diff --git a/src/site/markdown/analyzers/cocoapods.md b/src/site/markdown/analyzers/cocoapods.md new file mode 100644 index 000000000..8d60e5a3f --- /dev/null +++ b/src/site/markdown/analyzers/cocoapods.md @@ -0,0 +1,11 @@ +CocoaPods Analyzer +================ + +*Experimental*: This analyzer is considered experimental. While this analyzer may +be useful and provide valid results more testing must be completed to ensure that +the false negative/false positive rates are acceptable. + +OWASP dependency-check includes an analyzer that will analyze SWIFT and Objective-C +packages by scanning [CocoaPods](https://cocoapods.org/) specification file. + +Files Types Scanned: [*.podspec](https://guides.cocoapods.org/making/specs-and-specs-repo.html) diff --git a/src/site/markdown/analyzers/index.md b/src/site/markdown/analyzers/index.md index f0aed77b2..3cc0cc450 100644 --- a/src/site/markdown/analyzers/index.md +++ b/src/site/markdown/analyzers/index.md @@ -24,7 +24,9 @@ several teams have found them useful in their current state. | -------- | ------------------ | --------------- | | [Autoconf](./autoconf.html) | Autoconf project configuration files (configure, configure.in, configure.ac) | [Regex](https://en.wikipedia.org/wiki/Regular_expression) scan for AC_INIT metadata, including in generated configuration script. | | [CMake](./cmake.html) | CMake project files (CMakeLists.txt) and scripts (\*.cmake) | Regex scan for project initialization and version setting commands. | +| [CocoaPods](./cocoapods.html) | CocoaPods `.podspec` files | Extracts dependency information from specification file. | | [Composer Lock](./composer-lock.html) | PHP [Composer](http://getcomposer.org) Lock files (composer.lock) | Parses PHP [Composer](http://getcomposer.org) lock files for exact versions of dependencies. | | [Node.js](./nodejs.html) | NPM package specification files (package.json) | Parse JSON format for metadata. | | [Python](./python.html) | Python source files (\*.py); Package metadata files (PKG-INFO, METADATA); Package Distribution Files (\*.whl, \*.egg, \*.zip) | Regex scan of Python source files for setuptools metadata; Parse RFC822 header format for metadata in all other artifacts. | | [Ruby Gemspec](./ruby-gemspec.html) | Ruby makefiles (Rakefile); Ruby Gemspec files (\*.gemspec) | Regex scan Gemspec initialization blocks for metadata. | +| [SWIFT](./swift.html) | SWIFT Package Manager's `Package.swift` | Extracts dependency information from swift package file. | diff --git a/src/site/markdown/analyzers/swift.md b/src/site/markdown/analyzers/swift.md new file mode 100644 index 000000000..e2476cbfd --- /dev/null +++ b/src/site/markdown/analyzers/swift.md @@ -0,0 +1,11 @@ +SWIFT Package Manager Analyzer +================ + +*Experimental*: This analyzer is considered experimental. While this analyzer may +be useful and provide valid results more testing must be completed to ensure that +the false negative/false positive rates are acceptable. + +OWASP dependency-check includes an analyzer that will scan the [SWIFT Package +Manager](https://swift.org/package-manager/)'s `Package.swift` file to obtain information on the dependencies used. + +Files Types Scanned: [Package.swift](https://swift.org/package-manager/#example-usage) diff --git a/src/site/site.xml b/src/site/site.xml index da3cbc718..80002acb0 100644 --- a/src/site/site.xml +++ b/src/site/site.xml @@ -121,6 +121,9 @@ Copyright (c) 2013 Jeremy Long. All Rights Reserved. CMake Analyzer + + CocoaPods Analyzer + Jar Analyzer @@ -142,6 +145,9 @@ Copyright (c) 2013 Jeremy Long. All Rights Reserved. Ruby Gemspec Analyzer + + Swift Package Manager Analyzer +