269 Commits

Author	SHA1	Message	Date
Jeremy Long	0ce1ef596c	Merge branch 'reportmodifier1' of https://github.com/Prakhash/DependencyCheck into Prakhash-reportmodifier1	2017-02-25 15:55:12 -05:00
Jeremy Long	03559fd106	added more suppression rules for false positives	2017-02-25 06:31:34 -05:00
Jeremy Long	d08357a1c2	fixed typo	2017-02-24 07:10:27 -05:00
Jeremy Long	c1cb87ebde	Merge branch 'master' of github.com:jeremylong/DependencyCheck	2017-02-24 06:30:11 -05:00
Jeremy Long	82fd1cf4d7	additional fp added	2017-02-24 06:30:02 -05:00
Prakhash	583c2d34d3	schema changes are added with global schema	2017-02-24 14:23:56 +05:30
Prakhash	c9640fbf04	schema file is modified with notes attribute'	2017-02-24 12:15:21 +05:30
Prakhash	192d1de944	name space changes are reverted to the original	2017-02-24 12:06:51 +05:30
Prakhash	aa0314c840	report is modified with the notes element	2017-02-24 11:03:10 +05:30
Jeremy Long	d267e14b73	Merge pull request #666 from colezlaw/grokassembly ... Updated GrokAssembly and added config	2017-02-22 06:32:45 -05:00
Jeremy Long	2ea0eb3c64	correct fix for issue #660; correctly handle organization from the pom	2017-02-21 06:40:02 -05:00
Jeremy Long	a5990ea6f3	update to #657 to allow sorted vulnerable software in repots; also, sorting an array list is faster then building a treeset	2017-02-21 06:38:31 -05:00
colezlaw	67921f5f3d	Updated GrokAssembly and added config	2017-02-20 15:35:52 -05:00
Jeremy Long	d31e0453bd	fix for #660	2017-02-20 07:01:05 -05:00
stevespringett	ae21424a30	Closes #664	2017-02-18 21:23:19 -06:00
Stefan Neuhaus	cd4f09dc86	NvdCveUpdater: Refactor thread pool concept ... - Make thread pools members of the class to facilitate reuse - Increase default max download thread pool size from 3 to 50 (should be fine for mostly blocking tasks like downloading)	2017-02-16 08:58:14 +01:00
Jeremy Long	886c02fad2	add configuration to remove FP based on parent-group/artifact from spring-boot	2017-02-07 06:24:34 -05:00
Jeremy Long	3a082ae00a	minor update to #617	2017-02-07 06:06:53 -05:00
Jeremy Long	0e0a4bb0b4	expanded hint rules so that they can remove evidence	2017-02-04 09:20:47 -05:00
Jeremy Long	f39f754b7b	reapplied fix for issue #601	2017-01-22 08:10:14 -05:00
Jeremy Long	c59615f452	patch for issue #510 and #512	2017-01-22 08:01:40 -05:00
Jeremy Long	9d5769bb69	Merge branch 'issue575'	2017-01-15 11:19:37 -05:00
Jeremy Long	523cd23b6b	filter version numbers for issue #575	2017-01-14 09:41:34 -05:00
Jeremy Long	8733a85ebb	patch per issue#642	2017-01-13 06:53:26 -05:00
Jeremy Long	63ad13ff7a	added enabled properties per issue #612	2016-12-27 08:46:04 -05:00
Jeremy Long	287b1df3fd	added enabled settings for all analyzers per #612	2016-12-26 09:11:26 -05:00
Jeremy Long	60e661d3a4	updated per issue #630	2016-12-22 06:55:26 -05:00
Jeremy Long	edd4191d47	fix for #517	2016-12-16 06:29:42 -05:00
Jeremy Long	db5ff1bfca	java mail - disputed CVE is considered a false positive	2016-11-22 16:38:45 -05:00
Jeremy Long	75207169e3	resolved fp per #604	2016-11-05 06:29:43 -04:00
Jeremy Long	e07f568237	resolved false positive per #608	2016-11-05 06:23:06 -04:00
Jeremy Long	a12bc44ecd	moved hard-coded configuration to properties file and added some additional debugging	2016-10-28 08:44:43 -04:00
Jeremy Long	b7b97960a6	improvements to the vulnerability report per issue #599	2016-10-22 07:11:36 -04:00
Alex	e8788dd2a4	#601 make the dependency vulnerability count easier to pull out of the html	2016-10-18 20:08:43 -04:00
Jeremy Long	26a4e7451e	Merge pull request #589 from pierre-ernst/master ... Hardening	2016-10-08 22:04:07 -04:00
Jeremy Long	9388340e23	updated to resolve reported false negative: https://groups.google.com/forum/#!topic/dependency-check/LjnemiZKeZQ	2016-10-08 06:19:46 -04:00
pernst	2285d2ef4b	first commit	2016-10-06 16:40:39 -04:00
Jeremy Long	128a600f18	fixed issue with cpeSort being null on first row if no CPE is present	2016-10-04 06:45:17 -04:00
Jeremy Long	7dd9a52e78	corrected false positive per issue #582	2016-10-04 06:20:34 -04:00
Jeremy Long	ff341b7228	corrected false positive per issue #582	2016-10-04 06:19:41 -04:00
Jeremy Long	6326513c63	improved suppression capability within the report	2016-09-21 14:04:21 -04:00
Jeremy Long	6f1b20c936	updated report to be able to suppress by GAV and added help text	2016-09-16 10:14:48 -04:00
Jeremy Long	7734a50427	resolve issue #554	2016-09-10 07:20:49 -04:00
Jeremy Long	176d3ddefa	temporary fix for issue #534	2016-09-04 19:09:08 -04:00
Jeremy Long	5c2c08e051	suppressed false positive, see issue #540	2016-08-30 06:12:17 -04:00
Jeremy Long	632e1692eb	Merge pull request #541 from biancajiang/swift_support ... cocoapods and swift package manager support	2016-08-21 08:03:52 -04:00
Will Stranathan	a8f14c86fd	Updated GrokAssembly to deal with non-UTF-8 chars in types	2016-08-20 09:34:15 -04:00
Jeremy Long	bed04150e1	reverted H2 upgrade due to issues with Jenkins and Java 6 compatability	2016-07-27 06:23:56 -04:00
Jeremy Long	7cf040653f	upgraded h2 db version	2016-07-22 06:29:01 -04:00
bjiang	2fa8507d69	merge owasp 1.4.1	2016-07-12 16:22:05 -04:00