mirror of
https://github.com/ysoftdevs/DependencyCheck.git
synced 2026-03-26 02:51:27 +01:00
Ruby .gemspec must before bundler analyzer to get proper package grouping
This commit is contained in:
@@ -111,11 +111,12 @@ public class FileNameAnalyzer extends AbstractAnalyzer implements Analyzer {
|
|||||||
// fileName, Confidence.HIGHEST);
|
// fileName, Confidence.HIGHEST);
|
||||||
// dependency.getVendorEvidence().addEvidence("file", "name",
|
// dependency.getVendorEvidence().addEvidence("file", "name",
|
||||||
// fileName, Confidence.HIGHEST);
|
// fileName, Confidence.HIGHEST);
|
||||||
// } else if (!IGNORED_FILES.accept(f)) {
|
// } else
|
||||||
|
if (!IGNORED_FILES.accept(f)) {
|
||||||
dependency.getProductEvidence().addEvidence("file", "name",
|
dependency.getProductEvidence().addEvidence("file", "name",
|
||||||
fileName, Confidence.HIGH);
|
fileName, Confidence.HIGH);
|
||||||
dependency.getVendorEvidence().addEvidence("file", "name",
|
dependency.getVendorEvidence().addEvidence("file", "name",
|
||||||
fileName, Confidence.HIGH);
|
fileName, Confidence.HIGH);
|
||||||
// }
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -782,6 +782,6 @@ public class Dependency implements Serializable, Comparable<Dependency> {
|
|||||||
*/
|
*/
|
||||||
@Override
|
@Override
|
||||||
public String toString() {
|
public String toString() {
|
||||||
return "Dependency{ fileName='" + fileName + "', actualFilePath='" + actualFilePath + "', filePath='" + filePath + "'}";
|
return "Dependency{ fileName='" + fileName + "', actualFilePath='" + actualFilePath + "', filePath='" + filePath + "', packagePath='" + packagePath + "'}";
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -18,5 +18,7 @@ org.owasp.dependencycheck.analyzer.AutoconfAnalyzer
|
|||||||
org.owasp.dependencycheck.analyzer.OpenSSLAnalyzer
|
org.owasp.dependencycheck.analyzer.OpenSSLAnalyzer
|
||||||
org.owasp.dependencycheck.analyzer.CMakeAnalyzer
|
org.owasp.dependencycheck.analyzer.CMakeAnalyzer
|
||||||
org.owasp.dependencycheck.analyzer.NodePackageAnalyzer
|
org.owasp.dependencycheck.analyzer.NodePackageAnalyzer
|
||||||
|
org.owasp.dependencycheck.analyzer.RubyGemspecAnalyzer
|
||||||
org.owasp.dependencycheck.analyzer.RubyBundleInstallDeploymentAnalyzer
|
org.owasp.dependencycheck.analyzer.RubyBundleInstallDeploymentAnalyzer
|
||||||
|
org.owasp.dependencycheck.analyzer.RubyBundleAuditAnalyzer
|
||||||
org.owasp.dependencycheck.analyzer.ComposerLockAnalyzer
|
org.owasp.dependencycheck.analyzer.ComposerLockAnalyzer
|
||||||
|
|||||||
Reference in New Issue
Block a user