Jeremy Long
4ec8e3bbbb
fix issue #806
2017-07-16 12:22:19 -04:00
Hans Aikema
6d2a6bbd3d
Fix issue #799 - Initialize exCol to prevent NPE
2017-07-12 21:40:31 +02:00
Jeremy Long
9b289e619a
checkstyle, pmd, sonar, etc. corrections
2017-06-22 21:07:41 -04:00
Jeremy Long
dee1ccfd3e
updates to allow old suppression file configuration
2017-06-22 07:18:14 -04:00
Phillip Whittlesea
9a30c3d0cb
Merge branch 'master' into issue-730
2017-06-19 21:44:25 +01:00
Jeremy Long
5d15c60c68
Merge branch 'stevespringett-master'
2017-06-19 06:20:22 -04:00
Phillip Whittlesea
584fd2a47b
Issue #730 : Allow multiple suppression files in Maven
...
The core has been extended to handle multiple suppression files
Extended the Ant test to cover multiple suppression files
NOTE: This change is breaking for users of the Maven plugin
2017-06-11 23:30:02 +01:00
Jeremy Long
5607e1f179
add the ability to enable/disable the NSP analyzer and updated the site documentation
2017-06-07 07:00:14 -04:00
Johann Schmitz
23ad3d04b0
Issue #754 : Allow exclusion of artifacts by type (regex)
2017-06-06 12:22:31 +02:00
Jeremy Long
6b359a7138
codacy, checkstyle, upgrades, etc.
2017-06-04 06:41:30 -04:00
Josh Cain
ed09242cb7
include checking for maven scope COMPILE_PLUS_RUNTIME on artifact omission predicate
2017-06-02 10:57:38 -05:00
Josh Cain
69f39d4dfe
Fix #752 where skipping runtime-scoped maven artifacts also skipped compile-time artifacts
2017-05-30 14:58:47 -05:00
Jeremy Long
c96ef88222
Moved report generation into the engine, cleaned up code, etc.
2017-05-23 21:00:40 -04:00
Jeremy Long
693c08cfd3
Merge pull request #731 from jeremylong/issue_729
...
Issue 729
2017-05-14 09:24:15 -04:00
Jeremy Long
e218b8ad70
added attempt to resolve system scoped dependency with test cases
2017-05-14 07:45:55 -04:00
Jeremy Long
555b1dc1cc
resolution for enhancement #729
2017-05-13 08:40:08 -04:00
Jeremy Long
523eed9319
resolved issue #686 - reports are generated even if no dependencies were analyzed
2017-05-13 08:38:43 -04:00
Jeremy Long
e721dac389
implemented CSV reports per #675
2017-05-08 07:43:39 -04:00
Jeremy Long
8fc42078c7
checkstyle corrections, minor restructuring, etc.
2017-05-07 18:40:25 -04:00
Jeremy Long
bdace1b1b7
Merge branch 'Issues#665_implement' of https://github.com/Prakhash/DependencyCheck into Prakhash-Issues#665_implement
2017-05-04 06:48:31 -04:00
Jeremy Long
c0f41c461b
reverted the threadsafe flag as the plugin is not threadsafe
2017-04-29 09:32:58 -04:00
Jeremy Long
238a96184a
Merge branch 'master' into issue690_threadsafe
2017-04-12 10:28:16 -04:00
Jeremy Long
44ddad8101
updated for maven thread safety
2017-04-12 10:24:51 -04:00
Jeremy Long
e2a1a59543
fixed issues related to making the cveDb a singleton
2017-03-31 06:58:37 -04:00
Jeremy Long
a23d127c62
initial fix for CveDB singleton
2017-03-25 09:05:51 -04:00
Prakhash
2b04c6a7dd
changed the coordinates according to the pom file details
2017-03-13 15:52:50 +05:30
Jeremy Long
371dba948d
checkstyle corrections
2017-03-12 18:03:27 -04:00
Jeremy Long
7a88981aa4
updated to use try with resouces
2017-03-12 13:22:27 -04:00
Jeremy Long
5ed6e838fc
spelling corrections
2017-03-11 14:15:24 -05:00
Jeremy Long
a61bba2f72
code cleanup
2017-03-10 16:40:22 -05:00
Jeremy Long
046f4605f9
java7 updates and cleanup
2017-03-10 15:30:48 -05:00
Jeremy Long
679df936e7
changed CveDB to a singeton
2017-03-07 05:49:12 -05:00
Hans Aikema
72d7af5291
Enable running DependencyCheck on Maven 3.0
2017-02-21 17:31:46 +01:00
Jeremy Long
960a2e27ab
formating and codacy recommended updates
2017-02-17 12:59:17 -05:00
Jeremy Long
d6c9fea354
formating and codacy recommended updates
2017-02-17 12:03:11 -05:00
Suhan Dharmasuriya
780201845b
Minor spelling fixes
2017-02-07 12:00:17 +05:30
Jeremy Long
a9af15f6f8
checkstyle/pmd suggested corrections
2017-01-21 08:47:52 -05:00
Jeremy Long
92519ae955
updated notes
2017-01-21 08:09:48 -05:00
Jeremy Long
2d90aca1f2
minor code cleanup
2017-01-21 08:05:54 -05:00
Jeremy Long
29d28c3408
fixed PR #635 to cover other interfaces
2017-01-08 11:23:52 -05:00
Jeremy Long
372d484440
Merge branch 'additional_analyzers' of https://github.com/hgschmie/DependencyCheck into hgschmie-additional_analyzers
2017-01-08 10:33:57 -05:00
Jeremy Long
233a068c8b
Merge pull request #636 from hgschmie/fail_on_any_vuln
...
adds a new flag 'failBuildOnAnyVulnerability'
2017-01-08 08:19:24 -05:00
Jeremy Long
541a7f8180
removed unused code
2017-01-02 21:40:04 -05:00
Henning Schmiedehausen
20b1ff38f9
adds a new flag 'failBuildOnAnyVulnerability'
...
In our build system, we enable checkers based on boolean
values. Currently, the only way to enable failing the build on
vulnerabilities is by providing a numeric value (0-10) for another
property. This change adds a boolean switch that will fail the build
if any vulnerability is present (we have a strict "no vulnerabilities
in our builds" policy).
2016-12-28 17:24:26 -08:00
Henning Schmiedehausen
a41158a716
adds maven configuration switches for more analyzers
2016-12-28 16:38:28 -08:00
Jeremy Long
38bf9b4ddb
checkstyle recommendations
2016-12-22 07:32:04 -05:00
Jeremy Long
bfa67fcba7
fix #617
2016-12-03 13:46:25 -05:00
Jeremy Long
4978f9dcba
Merge branch 'MavenMojosPurgeAndUpdateOnlyAggregator' of https://github.com/axel3rd/DependencyCheck into axel3rd-MavenMojosPurgeAndUpdateOnlyAggregator
2016-11-22 19:57:27 -05:00
Jeremy Long
85ab894b94
fixed the possible creation of two indexes
2016-11-20 06:49:28 -05:00
Alix Lourme
ddbca24f33
Maven mojos 'purge' & 'update-only' aggregator #618
2016-11-19 00:32:10 +01:00
