updated documentation per issue #782

This commit is contained in:
Jeremy Long
2017-07-03 08:04:54 -04:00
parent 6e2b82c446
commit 305db5f8b1
5 changed files with 60 additions and 18 deletions

View File

@@ -3,13 +3,28 @@ Tasks
Task | Description Task | Description
----------------------------------------------------|----------------------- ----------------------------------------------------|-----------------------
[dependencyCheck](configuration.html) | Runs dependency-check against the project and generates a report. [dependencyCheckAnalyze](configuration.html) | Runs dependency-check against the project and generates a report.
[dependencyCheckUpdate](configuration-update.html) | Updates the local cache of the NVD data from NIST. [dependencyCheckUpdate](configuration-update.html) | Updates the local cache of the NVD data from NIST.
dependencyCheckPurge | Deletes the local copy of the NVD. This is used to force a refresh of the data. dependencyCheckPurge | Deletes the local copy of the NVD. This is used to force a refresh of the data.
Configuration: dependencyCheckPurge Configuration
==================== ====================
The following properties can be configured for the dependencyCheckPurge task:
```groovy
buildscript {
repositories {
mavenCentral()
}
dependencies {
classpath 'org.owasp:dependency-check-gradle:${project.version}'
}
}
apply plugin: 'org.owasp.dependencycheck'
```
```bash
$ gradle dependencyCheckPurge
```
Property | Description | Default Value Property | Description | Default Value
---------------------|------------------------------------|------------------ ---------------------|------------------------------------|------------------
@@ -17,7 +32,8 @@ failOnError | Fails the build if an error occurs during the dependency-
#### Example #### Example
```groovy ```groovy
dependencyCheckPurge { dependencyCheck {
failOnError=true
} }
``` ```
@@ -31,7 +47,7 @@ data | directory | Sets the data directory to hold SQL CVEs cont
#### Example #### Example
```groovy ```groovy
dependencyCheckPurge { dependencyCheck {
data { data {
directory='d:/nvd' directory='d:/nvd'
} }

View File

@@ -3,13 +3,26 @@ Tasks
Task | Description Task | Description
-------------------------------------------------|----------------------- -------------------------------------------------|-----------------------
[dependencyCheck](configuration.html) | Runs dependency-check against the project and generates a report. [dependencyCheckAnalyze](configuration.html) | Runs dependency-check against the project and generates a report.
dependencyCheckUpdate | Updates the local cache of the NVD data from NIST. dependencyCheckUpdate | Updates the local cache of the NVD data from NIST.
[dependencyCheckPurge](configuration-purge.html) | Deletes the local copy of the NVD. This is used to force a refresh of the data. [dependencyCheckPurge](configuration-purge.html) | Deletes the local copy of the NVD. This is used to force a refresh of the data.
Configuration: dependencyCheckUpdate Configuration
==================== ====================
The following properties can be configured for the dependencyCheckUpdate task:
```groovy
buildscript {
repositories {
mavenCentral()
}
dependencies {
classpath 'org.owasp:dependency-check-gradle:${project.version}'
}
}
apply plugin: 'org.owasp.dependencycheck'
check.dependsOn dependencyCheckUpdate
```
Property | Description | Default Value Property | Description | Default Value
---------------------|------------------------------------|------------------ ---------------------|------------------------------------|------------------
@@ -18,7 +31,7 @@ failOnError | Fails the build if an error occurs during the dependency-
#### Example #### Example
```groovy ```groovy
dependencyCheckUpdate { dependencyCheck {
cveValidForHours=1 cveValidForHours=1
} }
``` ```
@@ -35,7 +48,7 @@ connectionTimeout | The URL Connection Timeout. |  
#### Example #### Example
```groovy ```groovy
dependencyCheckUpdate { dependencyCheck {
proxy { proxy {
server=some.proxy.server server=some.proxy.server
port=8989 port=8989
@@ -64,7 +77,7 @@ data | password | The password used when connecting to the data
#### Example #### Example
```groovy ```groovy
dependencyCheckUpdate { dependencyCheck {
data { data {
directory='d:/nvd' directory='d:/nvd'
} }

View File

@@ -3,13 +3,26 @@ Tasks
Task | Description Task | Description
---------------------------------------------------|----------------------- ---------------------------------------------------|-----------------------
dependencyCheck | Runs dependency-check against the project and generates a report. dependencyCheckAnalyze | Runs dependency-check against the project and generates a report.
[dependencyCheckUpdate](configuration-update.html) | Updates the local cache of the NVD data from NIST. [dependencyCheckUpdate](configuration-update.html) | Updates the local cache of the NVD data from NIST.
[dependencyCheckPurge](configuration-purge.html) | Deletes the local copy of the NVD. This is used to force a refresh of the data. [dependencyCheckPurge](configuration-purge.html) | Deletes the local copy of the NVD. This is used to force a refresh of the data.
Configuration: dependencyCheck Configuration:
==================== ====================
The following properties can be configured for the dependencyCheck task:
```groovy
buildscript {
repositories {
mavenCentral()
}
dependencies {
classpath 'org.owasp:dependency-check-gradle:${project.version}'
}
}
apply plugin: 'org.owasp.dependencycheck'
check.dependsOn dependencyCheckAnalyze
```
Property | Description | Default Value Property | Description | Default Value
---------------------|------------------------------------|------------------ ---------------------|------------------------------------|------------------

View File

@@ -30,20 +30,20 @@ buildscript {
apply plugin: 'org.owasp.dependencycheck' apply plugin: 'org.owasp.dependencycheck'
``` ```
$H$H$H Step 2, Run the dependencyCheck task $H$H$H Step 2, Run the dependencyCheckAnalyze task
Once the dependency-check plugin is applied, if the [Java plugin](https://docs.gradle.org/current/userguide/java_plugin.html) Once the dependency-check plugin is applied, if the [Java plugin](https://docs.gradle.org/current/userguide/java_plugin.html)
is being used dependency-check will automatically be added to the `check` task. is being used dependency-check will automatically be added to the `check` task.
Alternatively, you can run dependency-check directly: Alternatively, you can run dependency-check directly:
```bash ```bash
gradle dependencyCheck --info gradle dependencyCheckAnalyze --info
``` ```
The reports will be generated automatically under `build/reports` folder. The reports will be generated automatically under `build/reports` folder.
$H$H Task Configuration $H$H Task Configuration
The OWASP dependency-check-gradle plugin contains three tasks: [dependencyCheck](configuration.html), The OWASP dependency-check-gradle plugin contains three tasks: [dependencyCheckAnalyze](configuration.html),
[dependencyCheckUpdate](configuration-update.html), and [dependencyCheckPurge](configuration-purge.html). [dependencyCheckUpdate](configuration-update.html), and [dependencyCheckPurge](configuration-purge.html).
Please see each tasks configuration page for more information. Please see each tasks configuration page for more information.

View File

@@ -161,7 +161,7 @@ Copyright (c) 2013 Jeremy Long. All Rights Reserved.
</item> </item>
<item collapse="true" name="Gradle Plugin" href="./dependency-check-gradle/index.html"> <item collapse="true" name="Gradle Plugin" href="./dependency-check-gradle/index.html">
<description>Gradle plugin for OWASP dependency-check.</description> <description>Gradle plugin for OWASP dependency-check.</description>
<item name="Check Task" href="./dependency-check-gradle/configuration.html" /> <item name="Analyze Task" href="./dependency-check-gradle/configuration.html" />
<item name="Update Task" href="./dependency-check-gradle/configuration-update.html" /> <item name="Update Task" href="./dependency-check-gradle/configuration-update.html" />
<item name="Purge Task" href="./dependency-check-gradle/configuration-purge.html" /> <item name="Purge Task" href="./dependency-check-gradle/configuration-purge.html" />
</item> </item>