github-mirrors/DependencyCheck
1
0
Fork 0
mirror of https://github.com/ysoftdevs/DependencyCheck.git synced 2026-03-17 23:04:07 +01:00
Code Issues Packages Projects Releases Wiki Activity

Added cveValidForHours parameter that can suppress redundant and repetitive checks for NVD CVE changes.

Browse Source
This commit is contained in:
Anthony Whitford
2015-10-21 23:25:18 -07:00
parent 1f6168366b
commit ccb03f2763
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
dependency-check-maven/src/main/java/org/owasp/dependencycheck/maven/BaseDependencyCheckMojo.java
View File

@@ -289,6 +289,11 @@ public abstract class BaseDependencyCheckMojo extends AbstractMojo implements Ma
*/ */
@Parameter(property = "cveUrl20Base", defaultValue = "", required = false) @Parameter(property = "cveUrl20Base", defaultValue = "", required = false)
private String cveUrl20Base; private String cveUrl20Base;
/**
* Optionally skip excessive CVE update checks for a designated duration in hours.
*/
@Parameter(property = "cveValidForHours", defaultValue = "", required = false)
private String cveValidForHours;
/** /**
* The path to mono for .NET Assembly analysis on non-windows systems. * The path to mono for .NET Assembly analysis on non-windows systems.
@@ -678,6 +683,9 @@ public abstract class BaseDependencyCheckMojo extends AbstractMojo implements Ma
if (cveUrl20Base != null && !cveUrl20Base.isEmpty()) { if (cveUrl20Base != null && !cveUrl20Base.isEmpty()) {
Settings.setString(Settings.KEYS.CVE_SCHEMA_2_0, cveUrl20Base); Settings.setString(Settings.KEYS.CVE_SCHEMA_2_0, cveUrl20Base);
} }
if (cveValidForHours != null && !cveValidForHours.isEmpty()) {
Settings.setString(Settings.KEYS.CVE_CHECK_VALID_FOR_HOURS, cveValidForHours);
}
} }
/** /**