github-mirrors/DependencyCheck
1
0
Fork 0
mirror of https://github.com/ysoftdevs/DependencyCheck.git synced 2026-03-20 16:24:11 +01:00
Code Issues Packages Projects Releases Wiki Activity

manually merged PR #282

Browse Source 
Former-commit-id: cf2ae5572602f7258b4c617097ab003fe3f644c6
This commit is contained in:
Jeremy Long
2015-07-24 05:50:55 -04:00
parent ee969a5ed9
commit 94ae6e76f1
4 changed files with 141 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
dependency-check-gradle/src/main/groovy/com/tools/security/plugin/DependencyCheckGradlePlugin.groovy
View File

@@ -24,6 +24,7 @@ import org.gradle.api.Plugin
import org.gradle.api.Project
class DependencyCheckGradlePlugin implements Plugin<Project> {
static final String EXTENSION_NAME = 'dependencyCheck'
@Override
void apply(Project project) {
@@ -32,10 +33,22 @@ class DependencyCheckGradlePlugin implements Plugin<Project> {
}
def initializeConfigurations(Project project) {
project.extensions.create("dependencyCheck", DependencyCheckConfigurationExtension)
project.extensions.create(EXTENSION_NAME, DependencyCheckConfigurationExtension)
}
def registerTasks(Project project) {
project.tasks.create("dependencyCheck", DependencyCheckTask)
project.task('dependencyCheck', type: DependencyCheckTask) {
def extension = project.extensions.findByName(EXTENSION_NAME)
conventionMapping.proxyServer = { extension.proxyServer }
conventionMapping.proxyPort = { extension.proxyPort }
conventionMapping.proxyUsername = { extension.proxyUsername }
conventionMapping.proxyPassword = { extension.proxyPassword }
conventionMapping.cveUrl12Modified = { extension.cveUrl12Modified }
conventionMapping.cveUrl20Modified = { extension.cveUrl20Modified }
conventionMapping.cveStartYear = { extension.cveStartYear }
conventionMapping.cveUrl12Base = { extension.cveUrl12Base }
conventionMapping.cveUrl20Base = { extension.cveUrl20Base }
conventionMapping.outputDirectory = { extension.outputDirectory }
}
}
}

42
dependency-check-gradle/src/main/groovy/com/tools/security/tasks/DependencyCheckTask.groovy
View File

@@ -34,6 +34,24 @@ class DependencyCheckTask extends DefaultTask {
def currentProjectName = project.getName()
String proxyServer
Integer proxyPort
String proxyUsername = ""
String proxyPassword = ""
String cveUrl12Modified = "https://nvd.nist.gov/download/nvdcve-Modified.xml.gz"
String cveUrl20Modified = "https://nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-Modified.xml.gz"
Integer cveStartYear = 2002
String cveUrl12Base = "https://nvd.nist.gov/download/nvdcve-%d.xml.gz"
String cveUrl20Base = "https://nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-%d.xml.gz"
String outputDirectory = "./reports"
DependencyCheckTask() {
group = 'Dependency Check'
description = 'Produce dependency security report.'
}
@TaskAction
def check() {
initializeSettings()
@@ -82,22 +100,22 @@ class DependencyCheckTask extends DefaultTask {
}
def generateReportDirectory(String currentProjectName) {
"${project.dependencyCheck.outputDirectory}/${currentProjectName}"
"${outputDirectory}/${currentProjectName}"
}
def overrideProxySetting() {
if (isProxySettingExist()) {
logger.lifecycle("Using proxy ${project.dependencyCheck.proxyServer}:${project.dependencyCheck.proxyPort}")
logger.lifecycle("Using proxy ${getProxyServer()}:${getProxyPort()}")
setString(Settings.KEYS.PROXY_SERVER, project.dependencyCheck.proxyServer)
setString(Settings.KEYS.PROXY_PORT, "${project.dependencyCheck.proxyPort}")
setString(Settings.KEYS.PROXY_USERNAME, project.dependencyCheck.proxyUsername)
setString(Settings.KEYS.PROXY_PASSWORD, project.dependencyCheck.proxyPassword)
setString(Settings.KEYS.PROXY_SERVER, getProxyServer())
setString(Settings.KEYS.PROXY_PORT, "${getProxyPort()}")
setString(Settings.KEYS.PROXY_USERNAME, getProxyUsername())
setString(Settings.KEYS.PROXY_PASSWORD, getProxyPassword())
}
}
def isProxySettingExist() {
project.dependencyCheck.proxyServer != null && project.dependencyCheck.proxyPort != null
getProxyServer() != null && getProxyPort() != null
}
def getAllDependencies(project) {
@@ -109,10 +127,10 @@ class DependencyCheckTask extends DefaultTask {
}
def overrideCveUrlSetting() {
setString(Settings.KEYS.CVE_MODIFIED_20_URL, project.dependencyCheck.cveUrl20Modified)
setString(Settings.KEYS.CVE_MODIFIED_12_URL, project.dependencyCheck.cveUrl12Modified)
setString(Settings.KEYS.CVE_START_YEAR, "${project.dependencyCheck.cveStartYear}")
setString(Settings.KEYS.CVE_SCHEMA_2_0, project.dependencyCheck.cveUrl20Base)
setString(Settings.KEYS.CVE_SCHEMA_1_2, project.dependencyCheck.cveUrl12Base)
setString(Settings.KEYS.CVE_MODIFIED_20_URL, getCveUrl20Modified())
setString(Settings.KEYS.CVE_MODIFIED_12_URL, getCveUrl12Modified())
setString(Settings.KEYS.CVE_START_YEAR, "${getCveStartYear()}")
setString(Settings.KEYS.CVE_SCHEMA_2_0, getCveUrl20Base())
setString(Settings.KEYS.CVE_SCHEMA_1_2, getCveUrl12Base())
}
}