added file analyzer documentation

Former-commit-id: c0c29021cd1197f26942ff36c8b63220d1267c21
This commit is contained in:
Jeremy Long
2014-06-22 19:55:21 -04:00
parent 452955667c
commit b64916ce3f
6 changed files with 65 additions and 1 deletions

View File

@@ -0,0 +1,13 @@
Nuspec Analyzer
==============
Dependency-check includes an analyzer that will scan NuGet's Nuspec file to
collect information about the component being used. The evidence collected
is used by other analyzers to determine if there are any known vulnerabilities
associated with the component.
Note, the Nuspec Analyzer does not scan dependencies defined. However, if
the dependencies have been downloaded and may be included in the scan depending
on configuration.
Files Types Scanned: NUSPEC