|
||||||
port=8989
|
port=8989
|
||||||
@@ -64,7 +77,7 @@ data | password | The password used when connecting to the data
|
|||||||
|
|
||||||
#### Example
|
#### Example
|
||||||
```groovy
|
```groovy
|
||||||
dependencyCheckUpdate {
|
dependencyCheck {
|
||||||
data {
|
data {
|
||||||
directory='d:/nvd'
|
directory='d:/nvd'
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -3,13 +3,26 @@ Tasks
|
|||||||
|
|
||||||
Task | Description
|
Task | Description
|
||||||
---------------------------------------------------|-----------------------
|
---------------------------------------------------|-----------------------
|
||||||
dependencyCheck | Runs dependency-check against the project and generates a report.
|
dependencyCheckAnalyze | Runs dependency-check against the project and generates a report.
|
||||||
[dependencyCheckUpdate](configuration-update.html) | Updates the local cache of the NVD data from NIST.
|
[dependencyCheckUpdate](configuration-update.html) | Updates the local cache of the NVD data from NIST.
|
||||||
[dependencyCheckPurge](configuration-purge.html) | Deletes the local copy of the NVD. This is used to force a refresh of the data.
|
[dependencyCheckPurge](configuration-purge.html) | Deletes the local copy of the NVD. This is used to force a refresh of the data.
|
||||||
|
|
||||||
Configuration: dependencyCheck
|
Configuration:
|
||||||
====================
|
====================
|
||||||
The following properties can be configured for the dependencyCheck task:
|
|
||||||
|
```groovy
|
||||||
|
buildscript {
|
||||||
|
repositories {
|
||||||
|
mavenCentral()
|
||||||
|
}
|
||||||
|
dependencies {
|
||||||
|
classpath 'org.owasp:dependency-check-gradle:${project.version}'
|
||||||
|
}
|
||||||
|
}
|
||||||
|
apply plugin: 'org.owasp.dependencycheck'
|
||||||
|
|
||||||
|
check.dependsOn dependencyCheckAnalyze
|
||||||
|
```
|
||||||
|
|
||||||
Property | Description | Default Value
|
Property | Description | Default Value
|
||||||
---------------------|------------------------------------|------------------
|
---------------------|------------------------------------|------------------
|
||||||
|
|||||||
@@ -30,20 +30,20 @@ buildscript {
|
|||||||
apply plugin: 'org.owasp.dependencycheck'
|
apply plugin: 'org.owasp.dependencycheck'
|
||||||
```
|
```
|
||||||
|
|
||||||
$H$H$H Step 2, Run the dependencyCheck task
|
$H$H$H Step 2, Run the dependencyCheckAnalyze task
|
||||||
|
|
||||||
Once the dependency-check plugin is applied, if the [Java plugin](https://docs.gradle.org/current/userguide/java_plugin.html)
|
Once the dependency-check plugin is applied, if the [Java plugin](https://docs.gradle.org/current/userguide/java_plugin.html)
|
||||||
is being used dependency-check will automatically be added to the `check` task.
|
is being used dependency-check will automatically be added to the `check` task.
|
||||||
Alternatively, you can run dependency-check directly:
|
Alternatively, you can run dependency-check directly:
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
gradle dependencyCheck --info
|
gradle dependencyCheckAnalyze --info
|
||||||
```
|
```
|
||||||
|
|
||||||
The reports will be generated automatically under `build/reports` folder.
|
The reports will be generated automatically under `build/reports` folder.
|
||||||
|
|
||||||
$H$H Task Configuration
|
$H$H Task Configuration
|
||||||
The OWASP dependency-check-gradle plugin contains three tasks: [dependencyCheck](configuration.html),
|
The OWASP dependency-check-gradle plugin contains three tasks: [dependencyCheckAnalyze](configuration.html),
|
||||||
[dependencyCheckUpdate](configuration-update.html), and [dependencyCheckPurge](configuration-purge.html).
|
[dependencyCheckUpdate](configuration-update.html), and [dependencyCheckPurge](configuration-purge.html).
|
||||||
Please see each tasks configuration page for more information.
|
Please see each tasks configuration page for more information.
|
||||||
|
|
||||||
|
|||||||
@@ -161,7 +161,7 @@ Copyright (c) 2013 Jeremy Long. All Rights Reserved.
|
|||||||
</item>
|
</item>
|
||||||
<item collapse="true" name="Gradle Plugin" href="./dependency-check-gradle/index.html">
|
<item collapse="true" name="Gradle Plugin" href="./dependency-check-gradle/index.html">
|
||||||
<description>Gradle plugin for OWASP dependency-check.</description>
|
<description>Gradle plugin for OWASP dependency-check.</description>
|
||||||
<item name="Check Task" href="./dependency-check-gradle/configuration.html" />
|
<item name="Analyze Task" href="./dependency-check-gradle/configuration.html" />
|
||||||
<item name="Update Task" href="./dependency-check-gradle/configuration-update.html" />
|
<item name="Update Task" href="./dependency-check-gradle/configuration-update.html" />
|
||||||
<item name="Purge Task" href="./dependency-check-gradle/configuration-purge.html" />
|
<item name="Purge Task" href="./dependency-check-gradle/configuration-purge.html" />
|
||||||
</item>
|
</item>
|
||||||
|
|||||||
Reference in New Issue
Block a user