github-mirrors/DependencyCheck
1
0
Fork 0
mirror of https://github.com/ysoftdevs/DependencyCheck.git synced 2026-01-18 17:47:05 +01:00
Code Issues Packages Projects Releases Wiki Activity
4,824 Commits 7 Branches 56 Tags
16892d022fe4058c4df0435560355f2c635a245b
Commit Graph

2180 Commits

Author SHA1 Message Date
brianf
16892d022f Nuspec tests and name normalization 
added tests for the existing analyzer and normalized the name and set
the ecosystem.
 2017-10-01 11:41:45 -04:00
brianf
c33cc3f230 few more formatting fixes 2017-09-25 10:25:56 -04:00
brianf
4fc8dd59d2 cleanup from reviews. Mostly formatting 2017-09-25 10:18:56 -04:00
brianf
e0af41e439 cleanup 2017-09-22 13:47:08 -04:00
brianf
1564f11b89 Normalize Ruby analyzers 2017-09-21 21:44:49 -04:00
brianf
69323bf0a4 Normalize the Node Analyzers 2017-09-21 21:00:55 -04:00
brianf
6726101e36 Added Ecosystem to Java 2017-09-21 17:37:17 -04:00
brianf
9998cd0ccc Normailze Cmake names 2017-09-21 16:35:14 -04:00
brianf
562269dd2b Normalized Python Package Name 2017-09-21 15:53:13 -04:00
brianf
a8b740a538 Normalized Python Dist names 2017-09-21 15:41:13 -04:00
brianf
7a74917b67 Standardized the Composer / PHP Names 2017-09-21 15:30:47 -04:00
brianf
4a95efefac Merge branch 'phpAddVersion' into dependencyNameImprovements 2017-09-21 15:22:43 -04:00
brianf
9b718490e3 Centralize the collection of name and version to be used for 
synthesizing a displayName.

Fixed the swift/cocoapod analyzers to new model
 2017-09-21 15:00:38 -04:00
brianf
4ac0a0e305 Removing Redundant dependency entry for composer.lock 
Move all the log statements to debug
 2017-09-19 09:52:32 -04:00
brianf
3b00b764ac Remove the redundant top level entry for composer.lock once the child 
dependencies are processed.

This main entry is empty of evidence because everything is added into
the new dependencies.
 2017-09-17 18:01:40 -04:00
brianf
a0081318b6 Adding version to the composer.lock displayFileName 
Changed output to debug
Added basic test for composer parsing, including the new version
 2017-09-15 13:27:44 -04:00
brianf
9175b2624d Following the pattern of other analyzers and including the parent name 
so the report doesn't list dozens of "package.swift" entries
 2017-09-14 12:29:28 -04:00
stevespringett
bbd59be1d6 Minor modification to XML schema and unit test. 2017-09-08 10:06:32 -05:00
stevespringett
1b1debdb30 Minor modifications to CSV, JSON, and XML reports to include Dependency.isVirtual and Vulnerability.Source 2017-09-08 00:58:27 -05:00
Jeremy Long
519d90e3d0 Merge branch 'master' of github.com:jeremylong/DependencyCheck 2017-09-07 05:46:35 -04:00
Jeremy Long
417fda8c7c lgtm suggested changes 2017-09-07 05:46:21 -04:00
stevespringett
c472608876 Added updateOnly and the loading of user-supplied properties files to scan agent 2017-09-05 22:52:00 -05:00
Jeremy Long
f700b22358 snapshot version 2017-08-25 07:08:12 -04:00
Jeremy Long
dc1195f8b1 version 2.1.1 2017-08-25 06:42:39 -04:00
Jeremy Long
8f582c55d1 fixed typo per #855 2017-08-24 06:38:54 -04:00
Jeremy Long
e82bbbefe8 updated per issue #854 2017-08-24 06:35:36 -04:00
Jeremy Long
aa033cde4b updated per group discussion https://groups.google.com/forum/#!topic/dependency-check/GcOFleJz-nk 2017-08-24 06:32:10 -04:00
Jeremy Long
2421380d1d added hint per discussion here: https://groups.google.com/forum/#!topic/dependency-check/GcOFleJz-nk 2017-08-23 06:41:39 -04:00
Jeremy Long
0f87dee1a0 Merge branch 'catch_ioexception_parsing_manifest' of https://github.com/mealingr/DependencyCheck into mealingr-catch_ioexception_parsing_manifest 2017-08-23 05:51:15 -04:00
Jeremy Long
5ff9814894 patch for issue #851 2017-08-23 05:43:47 -04:00
Richard Mealing
5d87dc2942 change to skip and remove macOS metadata and non-zip files 2017-08-21 13:51:45 +01:00
Jeremy Long
1049a18a15 temporarily suspend parallel processing 2017-08-20 11:22:35 -04:00
Jeremy Long
bcae8d2015 Merge pull request #839 from jeremylong/h2upgrade 
H2 Upgrade
 2017-08-20 11:02:17 -04:00
Jeremy Long
631c10f8b6 fix issue #849 2017-08-20 11:01:10 -04:00
Jeremy Long
a015cf4210 patch to fix issue #844 2017-08-19 17:20:36 -04:00
Jeremy Long
07f838ccf3 patch to fix issue #844 2017-08-19 17:18:48 -04:00
Richard Mealing
6d7f7d8e42 updated error message to be more representative 2017-08-18 13:44:53 +01:00
Richard Mealing
e7055c8a38 increased test robustness 2017-08-18 09:55:19 +01:00
Richard Mealing
ab2e5f31c8 catch IOExceptions when parsing jar manifest 2017-08-17 19:54:13 +01:00
Jeremy Long
c0aca39d31 revert database name to dc.h2.db 2017-08-13 16:05:26 -04:00
Jeremy Long
bf5aafe455 improve usage of lucene, add stop words, code cleanup, etc. 2017-08-13 13:18:58 -04:00
Jeremy Long
fb2b3159e8 added suppression rule per issue #838 2017-08-13 12:37:17 -04:00
Jeremy Long
593fddb1f9 Merge branch 'master' of github.com:jeremylong/DependencyCheck 2017-08-13 10:47:50 -04:00
Jeremy Long
3ef80644f8 updated connection string for concurrency 2017-08-13 08:28:32 -04:00
Jeremy Long
d401a7e60a minor code formating fix 2017-08-13 07:43:34 -04:00
Jeremy Long
1e269f2a2c externalized db lock 2017-08-13 07:41:35 -04:00
Kevin Tham
ade69168d0 Make fixes to NspAnalyzer to correctly parse package.json files 
* parse `bundledDependencies` and `bundleDependencies' as a JsonArray
* parse `license` as a JsonObject for older libraries that used license objects
 2017-08-08 11:33:50 -07:00
Kevin Tham
89c63ac5c9 Add NspAnalyzerTest.java and package.json files for testing 2017-08-08 11:30:54 -07:00
Jeremy Long
9fd8f1c898 initial upgrade of h2 2017-08-07 18:37:03 -04:00
Jeremy Long
b44862f713 updated log message, see https://github.com/jeremylong/dependency-check-gradle/issues/52 - original message was misleading 2017-08-05 07:53:40 -04:00