From 9f66d9432b7885164c3f76d60385fb82de263a34 Mon Sep 17 00:00:00 2001 From: Jeremy Long Date: Sun, 1 Sep 2013 15:35:53 -0400 Subject: [PATCH] updated documentation Former-commit-id: 9ca3d9fcf6131d5455252ebaacd6219126bd3453 --- dependency-check-ant/pom.xml | 2 +- dependency-check-cli/pom.xml | 2 +- dependency-check-core/pom.xml | 2 +- dependency-check-jenkins/README.md | 34 ++++++++++++++++++ dependency-check-jenkins/pom.xml | 58 ++++++++++++++++++++++++++++++ dependency-check-maven/pom.xml | 2 +- pom.xml | 3 +- 7 files changed, 98 insertions(+), 5 deletions(-) create mode 100644 dependency-check-jenkins/README.md create mode 100644 dependency-check-jenkins/pom.xml diff --git a/dependency-check-ant/pom.xml b/dependency-check-ant/pom.xml index c499ccaa8..fc8bde844 100644 --- a/dependency-check-ant/pom.xml +++ b/dependency-check-ant/pom.xml @@ -28,7 +28,7 @@ Copyright (c) 2013 - Jeremy Long. All Rights Reserved. dependency-check-ant jar - dependency-check-ant + Dependency-Check Ant Task Dependency-check is a utility that attempts to detect publicly disclosed vulnerabilities contained within project dependencies. It does this by determining if there is a Common Platform Enumeration (CPE) identifier for a given dependency. If found, it will generate a report linking to the associated CVE entries. diff --git a/dependency-check-cli/pom.xml b/dependency-check-cli/pom.xml index 27aa6c55c..bbdefdf69 100644 --- a/dependency-check-cli/pom.xml +++ b/dependency-check-cli/pom.xml @@ -28,7 +28,7 @@ Copyright (c) 2012 - Jeremy Long. All Rights Reserved. dependency-check-cli jar - dependency-check-cli + Dependency-Check Command Line Dependency-Check-Maven is a Maven Plugin that attempts to detect publicly disclosed vulnerabilities contained within project dependencies. It does this by determining if there is a Common Platform Enumeration (CPE) identifier for a given dependency. If found, it will generate a report linking to the associated CVE entries. diff --git a/dependency-check-core/pom.xml b/dependency-check-core/pom.xml index 89823c2b0..343b3d6ed 100644 --- a/dependency-check-core/pom.xml +++ b/dependency-check-core/pom.xml @@ -28,7 +28,7 @@ along with Dependency-Check. If not, see . dependency-check-core jar - dependency-check-core + Dependency-Check Core diff --git a/dependency-check-jenkins/README.md b/dependency-check-jenkins/README.md new file mode 100644 index 000000000..0ef0d78f4 --- /dev/null +++ b/dependency-check-jenkins/README.md @@ -0,0 +1,34 @@ +Dependency-Check Jenkins Plugin +============================== + +Dependency-Check is a utility that attempts to detect publicly disclosed vulnerabilities contained within project dependencies. It does this by determining if there is a Common Platform Enumeration (CPE) identifier for a given dependency. If found, it will generate a report linking to the associated CVE entries. + +The Dependency-Check Jenkins Plugin features the ability to perform a dependency analysis build and later view results post build. The plugin is built using [analysis-core] and features many of the same features that Jenkins static analysis plugins offer, including thresholds, charts and the ability to view vulnerability information should a dependency have one identified. + +More information can be found on the [wiki]. + +Mailing List +------------ + +Subscribe: [dependency-check+subscribe@googlegroups.com] [subscribe] + +Post: [dependency-check@googlegroups.com] [post] + +Copyright & License +------------------- + +Dependency-Check is Copyright (c) 2012-2013 Jeremy Long. All Rights Reserved. + +Dependency-Check Jenkins Plugin is Copyright (c) 2013 Steve Springett. All Rights Reserved. + +Permission to modify and redistribute is granted under the terms of the GPLv3 license. See the [LICENSE.txt] [GPLv3] file for the full license. + +Dependency-Check makes use of several other open source libraries. Please see the [NOTICE.txt] [notices] file for more information. + + + [wiki]: https://github.com/jeremylong/dependency-check-jenkins/wiki + [analysis-core]: http://wiki.jenkins-ci.org/x/CwDgAQ + [subscribe]: mailto:dependency-check+subscribe@googlegroups.com + [post]: mailto:dependency-check@googlegroups.com + [GPLv3]: https://github.com/jeremylong/dependency-check-jenkins/blob/master/LICENSE.txt + [notices]: https://github.com/jeremylong/dependency-check-jenkins/blob/master/NOTICES.txt diff --git a/dependency-check-jenkins/pom.xml b/dependency-check-jenkins/pom.xml new file mode 100644 index 000000000..40fefb412 --- /dev/null +++ b/dependency-check-jenkins/pom.xml @@ -0,0 +1,58 @@ + + 4.0.0 + + This plug-in can independently execute a Dependency-Check analysis and visualize the results. + http://wiki.jenkins-ci.org/display/JENKINS/OWASP+Dependency-Check+Plugin + + org.owasp + dependency-check-parent + 1.0.2-SNAPSHOT + + + org.owasp + dependency-check-jenkins + Dependency-Check Jenkins Plugin + jar + 2012 + + OWASP + http://www.owasp.org + + + + + Steve Springett + steve.springett@owasp.org + OWASP + https://www.owasp.org/index.php/OWASP_Dependency_Check + + architect + developer + + + + + scm:git:git@github.com:jenkinsci/dependency-check-jenkins.git + https://github.com/jenkinsci/dependency-check-jenkins.git + scm:git:git@github.com:jenkinsci/dependency-check-jenkins.git + + + github + https://github.com/jenkinsci/dependency-check-jenkins/issues + + + + Dependency Check + dependency-check+subscribe@googlegroups.com + dependency-check+unsubscribe@googlegroups.com + dependency-check@googlegroups.com + https://groups.google.com/forum/?fromgroups#!forum/dependency-check + + + + + GNU General Public License version 3 + http://www.gnu.org/licenses/ + + + diff --git a/dependency-check-maven/pom.xml b/dependency-check-maven/pom.xml index 026e705e4..7348cecf6 100644 --- a/dependency-check-maven/pom.xml +++ b/dependency-check-maven/pom.xml @@ -30,7 +30,7 @@ Copyright (c) 2013 Jeremy Long. All Rights Reserved. dependency-check-maven maven-plugin - dependency-check-maven + Dependency-Check Maven Plugin Dependency-Check-Maven is a Maven Plugin that attempts to detect publicly disclosed vulnerabilities contained within project dependencies. It does this by determining if there is a Common Platform Enumeration (CPE) identifier for a given dependency. If found, it will generate a report linking to the associated CVE entries. 2013 diff --git a/pom.xml b/pom.xml index d7e75a523..703d8d879 100644 --- a/pom.xml +++ b/pom.xml @@ -35,8 +35,9 @@ along with Dependency-Check. If not, see . dependency-check-cli dependency-check-ant dependency-check-maven + dependency-check-jenkins - dependency-check-parent + Dependency-Check https://github.com/jeremylong/DependencyCheck.git Dependency-check is a utility that attempts to detect publicly disclosed vulnerabilities contained within project dependencies. It does this by determining if there is a Common Platform Enumeration (CPE) identifier for a given dependency. If found, it will generate a report linking to the associated CVE entries. 2012