diff --git a/.gitignore b/.gitignore index 0f79d7db7..e7a69cf2e 100644 --- a/.gitignore +++ b/.gitignore @@ -1,6 +1,7 @@ */target/** # IntelliJ test run side-effects dependency-check-core/data/ +dependency-check-ant/data/ # Intellij project files *.iml *.ipr diff --git a/dependency-check-ant/src/test/java/org/owasp/dependencycheck/taskdefs/DependencyCheckTaskTest.java b/dependency-check-ant/src/test/java/org/owasp/dependencycheck/taskdefs/DependencyCheckTaskTest.java index ffab315f3..018794355 100644 --- a/dependency-check-ant/src/test/java/org/owasp/dependencycheck/taskdefs/DependencyCheckTaskTest.java +++ b/dependency-check-ant/src/test/java/org/owasp/dependencycheck/taskdefs/DependencyCheckTaskTest.java @@ -114,4 +114,18 @@ public class DependencyCheckTaskTest { expectedException.expect(BuildException.class); buildFileRule.executeTarget("failCVSS"); } + + /** + * Test the DependencyCheckTask where a CVE is suppressed. + */ + @Test + public void testSuppressingCVE() { + // GIVEN an ant task with a vulnerability + final String antTaskName = "suppression"; + + // WHEN executing the ant task + buildFileRule.executeTarget(antTaskName); + + // THEN the ant task executed without error + } } diff --git a/dependency-check-ant/src/test/resources/build.xml b/dependency-check-ant/src/test/resources/build.xml index 11808a5b9..be5856c61 100644 --- a/dependency-check-ant/src/test/resources/build.xml +++ b/dependency-check-ant/src/test/resources/build.xml @@ -61,11 +61,24 @@ + applicationName="test failCVSS" + reportOutputDirectory="${project.build.directory}" + reportFormat="XML" + autoupdate="false" + failBuildOnCVSS="3"> + + + + + + + + diff --git a/dependency-check-ant/src/test/resources/test-suppression.xml b/dependency-check-ant/src/test/resources/test-suppression.xml new file mode 100644 index 000000000..abbc2017d --- /dev/null +++ b/dependency-check-ant/src/test/resources/test-suppression.xml @@ -0,0 +1,11 @@ + + + + + + ^org\.apache\.axis:axis:.*$ + cpe:/a:apache:axis + +