Ruby .gemspec must before bundler analyzer to get proper package grouping

This commit is contained in:
bjiang
2016-04-02 13:51:15 -04:00
parent f89d7df305
commit 33bbb50b43
3 changed files with 6 additions and 3 deletions

View File

@@ -111,11 +111,12 @@ public class FileNameAnalyzer extends AbstractAnalyzer implements Analyzer {
// fileName, Confidence.HIGHEST); // fileName, Confidence.HIGHEST);
// dependency.getVendorEvidence().addEvidence("file", "name", // dependency.getVendorEvidence().addEvidence("file", "name",
// fileName, Confidence.HIGHEST); // fileName, Confidence.HIGHEST);
// } else if (!IGNORED_FILES.accept(f)) { // } else
if (!IGNORED_FILES.accept(f)) {
dependency.getProductEvidence().addEvidence("file", "name", dependency.getProductEvidence().addEvidence("file", "name",
fileName, Confidence.HIGH); fileName, Confidence.HIGH);
dependency.getVendorEvidence().addEvidence("file", "name", dependency.getVendorEvidence().addEvidence("file", "name",
fileName, Confidence.HIGH); fileName, Confidence.HIGH);
// } }
} }
} }

View File

@@ -782,6 +782,6 @@ public class Dependency implements Serializable, Comparable<Dependency> {
*/ */
@Override @Override
public String toString() { public String toString() {
return "Dependency{ fileName='" + fileName + "', actualFilePath='" + actualFilePath + "', filePath='" + filePath + "'}"; return "Dependency{ fileName='" + fileName + "', actualFilePath='" + actualFilePath + "', filePath='" + filePath + "', packagePath='" + packagePath + "'}";
} }
} }

View File

@@ -18,5 +18,7 @@ org.owasp.dependencycheck.analyzer.AutoconfAnalyzer
org.owasp.dependencycheck.analyzer.OpenSSLAnalyzer org.owasp.dependencycheck.analyzer.OpenSSLAnalyzer
org.owasp.dependencycheck.analyzer.CMakeAnalyzer org.owasp.dependencycheck.analyzer.CMakeAnalyzer
org.owasp.dependencycheck.analyzer.NodePackageAnalyzer org.owasp.dependencycheck.analyzer.NodePackageAnalyzer
org.owasp.dependencycheck.analyzer.RubyGemspecAnalyzer
org.owasp.dependencycheck.analyzer.RubyBundleInstallDeploymentAnalyzer org.owasp.dependencycheck.analyzer.RubyBundleInstallDeploymentAnalyzer
org.owasp.dependencycheck.analyzer.RubyBundleAuditAnalyzer
org.owasp.dependencycheck.analyzer.ComposerLockAnalyzer org.owasp.dependencycheck.analyzer.ComposerLockAnalyzer