github-mirrors/DependencyCheck
1
0
Fork 0
mirror of https://github.com/ysoftdevs/DependencyCheck.git synced 2026-01-18 17:47:05 +01:00
Code Issues Packages Projects Releases Wiki Activity
3,232 Commits 7 Branches 56 Tags
2d92c9d240c8833129f374498075995ceb8a472c
Commit Graph

55 Commits

Author SHA1 Message Date
Dale Visser
2d92c9d240 Commented out first instance of cpe.url, and moved 2nd instance up. Assumption: the 2nd value was being used. 
Former-commit-id: 2cae0ca086b2fb666d883dc1a3fbcb174465aa2b
 2015-07-14 18:00:45 -04:00
Dale Visser
e5fdda60fc Merge branch 'upmaster' into openssl-source-analyzer 
Conflicts:
	dependency-check-core/src/test/java/org/owasp/dependencycheck/analyzer/PythonPackageAnalyzerTest.java

Former-commit-id: 6d92982227ad0ff7c4381d03eb1bf542dfe7697f
 2015-07-09 16:14:54 -04:00
Jeremy Long
0a4c3102dd reverted changes as a schema upgrade is not needed at this time 
Former-commit-id: 6f97fef5748a3d630a73f790cca8baa4753e1d7a
 2015-07-09 07:07:10 -04:00
Jeremy Long
54094ebc21 removed unfinished JavaScriptAnalyzer 
Former-commit-id: 9d7d7e82da91cea21ea87b8d933093e738571ba2
 2015-07-09 06:37:29 -04:00
Jeremy Long
9daa9b6cca reorganized code, made the database file name version independent so that upgrades can be made, and implemented a CPE updates per issue #149 
Former-commit-id: fdb57afa28ecffdb7ca90971851844718ecb8bb9
 2015-07-08 06:20:19 -04:00
Dale Visser
c214b70459 OpenSSL: Analyzer unit test passes. 
Former-commit-id: 06d36762375a5fc55bc7f30a7857713ce332fceb
 2015-07-07 17:37:31 -04:00
Jeremy Long
44893a2a2c added CPE entries to patch issue #149 
Former-commit-id: 472d5456e6a8a9d569908ce8da4f64d05afa96c7
 2015-07-04 06:40:39 -04:00
Jeremy Long
aa66e5ab15 removed unused JUL properties file 
Former-commit-id: e02cb926d9c52fbd6f8e99dc612dea6707fac51a
 2015-06-22 05:54:18 -04:00
Jeremy Long
802e4fc238 changed default logging for tests to INFO 
Former-commit-id: 45b4dc2707e0a267d2ef41a84627c5fee5ba92f1
 2015-06-22 05:53:51 -04:00
Jeremy Long
13db27854b logback test configuration 
Former-commit-id: f7af8edab353b7900eb20f088707ad9c38d9330e
 2015-06-21 20:12:31 -04:00
Dale Visser
cc3a72f4fd AutoconfAnalyzer: Added 'configure' extension for analyzing Autoconf 
output configure scripts for the package metadata shell variables
generated by autoconf. Passing tests that look at metadata generated
in Readable's and Binutil's configure scripts.

Former-commit-id: d20bb17ccf4fde848dede4b87805241387e73f89
 2015-06-03 14:50:24 -04:00
Dale Visser
e960fd31fa AutoconfAnalyzer: Added unit test for Readable's configure.ac, which makes full usage of 
available AC_INIT parameters.

Former-commit-id: e545f3f85b70f15c1650528af9afd940984478a1
 2015-06-03 14:49:45 -04:00
Dale Visser
132fb87c2c Initial AutconfAnalyzer implementation, along with passing unit tests utilizing 
GNU Ghostscript's configure.ac.


Former-commit-id: 50f2c5bc8ba83f346471cde091b4cc46947ed246
 2015-06-03 14:39:49 -04:00
Dale Visser
511d2b9457 Added PythonPackageAnalyzer, for directly analyzing Python library, a.k.a., 
package, source code.


Former-commit-id: 3154ea4ecddd794cb3e7f3686972fd7a6cc2177c
 2015-04-14 10:37:38 -04:00
Dale Visser
bf96c24ec3 Added capability to scan Python egg distribution format (.egg and .zip). 
Changed copyright notices to IDA, and added as possible copyyright holder in
checkstyle-header file, and some whitespace fixes.


Former-commit-id: ac4288dff7c3c40e64dc733791c80035f73cc602
 2015-04-14 10:36:28 -04:00
Dale Visser
e328ec990c Added capability to scan extracted egg and wheel metadata in the local Python 
environment.


Former-commit-id: b0259d38134bf18b1eb72db9951dbe2d04ba8fb9
 2015-04-14 10:32:04 -04:00
Dale Visser
a5dee0cb27 Added PythonDistributionAnalyzer, including unit tests with test data, with 
capability to analyze the Python wheel distribution format. Using
javax.mail.internet.InternetHeaders to parse metadata files.


Former-commit-id: 478ab6be7b0f30f7991144039e33a6f69dd261ed
 2015-04-14 10:30:36 -04:00
Jeremy Long
9554a30286 added test dependency 
Former-commit-id: 424bb6900a580fd5fa1e58979e28329273a17199
 2015-04-06 19:59:56 -04:00
Jeremy Long
8772cda47a added property to resolve issue #82 
Former-commit-id: 711d6f538901aff6a9467fba460b62905dce75b4
 2014-12-06 10:20:46 -05:00
Jeremy Long
aa126039e5 updated NVD CVE URLs to use gzipped files 
Former-commit-id: 25c0c2e5df3a6626fae5401209fac93b105b3392
 2014-11-15 08:21:44 -05:00
Will Stranathan
b57ef7291f No more separate proxy configuration for Central search. Renamed everything to do with Solr to Central. 
Former-commit-id: 4bcee86abf4415bfafc386d10018d9fcb2f6cec4
 2014-11-09 21:07:26 -05:00
Will Stranathan
e5ff2cff4e Squashed commits for the new Solr/Central Search capability 
Former-commit-id: 28ca3ca0ff5de4e097082f6f73003c0a67455efd
 2014-11-08 10:54:02 -05:00
Will Stranathan
931110ba6c Initial checkin of work on a Solr analyzer which will replace Nexus on Internet checks 
Former-commit-id: 09337f6416fa3140c00413426e17e39c4a1fadc6
 2014-11-08 08:47:42 -05:00
Jeremy Long
894263809c added base flag to one suppression entry 
Former-commit-id: 7d6bbf36e5e35c2ee2fe8c901281996a34706036
 2014-09-13 05:39:38 -04:00
Jeremy Long
d9d646c5fb fixed connection string property 
Former-commit-id: 951cf212c80a52909cc2dd66e843b63b35991045
 2014-07-19 13:57:36 -04:00
Jeremy Long
f28b566992 added data.file_name and data.version 
Former-commit-id: e692a13a216ec6808e3fd92397fd3c50854cfa56
 2014-07-19 07:37:11 -04:00
Jeremy Long
46702bbb5c moved checkSumTest.file, checksum.java, and checksumTest.java to dependency-check-utils 
Former-commit-id: 0c05e466b5fe071ca55552660d471431572c0558
 2014-07-17 06:03:21 -04:00
Jeremy Long
d7e46b1693 corrected the connection string in the test properties 
Former-commit-id: 1c37d4bd4de49cddc34b92a27875e0a07eee600f
 2014-07-17 06:00:59 -04:00
Jeremy Long
cda0dfdafe updated test case and related data 
Former-commit-id: 513602f48b6d599b43848f0a88537190084e9cbf
 2014-05-03 12:30:29 -04:00
Jeremy Long
443ab02788 added local copies of the NVD CVE data to speed up some of the test cases 
Former-commit-id: 54a264872bf151034706f6ed52de3a99ed961b04
 2014-05-03 11:02:23 -04:00
Jeremy Long
f23da0dd5a updated connection string to use FILE_LOCK=SERIALIZED instead of AUTO_SERVER=TRUE 
Former-commit-id: 59bc2334093063d99c67bcef2c73690895ce9c72
 2014-04-09 06:40:25 -04:00
Will Stranathan
c930568df7 Switched default Nexus to SSL to fix 301 issues 
Former-commit-id: 231a5f20652fd83123f614881198edf675dd1105
 2014-03-24 19:59:13 -04:00
Jeremy Long
916243468f added a vulnerability suppression analyzer test case 
Former-commit-id: 415f214241e2ac6e882ea0291e6c11d991d4be8f
 2014-03-16 07:05:05 -04:00
Will Stranathan
9349e9cd99 Fixes issue 75 
Changed getConnection to public and made one which makes using the proxy optional, even if configured

Added a preflight request and proxy logic


Former-commit-id: 19fdfcf4edacacfa3724c8969c7da74a593f9a7c
 2014-02-26 22:19:13 -05:00
Jeremy Long
2f20bf1bee removed old cwe data file that is not used 
Former-commit-id: 9c5edd6f16d1d2b0a2af4ec23ecf7f1c0729c45a
 2014-02-14 22:21:28 -05:00
Jeremy Long
daaaed4118 Merge branch 'grokassembly-work' of https://github.com/colezlaw/DependencyCheck 
Former-commit-id: bfee1c77cc20c2fdd34a20a12696ad8009a86cd0
 2014-02-01 08:10:22 -05:00
Will Stranathan
09308083a9 Adding the AssemblyAnalyzer to analyze .NET assemblies 
Changed the author on a few files

Added GrokAssembly.exe for grokking assemblies

First revision of the assembly analyzer

Added ability to configure where mono is located


Former-commit-id: c0fa65ecb227f23c8432a5950403483be8b5de25
 2014-01-31 21:44:28 -05:00
Jeremy Long
efd4b8ec11 test cases for javascript analyzer 
Former-commit-id: 1660584330a7cfc79a1b9aa99a3bc727e7dba231
 2014-01-29 20:07:48 -05:00
Jeremy Long
0e28c8e0d5 test data for JavaScript Analyzer 
Former-commit-id: 16067187a5347cdee260b4137a40480eae5b04d6
 2014-01-28 05:25:54 -05:00
Jeremy Long
7a64b84c5f Merge branch 'nuspec' of https://github.com/colezlaw/DependencyCheck into colezlaw-nuspec 
Former-commit-id: e6405eaa708463b1182917ac46cff99a4e369034
 2014-01-27 06:12:15 -05:00
Will Stranathan
78f7152f6c Converted to XPath instead of SAX 
Former-commit-id: e6062e1b9497a7134b6923f7f85e1fe3f18cefcc
 2014-01-26 22:11:11 -05:00
Jeremy Long
98b0500c98 reduced number of years of NVD CVE data are downloaded during integration tests 
Former-commit-id: 714594eb3c9c26c2ec8967b22ddfa1fafa876ed9
 2014-01-26 07:03:17 -05:00
Jeremy Long
45e2215575 added the DRIVER_NAME to default to org.h2.Driver 
Former-commit-id: dcb8a65b35f0451a4f192b781d3c57046c20e06f
 2014-01-23 21:02:10 -05:00
Jeremy Long
96f7ca7598 enabled nexus analyzer in dev 
Former-commit-id: f67559ac62ee699082449f2c8a0ef91251f8dc7d
 2014-01-19 09:39:49 -05:00
Jeremy Long
5545d43417 added autocommit=on to H2 connection string 
Former-commit-id: 7c62f36c5636415c80ddabb0ba3896de753ccd95
 2014-01-15 13:18:32 -05:00
Jeremy Long
2e3f68bd2c added autocommit=on to H2 connection string 
Former-commit-id: 26903f3a375ff6223fb6c5db7117f8bfb84e3a92
 2014-01-15 13:16:05 -05:00
Will Stranathan
d58e2aa701 Checkin of the NexusAnalyzer and its tests 
Former-commit-id: d9c29602efeaf923feb941ec38c8fc704eb99c11
 2014-01-13 10:22:40 -05:00
Jeremy Long
41a31cdf4c fixed spelling errors 
Former-commit-id: 6c7d9240d7091204f09d37e405675dace1a2159e
 2014-01-11 19:55:21 -05:00
Jeremy Long
525933be99 added database connection properties 
Former-commit-id: 7abf08834cf366e7c998d33a9a05387192a1f24a
 2014-01-11 13:19:33 -05:00
Jeremy Long
8d840bfe0e added mysql connector 
Former-commit-id: 4a968876865087db300180712031dd8c78d24392
 2014-01-11 12:33:29 -05:00