Erik Hooijmeijer
|
5caf023677
|
added excludeInternalGroupIds configuration parameter that allows the exclusion of groupIds of internal projects. This is to speed up analysis as internal projects have no public vulnerabilites nor a sonatype listing but do frequently have names that collide with other libraries. The parameter can have multiple values, e.g. <excludeInternalGroupIds><groupId>nl.someinteral.project</groupId><groupId>org.another.one</groupId></excludeInternalGroupIds>
Former-commit-id: ffa0716366c6c7b65d1181f2bd945472b75b5483
|
2014-10-22 19:08:33 +02:00 |
|
Erik Hooijmeijer
|
35c2f4873c
|
values from the project pom.xml are now taken into account as well
Former-commit-id: ca6c5b40f09959f162b337f2cb4268a57ce46d3d
|
2014-10-21 20:09:54 +02:00 |
|
Jeremy Long
|
c503935d6a
|
updated to correctly close the ObjectOutputStream based on guidance from the CERT Java Secure Coding Standard
Former-commit-id: 1c7b929055f273d49b1203c117d7bb12162cfdb2
|
2014-09-12 06:36:00 -04:00 |
|
Jeremy Long
|
e72e2c6a02
|
corrected documention error with the reporting sets
Former-commit-id: ab503e5a710a69624a3216edea880e614b003ba8
|
2014-09-01 08:19:46 -04:00 |
|
Jeremy Long
|
08d001ee05
|
checkstyle corrections
Former-commit-id: ecc262c75890ef4c8760cb41e7948cb6decdf5d5
|
2014-09-01 08:13:53 -04:00 |
|
Jeremy Long
|
99d8a07f4a
|
updated documentation as part of resolution for issue #144
Former-commit-id: f47171e52e22e75c582bed47c9d0e9df3945e148
|
2014-09-01 08:13:34 -04:00 |
|
Jeremy Long
|
eef565134b
|
update to correct issue #79 - the internal report format is no longer supported
Former-commit-id: 4dc9a83008a75d97f3838aa1a41f1d93eb39f2de
|
2014-09-01 07:39:54 -04:00 |
|
Jeremy Long
|
fc0a556e5f
|
checkstyle and findbugs corrections
Former-commit-id: 2bf90876b7c88bccb93135a0be43f01e49c3cd30
|
2014-08-30 15:51:24 -04:00 |
|
Jeremy Long
|
b6b070584f
|
checkstyle corrections, added javadoc, etc.
Former-commit-id: 2b806cb8527a627d400644465bcf9f04d687d729
|
2014-08-30 15:19:52 -04:00 |
|
Jeremy Long
|
e13225eee6
|
initial version of aggreation completed for issue #19 - some cleanup still needs to happen before final release
Former-commit-id: 98c9af3004e2c725d0dca5d6847b65a4646c6a73
|
2014-08-30 07:50:27 -04:00 |
|
Jeremy Long
|
f1cc44dead
|
removed the externalReport option
Former-commit-id: 4cc3ec2638140f8320eb8946d2154dae330786b0
|
2014-08-29 05:38:40 -04:00 |
|
Jeremy Long
|
ae4cc543f6
|
corrected outputFile name to correctly use the target directory from project.getBuild().getDirectory()
Former-commit-id: 7ef2ca45e502e945e7356f9c63845eb4e7b532fc
|
2014-08-16 07:30:34 -04:00 |
|
Jeremy Long
|
abdb3d17f9
|
added initial plumbing to support report aggregation per issue #19 - report aggregation is still not complete
Former-commit-id: df248d0c1a7f3628653717029f034a46afde742b
|
2014-08-16 07:29:35 -04:00 |
|
Jeremy Long
|
78fab728e4
|
added an additional generate method
Former-commit-id: 44b78b525da45918f3b4bc77b368f88e49361c95
|
2014-08-15 06:22:54 -04:00 |
|
Jeremy Long
|
52097a6867
|
initial version of the ReportAggregationMojo
Former-commit-id: e15575413d625c6b5c5f3d73f5a739e1890eec27
|
2014-08-15 06:02:04 -04:00 |
|
Jeremy Long
|
cb990b55b5
|
added the apache 2.0 license to the header
Former-commit-id: f7d5558f565abe9c3e1a04f79666137e4f67e017
|
2014-08-15 06:00:30 -04:00 |
|
Jeremy Long
|
5070fe303a
|
added the configuration value mavenSettingsProxyId to inform users that if you have multiple proxies defined in settings.xml you can choose which one should be used
Former-commit-id: 20fa4a92d446fd30a882e07c37897907fb1638b1
|
2014-08-15 05:59:39 -04:00 |
|
Jeremy Long
|
15858d03ff
|
moved reporting functions from the core maven plugin to a utility class
Former-commit-id: d63d2a7a5031038b9f86bbe94fc4a198374bd9f3
|
2014-08-08 14:44:26 -04:00 |
|
Jeremy Long
|
814a733258
|
moved reporting functions from the core maven plugin to a utility class
Former-commit-id: 0d8507b8534320189ea5f36d0fc1cac7d0843c0f
|
2014-08-08 14:43:00 -04:00 |
|
Jeremy Long
|
3ce85d8ca9
|
rework of report generation and added fix for proxy (patch for proxy was from Erik Wramner) to close issue #136
Former-commit-id: afc81123b31189618ade397b830bf421db2918f8
|
2014-08-08 14:42:23 -04:00 |
|
Jeremy Long
|
a417db7c7a
|
updated documentation to replace deprecated proxyUrl with proxyServer
Former-commit-id: 165e14fcb6b57d8a522875eaa65f5ee766c9b1af
|
2014-05-31 06:43:07 -04:00 |
|
Jeremy Long
|
f85014a86d
|
deprecated proxyUrl and replaced it with proxyServer - using the deprecated configuration will still work but will generate a warning
Former-commit-id: d9ff32d6b6e2f4d088f95d52ee33f1d0df3457fd
|
2014-05-31 06:38:50 -04:00 |
|
Jeremy Long
|
01690860db
|
renamed PROXY_URL to PROXY_SERVER to avoid confusion
Former-commit-id: 1fbc025fba68aff644a8b8582657e5ef30024a24
|
2014-05-24 07:06:59 -04:00 |
|
Jeremy Long
|
e58b7782ac
|
updated settings cleanup to prevent issue with the update process
Former-commit-id: 07122c535d47f3f414659013555fa826ce0e9b9c
|
2014-05-03 10:55:15 -04:00 |
|
Jeremy Long
|
0edf017ddc
|
patched for issue #120 - duplicate evidence listed in reports
Former-commit-id: 3cdc1854af586029911b70fb4b8ff54669bac022
|
2014-05-03 08:52:45 -04:00 |
|
Jeremy Long
|
f2b908c859
|
checkstyle corrections
Former-commit-id: 8833f928a384474df1dd5b306e835ec8919a572a
|
2014-04-22 09:01:53 -04:00 |
|
Jeremy Long
|
d07947f712
|
spelling corrections
Former-commit-id: 6b3c1ae8e8150cca82449f5e5b4448a9a829e680
|
2014-04-21 21:01:10 -04:00 |
|
Jeremy Long
|
70022088fb
|
spelling corrections
Former-commit-id: 43b77de6e21a4d586f7b66b6da0045572c097f42
|
2014-04-21 20:59:18 -04:00 |
|
Jeremy Long
|
291a8c2bfb
|
Merge branch 'master' of github.com:bkimminich/DependencyCheck into bkimminich-master
Former-commit-id: 4b8d77255bef86d4cb4243eefd80eedadf5ca8f7
|
2014-04-19 08:22:47 -04:00 |
|
Björn Kimminich
|
c4fcb6c88c
|
fixed documentation of suppressionFile parameter
Former-commit-id: 937974c6952f8ba4d90ece584c46ada635da1d50
|
2014-04-17 11:17:17 +02:00 |
|
Björn Kimminich
|
2390b20e68
|
extracted logger as field
Former-commit-id: 3a9819dcd526191bb7156d2012c248bb7914cf29
|
2014-04-16 16:35:40 +02:00 |
|
Jeremy Long
|
139640e768
|
updated to support the new Settings implementation
Former-commit-id: 4731df058a88b10661ea70addb082aced7590e80
|
2014-04-16 07:55:56 -04:00 |
|
Jeremy Long
|
83b713a781
|
updated documentation for PR #98
Former-commit-id: 2121e1d535939646b3c7ce9b9b485c00f5b4bef8
|
2014-03-24 23:55:36 -04:00 |
|
Jeremy Long
|
dfdf690575
|
added configuration settings to the interfaces to support disabling of specific analyzers per issue #86
Former-commit-id: ce5fe7e4340a4df6f0a59a78acee6429a10ba01b
|
2014-03-23 23:08:03 -04:00 |
|
Jeremy Long
|
173947fd7d
|
updated documentation
Former-commit-id: b2036f354cc3d16db7e01bef9aad6aa494650fd2
|
2014-03-23 23:03:51 -04:00 |
|
Jeremy Long
|
4592ab4bf5
|
updated to resolve issue #87
Former-commit-id: 03c12742bbd99b980c605d78b3d25fb1f89ab3cd
|
2014-03-15 07:46:29 -04:00 |
|
Jeremy Long
|
a00bcc3df2
|
patch from davidkarlsen (PR #85) was applied to resolve issue #84
Former-commit-id: ac2f1c66913d08ae2e39293e98a3e7e5b9318b50
|
2014-03-12 23:40:42 -04:00 |
|
Jeremy Long
|
998aedde33
|
added the path to mono as a configurable setting
Former-commit-id: e0b0e5eed59f36060c4ad57052fe3e610ff2d637
|
2014-03-08 05:42:32 -05:00 |
|
Jeremy Long
|
9d609b6085
|
added configuration for whether or not the nexus analyzer should use the configured proxy
Former-commit-id: 99f3110346941ebc00c14ae1c00220eef76c1e9f
|
2014-03-02 18:16:12 -05:00 |
|
Jeremy Long
|
ef97f9c088
|
checkstyle fix
Former-commit-id: 1968682a460b5b294553f375ea191bcf6a45072b
|
2014-03-02 12:27:26 -05:00 |
|
Jeremy Long
|
73edd3bc40
|
made a broad catch even broader
Former-commit-id: 2308606f9459ad25f4b81179f2d93768c5afa35d
|
2014-03-01 06:46:16 -05:00 |
|
Jeremy Long
|
1f408dd7a7
|
ensured engine.cleanup() is now being called
Former-commit-id: 99afdd8d82d6dce65d8dd3ac23893070b318c082
|
2014-02-22 16:46:59 -05:00 |
|
Jeremy Long
|
ae76a7f7d4
|
updates to resolve issue #71 - added configuration for cve urls
Former-commit-id: 5b1ce45649cdefc92c694cea54cedd18fa30b005
|
2014-02-15 07:50:00 -05:00 |
|
Henri Gomez
|
c095118e98
|
Skipped Scope parametized
Former-commit-id: 7a0807b77afef6a3db24af30ca98b770b44bea04
|
2014-02-14 12:14:06 +01:00 |
|
Jeremy Long
|
2f8c2b05bd
|
fixes for issue #63 and issue #65
Former-commit-id: 6b5f22ffe706cf8aafa36fc8a118e7119c7f0cdf
|
2014-02-13 20:20:19 -05:00 |
|
Henri Gomez
|
a5b9a707a4
|
Add support for extra extensions provided externally
Former-commit-id: 6c8632566de0a46ff4ce24ef5285bbd84c8ef89f
|
2014-02-11 14:05:26 +01:00 |
|
Henri Gomez
|
1b013db312
|
No need to redefined Test Scope String
Former-commit-id: 1da78b9b9994d055b38f1f5aeebb6fb67a1fb756
|
2014-02-11 12:54:26 +01:00 |
|
Henri Gomez
|
158250e98d
|
Artifact with scope Provided and Runtime should be excluded too
Former-commit-id: 53e086b5bf02eee8cb4c4f3703a61923608c13dd
|
2014-02-11 12:51:59 +01:00 |
|
Jeremy Long
|
7fca2a9cc6
|
removed analysisExceptions from the dependency object, instead we are logging the exception for issue #46
Former-commit-id: feee45a009165fce559d3bad2e9c45f95f230200
|
2014-02-08 12:35:53 -05:00 |
|
Jeremy Long
|
3b5b832bbc
|
update to make failure more verbose for issue #57
Former-commit-id: 7315afe74cc78c65254e5f12032ece0a461be751
|
2014-02-08 12:09:58 -05:00 |
|