Jeremy Long
233a068c8b
Merge pull request #636 from hgschmie/fail_on_any_vuln
...
adds a new flag 'failBuildOnAnyVulnerability'
2017-01-08 08:19:24 -05:00
Jeremy Long
541a7f8180
removed unused code
2017-01-02 21:40:04 -05:00
Henning Schmiedehausen
20b1ff38f9
adds a new flag 'failBuildOnAnyVulnerability'
...
In our build system, we enable checkers based on boolean
values. Currently, the only way to enable failing the build on
vulnerabilities is by providing a numeric value (0-10) for another
property. This change adds a boolean switch that will fail the build
if any vulnerability is present (we have a strict "no vulnerabilities
in our builds" policy).
2016-12-28 17:24:26 -08:00
Jeremy Long
38bf9b4ddb
checkstyle recommendations
2016-12-22 07:32:04 -05:00
Jeremy Long
1dbc183567
added check for failure
2016-12-22 06:52:47 -05:00
Jeremy Long
bf258146da
added test case for issue #629 and #517
2016-12-18 12:14:35 -05:00
Jeremy Long
d91b4c3151
updated test case for performance of build
2016-12-18 12:12:10 -05:00
Jeremy Long
bfa67fcba7
fix #617
2016-12-03 13:46:25 -05:00
Jeremy Long
37a556dcc0
add integration test
2016-12-03 07:06:01 -05:00
Jeremy Long
4978f9dcba
Merge branch 'MavenMojosPurgeAndUpdateOnlyAggregator' of https://github.com/axel3rd/DependencyCheck into axel3rd-MavenMojosPurgeAndUpdateOnlyAggregator
2016-11-22 19:57:27 -05:00
Jeremy Long
85ab894b94
fixed the possible creation of two indexes
2016-11-20 06:49:28 -05:00
Alix Lourme
ddbca24f33
Maven mojos 'purge' & 'update-only' aggregator #618
2016-11-19 00:32:10 +01:00
Jeremy Long
e70a0ee238
corrected how project references are propogated when the same dependency is analyzed more then once
2016-10-21 07:06:47 -04:00
bloihl
13a9dedb1e
Merge remote-tracking branch 'upstream/master'
2016-10-09 12:54:12 -07:00
bloihl
b37698f245
syncing references to false negatives in documentation
2016-10-09 12:52:44 -07:00
Jeremy Long
446239a5bd
clearly document Maven 3.1 or higher is required
2016-10-09 15:39:02 -04:00
Jeremy Long
6017e5c217
Merge branch 'master' of https://github.com/bloihl/DependencyCheck into bloihl-master
2016-10-09 06:56:17 -04:00
Stefan Neuhaus
d9c4480627
Fix typos
2016-10-08 19:40:04 +02:00
bloihl
92a8b4ca85
Merge remote-tracking branch 'upstream/master'
2016-10-03 11:12:01 -07:00
Jeremy Long
99a1606df1
stopped writting the serialized dc data
2016-09-21 14:05:19 -04:00
bloihl
8b705b3370
update maven docs with hintsFile option
2016-09-20 15:41:26 -07:00
bloihl
0ca6bc6ab6
exposing hints to maven through configuration using hintsFile
2016-09-20 12:42:35 -07:00
Jeremy Long
5960ba919d
removed slf4j binding as maven 3.1 no longer requires it, see issue #552
2016-09-16 12:32:24 -04:00
Jeremy Long
659785f972
checkstyle correction
2016-08-21 15:28:55 -04:00
Jeremy Long
85c04f6e3e
checkstyle correction
2016-08-21 15:28:49 -04:00
Jeremy Long
cedd93e774
coverity suggested corrections
2016-08-21 14:40:07 -04:00
Jeremy Long
4861592d2a
assume no NPE due to issue with mock and some versions of the JDK
2016-08-21 07:25:37 -04:00
Jeremy Long
4f6f248421
reworked aggregation mojo to resolve issues #325 , #386 , and #531
2016-08-20 12:15:49 -04:00
Jeremy Long
71e7412f15
corrected example
2016-07-31 07:32:30 -04:00
Jeremy Long
c253308284
checkstyle corrections
2016-07-23 07:45:48 -04:00
Jeremy Long
c5757dc5f4
updates to resolve issue #215
2016-07-17 07:19:56 -04:00
Jeremy Long
6d5d5ceb7b
Updated exception handling so that issue #215 can be resolved
2016-07-14 06:31:54 -04:00
Jeremy Long
73f22d32d2
fixed typo
2016-06-22 06:34:50 -04:00
Jeremy Long
8324287bd6
updated proxy configuration information
2016-06-15 06:50:45 -04:00
Jeremy Long
6be161a546
updated experimental documentation
2016-06-15 06:19:06 -04:00
Jeremy Long
8680ecd033
updated documentation for experimental analyzers
2016-06-08 06:40:07 -04:00
Jeremy Long
cd5f9e2f13
findbugs correction
2016-06-04 07:42:58 -04:00
Jeremy Long
3c525d8e3a
fixed issue #505
2016-06-02 19:30:38 -04:00
Jeremy Long
353b17690f
checkstyle/pmd/findbugs correction(s)
2016-05-15 07:22:52 -04:00
Jeremy Long
6f451736ba
Add ability to flag analyzers as experimental so that they are not always enabled
2016-05-14 07:20:53 -04:00
Anthony Whitford
1e8d2aff75
Added code to avoid an unchecked cast warning.
2016-04-16 11:08:13 -07:00
Anthony Whitford
bc0a0f9902
Added missing serialVersionUID.
2016-04-16 11:07:19 -07:00
Jeremy Long
84d1f08fda
updated documentation for NVD urls to match what is hosted by NIST
2016-03-21 07:58:02 -04:00
Jeremy Long
e51031c62a
fix bug in getLastProject for non-site executions
2016-03-06 17:28:40 -05:00
Jeremy Long
22e0d1c74e
doclint fixes
2016-03-05 13:18:37 -05:00
Jeremy Long
8b58df3b34
checkstyle/pmd/findbugs corrections
2016-03-05 07:07:53 -05:00
Jeremy Long
7860d635a9
ensured deserialization is secure
2016-03-04 17:38:48 -05:00
Jeremy Long
f630794e22
added warning about site:stage with regards to the aggregate goal
2016-02-24 17:00:31 -05:00
Jeremy Long
585002c25c
resolution for issue #386 fixed the conditional so that execution occured on the last non-skipped project in the reactor
2016-02-23 20:42:10 -05:00
Christian Galsterer
d023b2b2ff
[i444] Support nonProxyHosts parameter in settings.xml
2016-02-06 16:13:01 +01:00