From 54ceb630deb2a6f6bf8da035090fccf465ed02a4 Mon Sep 17 00:00:00 2001 From: Jeremy Long Date: Mon, 4 Aug 2014 06:24:00 -0400 Subject: [PATCH] fixed project descriptions and corrected site deployment issues Former-commit-id: 39373b0805b84b99c3e84dbad1c8a2301f277221 --- dependency-check-ant/pom.xml | 5 ++++- dependency-check-cli/pom.xml | 5 ++++- dependency-check-core/pom.xml | 4 ++++ dependency-check-jenkins/pom.xml | 25 ++++++++++++------------- dependency-check-maven/pom.xml | 5 ++++- dependency-check-utils/pom.xml | 7 +++++-- pom.xml | 10 +--------- 7 files changed, 34 insertions(+), 27 deletions(-) diff --git a/dependency-check-ant/pom.xml b/dependency-check-ant/pom.xml index da4961203..12d183bb0 100644 --- a/dependency-check-ant/pom.xml +++ b/dependency-check-ant/pom.xml @@ -28,7 +28,7 @@ Copyright (c) 2013 - Jeremy Long. All Rights Reserved. jar Dependency-Check Ant Task - Dependency-check is a utility that attempts to detect publicly disclosed vulnerabilities contained within project dependencies. It does this by determining if there is a Common Platform Enumeration (CPE) identifier for a given dependency. If found, it will generate a report linking to the associated CVE entries. + dependency-check-ant is an Ant Task that uses dependency-check-core to detect publicly disclosed vulnerabilities associated with the project's dependencies. The task will generate a report listing the dependency, any identified Common Platform Enumeration (CPE) identifiers, and the associated Common Vulnerability and Exposure (CVE) entries. @@ -324,6 +324,9 @@ Copyright (c) 2013 - Jeremy Long. All Rights Reserved. org.apache.maven.plugins maven-javadoc-plugin 2.9.1 + + Copyright© 2012-14 Jeremy Long. All Rights Reserved. + default diff --git a/dependency-check-cli/pom.xml b/dependency-check-cli/pom.xml index fdf11af18..8af381366 100644 --- a/dependency-check-cli/pom.xml +++ b/dependency-check-cli/pom.xml @@ -28,7 +28,7 @@ Copyright (c) 2012 - Jeremy Long. All Rights Reserved. jar Dependency-Check Command Line - Dependency-Check-Maven is a Maven Plugin that attempts to detect publicly disclosed vulnerabilities contained within project dependencies. It does this by determining if there is a Common Platform Enumeration (CPE) identifier for a given dependency. If found, it will generate a report linking to the associated CVE entries. + dependency-check-cli is an command line tool that uses dependency-check-core to detect publicly disclosed vulnerabilities associated with the scanned project dependencies. The tool will generate a report listing the dependency, any identified Common Platform Enumeration (CPE) identifiers, and the associated Common Vulnerability and Exposure (CVE) entries. @@ -174,6 +174,9 @@ Copyright (c) 2012 - Jeremy Long. All Rights Reserved. org.apache.maven.plugins maven-javadoc-plugin 2.9.1 + + Copyright© 2012-14 Jeremy Long. All Rights Reserved. + default diff --git a/dependency-check-core/pom.xml b/dependency-check-core/pom.xml index ed6cef941..e760639d4 100644 --- a/dependency-check-core/pom.xml +++ b/dependency-check-core/pom.xml @@ -27,6 +27,7 @@ Copyright (c) 2012 Jeremy Long. All Rights Reserved. jar Dependency-Check Core + dependency-check-core is the engine and reporting tool used to identify and report if there are any known, publicly disclosed vulnerabilities in the scanned project's dependencies. The engine extracts meta-data from the dependencies and uses this to do fuzzy key-word matching against the Common Platfrom Enumeration (CPE), if any CPE identifiers are found the associated Common Vulnerability and Exposure (CVE) entries are added to the generated report. @@ -271,6 +272,9 @@ Copyright (c) 2012 Jeremy Long. All Rights Reserved. org.apache.maven.plugins maven-javadoc-plugin 2.9.1 + + Copyright© 2012-14 Jeremy Long. All Rights Reserved. + default diff --git a/dependency-check-jenkins/pom.xml b/dependency-check-jenkins/pom.xml index ff1ba1be8..5966fe386 100644 --- a/dependency-check-jenkins/pom.xml +++ b/dependency-check-jenkins/pom.xml @@ -1,17 +1,25 @@ 4.0.0 - - This plug-in can independently execute a Dependency-Check analysis and visualize the results. - http://wiki.jenkins-ci.org/display/JENKINS/OWASP+Dependency-Check+Plugin org.owasp dependency-check-parent 1.2.4-SNAPSHOT - org.owasp dependency-check-jenkins Dependency-Check Jenkins Plugin + http://wiki.jenkins-ci.org/display/JENKINS/OWASP+Dependency-Check+Plugin + dependency-check-jenkins is a Jenkins plugin that runs dependency-check-core on a project to detect publicly disclosed vulnerabilities associated with the project's dependencies. The plugin will generate a report listing the dependency, any identified Common Platform Enumeration (CPE) identifiers, and the associated Common Vulnerability and Exposure (CVE) entries. This module is simply a placeholder and does not contain the actual plugin source code. The source code and distribution of the plugin is handled via https://github.com/jenkinsci/dependency-check-jenkins and Jenkin's plugin management. + + + + github-pages-site + Deployment through GitHub's site deployment plugin + ${basedir}/../target/site/${project.version}/dependency-check-jenkins + + + + pom 2012 @@ -31,15 +39,6 @@ - - - - github-pages-site - Deployment through GitHub's site deployment plugin - ${basedir}/../target/site/${project.version}/dependency-check-maven - - - scm:git:git@github.com:jenkinsci/dependency-check-jenkins.git https://github.com/jenkinsci/dependency-check-jenkins diff --git a/dependency-check-maven/pom.xml b/dependency-check-maven/pom.xml index 84046e127..91fa518ca 100644 --- a/dependency-check-maven/pom.xml +++ b/dependency-check-maven/pom.xml @@ -29,7 +29,7 @@ Copyright (c) 2013 Jeremy Long. All Rights Reserved. maven-plugin Dependency-Check Maven Plugin - Dependency-Check-Maven is a Maven Plugin that attempts to detect publicly disclosed vulnerabilities contained within project dependencies. It does this by determining if there is a Common Platform Enumeration (CPE) identifier for a given dependency. If found, it will generate a report linking to the associated CVE entries. + dependency-check-maven is a Maven Plugin that uses dependency-check-core to detect publicly disclosed vulnerabilities associated with the project's dependencies. The plugin will generate a report listing the dependency, any identified Common Platform Enumeration (CPE) identifiers, and the associated Common Vulnerability and Exposure (CVE) entries. 2013 @@ -149,6 +149,9 @@ Copyright (c) 2013 Jeremy Long. All Rights Reserved. org.apache.maven.plugins maven-javadoc-plugin 2.9.1 + + Copyright© 2012-14 Jeremy Long. All Rights Reserved. + default diff --git a/dependency-check-utils/pom.xml b/dependency-check-utils/pom.xml index 9c18043e4..1200559cf 100644 --- a/dependency-check-utils/pom.xml +++ b/dependency-check-utils/pom.xml @@ -26,13 +26,13 @@ Copyright (c) 2014 - Jeremy Long. All Rights Reserved. dependency-check-utils Dependency-Check Utils - Dependency-check-utils a collection of common utlity classes used within dependency-check. + dependency-check-utils is a collection of common utlity classes used within dependency-check that might be useful in other projects. github-pages-site Deployment through GitHub's site deployment plugin - ${basedir}/../target/site/${project.version}/dependency-check-ant + ${basedir}/../target/site/${project.version}/dependency-check-utils @@ -158,6 +158,9 @@ Copyright (c) 2014 - Jeremy Long. All Rights Reserved. org.apache.maven.plugins maven-javadoc-plugin 2.9.1 + + Copyright© 2012-14 Jeremy Long. All Rights Reserved. + default diff --git a/pom.xml b/pom.xml index 50817e55e..e1b968423 100644 --- a/pom.xml +++ b/pom.xml @@ -33,7 +33,7 @@ Copyright (c) 2012 - Jeremy Long Dependency-Check https://github.com/jeremylong/DependencyCheck.git - dependency-check is a utility that identifies project dependencies and checks if there are any known, publicly disclosed, vulnerabilities. This tool can be part of the solution to the OWASP Top 10 2013: A9 - Using Components with Known Vulnerabilities. + dependency-check is a utility that identifies project dependencies and checks if there are any known, publicly disclosed vulnerabilities. This tool can be part of the solution to the OWASP Top 10 2013: A9 - Using Components with Known Vulnerabilities. 2012 @@ -141,14 +141,6 @@ Copyright (c) 2012 - Jeremy Long 1.6 - - org.apache.maven.plugins - maven-javadoc-plugin - 2.9.1 - - Copyright© 2012-13 Jeremy Long. All Rights Reserved. - - org.apache.maven.plugins