Commit Graph

413 Commits

Author SHA1 Message Date
Jeremy Long
8bfe67fc60 additional error handling, checkstyle corrections, and added resetFileTypeAnalyzers to enable reuse of the engine as part of resolution to issue #173
Former-commit-id: b964d2fd30a5520abb732a6768b9e89ba3978749
2014-12-26 07:10:22 -05:00
Jeremy Long
d42a1c6ab1 added a scan artifacts method to enable scanning of a MavenProject as part of resolution for issue #173
Former-commit-id: 7db9d35d2b0327ed678502bd8ad3c9050613eefb
2014-12-26 07:09:11 -05:00
Jeremy Long
80a89ef6d1 additional changes to resolve issue #173
Former-commit-id: 30edb64043b45c028aea77ec172d1ed127672a45
2014-12-26 07:07:27 -05:00
Jeremy Long
1a0e605f0c added jmockit for testing
Former-commit-id: 5fe09b31551fac79670505f709c0b0783431d8a8
2014-12-26 07:06:38 -05:00
Jeremy Long
dfaa5df965 re-enabled summary and fail build on CVSS scores
Former-commit-id: f4568c46bfd2933aebf3e8bfe270749846fc4c01
2014-12-24 08:34:05 -05:00
Jeremy Long
32055ecdcc updated error message
Former-commit-id: 1dff15f05f6380565b2df230093bccbeb4cbbe25
2014-12-24 08:07:07 -05:00
Jeremy Long
9db71c5f0c replaced with new classes
Former-commit-id: 2b09e2533af5748b2ff41b551482bef8e012e2fe
2014-12-24 07:59:25 -05:00
Jeremy Long
99856bf285 cleaned up maven report aggregration by removing the aggregate configuration and creating an aggregate goal
Former-commit-id: bba05b6052a2b2347b055884ffdf678d7ed8f17f
2014-12-24 07:58:53 -05:00
Jeremy Long
4d006b3e05 updated to resolve class loading issues with CPEAnalyzer and updated to use execution root instead of root parent project to store context flags
Former-commit-id: 948ce11556e157e3d127be8f04cc2e4abfba2712
2014-12-24 07:47:22 -05:00
Jeremy Long
38a5834785 added type checking for CPEAnalyzer to avoid exceptions
Former-commit-id: 6f407c839f4c2f74900f46901f4a8452abe83e06
2014-12-17 11:25:16 -05:00
Jeremy Long
bf1b7bd7a2 added logging statements
Former-commit-id: 399ad8e258b88b32eecf9082b62bc27c4387c64a
2014-12-17 11:16:13 -05:00
Jeremy Long
2306327057 added logging
Former-commit-id: ab39408750a77fb70d05b7115bf6c6ace4f7ff52
2014-12-17 11:15:32 -05:00
Jeremy Long
2d389ba73f updated to version 1.2.8-SNAPSHOT
Former-commit-id: d8c12eae66b9fa54188ebde2da3323a132a4d9d2
2014-12-09 06:38:26 -05:00
Jeremy Long
aff52ee3f5 version 1.2.7
Former-commit-id: 9e666f3f6e65b67e7e144e6fc9ac75a3754c3ebb
2014-12-07 10:13:30 -05:00
Jeremy Long
4555b02592 checkstyle, findbugs, and pmd corrections
Former-commit-id: 85573816e82855343af1d41576ffc2479e8595ed
2014-12-06 13:16:06 -05:00
Jeremy Long
3b90d1a564 updates to ensure that the logger is initialized correctly
Former-commit-id: c468df5c8dbd16edefae8e65ac28eed394c1fa87
2014-12-03 15:54:03 -05:00
Jeremy Long
d724855dfc minor updates and addition of JavaDoc
Former-commit-id: ac465b9c252dec453f8528b7e466bd61f8d7adb4
2014-12-03 15:53:22 -05:00
Jeremy Long
aa0d7cb4e9 added initialize method to resolve issue with initializing the logger
Former-commit-id: 9123f1243375c4443e6617db1de69bbcceaf1130
2014-12-03 05:56:33 -05:00
Jeremy Long
0cd43ce35c updates to reduce load times in multi-module projects per issue #168
Former-commit-id: adfaaaddffffa9b078d6b78a1ac031e6d8343f21
2014-12-02 06:43:54 -05:00
Jeremy Long
ac98c8e395 corrected the order of operations so that report aggregation can include the last module
Former-commit-id: 4169dedceee6f35c5357ee9841e94123acec575d
2014-12-01 06:51:57 -05:00
Jeremy Long
d12ba8f3ef version 1.2.7-SNAPSHOT
Former-commit-id: 8721c2c03a5ecb7f81ebaab4febefda2ff968991
2014-11-16 12:45:51 -05:00
Jeremy Long
f333ef76d9 version 1.2.6
Former-commit-id: d32ff0d840fc1d1a3153da73158adc125a589efc
2014-11-16 09:44:11 -05:00
Jeremy Long
c3bf6aa3f8 updated documentation to reflect change with NexusAnalyzer
Former-commit-id: 6a16bb3fc9f45a77d030d4d0f9999b764fd6fa12
2014-11-09 20:07:22 -05:00
Jeremy Long
d2fa14bbe2 updated documentation to reflect change with NexusAnalyzer
Former-commit-id: bbe1286d3ff9e4886b2eb52fe0ff04962922dd06
2014-11-09 20:06:32 -05:00
Jeremy Long
89c63e6d87 checkstyle corrections
Former-commit-id: 77b519236f1afe7ad8eab0407d055e7f9ab4745f
2014-11-05 21:52:52 -05:00
Jeremy Long
2081407e38 added pom evidence to dependency - yes, this moves some analysis to the plugin; but in this case that is okay and will allow future enhancements
Former-commit-id: f69fd0701a8db1ab729199c4090dee1cd023d114
2014-10-25 08:09:45 -04:00
Erik Hooijmeijer
f9e4ca0cc2 corrected javadoc
Former-commit-id: 3e0533a8a36afcacb647610f352bfd854e505272
2014-10-22 19:10:54 +02:00
Erik Hooijmeijer
5caf023677 added excludeInternalGroupIds configuration parameter that allows the exclusion of groupIds of internal projects. This is to speed up analysis as internal projects have no public vulnerabilites nor a sonatype listing but do frequently have names that collide with other libraries. The parameter can have multiple values, e.g. <excludeInternalGroupIds><groupId>nl.someinteral.project</groupId><groupId>org.another.one</groupId></excludeInternalGroupIds>
Former-commit-id: ffa0716366c6c7b65d1181f2bd945472b75b5483
2014-10-22 19:08:33 +02:00
Erik Hooijmeijer
35c2f4873c values from the project pom.xml are now taken into account as well
Former-commit-id: ca6c5b40f09959f162b337f2cb4268a57ce46d3d
2014-10-21 20:09:54 +02:00
Jeremy Long
42519ac843 version 1.2.6-SNAPSHOT
Former-commit-id: 0b301bfa4a942e43976a34195a32982000f34d12
2014-10-14 06:28:14 -04:00
Jeremy Long
92bd305b00 version 1.2.5
Former-commit-id: b3fe4ea80c4286684eda15a3b9f46cebc4f09ee8
2014-09-16 19:47:17 -04:00
Jeremy Long
c503935d6a updated to correctly close the ObjectOutputStream based on guidance from the CERT Java Secure Coding Standard
Former-commit-id: 1c7b929055f273d49b1203c117d7bb12162cfdb2
2014-09-12 06:36:00 -04:00
Jeremy Long
e72e2c6a02 corrected documention error with the reporting sets
Former-commit-id: ab503e5a710a69624a3216edea880e614b003ba8
2014-09-01 08:19:46 -04:00
Jeremy Long
08d001ee05 checkstyle corrections
Former-commit-id: ecc262c75890ef4c8760cb41e7948cb6decdf5d5
2014-09-01 08:13:53 -04:00
Jeremy Long
99d8a07f4a updated documentation as part of resolution for issue #144
Former-commit-id: f47171e52e22e75c582bed47c9d0e9df3945e148
2014-09-01 08:13:34 -04:00
Jeremy Long
eef565134b update to correct issue #79 - the internal report format is no longer supported
Former-commit-id: 4dc9a83008a75d97f3838aa1a41f1d93eb39f2de
2014-09-01 07:39:54 -04:00
Jeremy Long
fc0a556e5f checkstyle and findbugs corrections
Former-commit-id: 2bf90876b7c88bccb93135a0be43f01e49c3cd30
2014-08-30 15:51:24 -04:00
Jeremy Long
b6b070584f checkstyle corrections, added javadoc, etc.
Former-commit-id: 2b806cb8527a627d400644465bcf9f04d687d729
2014-08-30 15:19:52 -04:00
Jeremy Long
e13225eee6 initial version of aggreation completed for issue #19 - some cleanup still needs to happen before final release
Former-commit-id: 98c9af3004e2c725d0dca5d6847b65a4646c6a73
2014-08-30 07:50:27 -04:00
Jeremy Long
f1cc44dead removed the externalReport option
Former-commit-id: 4cc3ec2638140f8320eb8946d2154dae330786b0
2014-08-29 05:38:40 -04:00
Jeremy Long
ae4cc543f6 corrected outputFile name to correctly use the target directory from project.getBuild().getDirectory()
Former-commit-id: 7ef2ca45e502e945e7356f9c63845eb4e7b532fc
2014-08-16 07:30:34 -04:00
Jeremy Long
abdb3d17f9 added initial plumbing to support report aggregation per issue #19 - report aggregation is still not complete
Former-commit-id: df248d0c1a7f3628653717029f034a46afde742b
2014-08-16 07:29:35 -04:00
Jeremy Long
78fab728e4 added an additional generate method
Former-commit-id: 44b78b525da45918f3b4bc77b368f88e49361c95
2014-08-15 06:22:54 -04:00
Jeremy Long
52097a6867 initial version of the ReportAggregationMojo
Former-commit-id: e15575413d625c6b5c5f3d73f5a739e1890eec27
2014-08-15 06:02:04 -04:00
Jeremy Long
cb990b55b5 added the apache 2.0 license to the header
Former-commit-id: f7d5558f565abe9c3e1a04f79666137e4f67e017
2014-08-15 06:00:30 -04:00
Jeremy Long
5070fe303a added the configuration value mavenSettingsProxyId to inform users that if you have multiple proxies defined in settings.xml you can choose which one should be used
Former-commit-id: 20fa4a92d446fd30a882e07c37897907fb1638b1
2014-08-15 05:59:39 -04:00
Jeremy Long
15858d03ff moved reporting functions from the core maven plugin to a utility class
Former-commit-id: d63d2a7a5031038b9f86bbe94fc4a198374bd9f3
2014-08-08 14:44:26 -04:00
Jeremy Long
814a733258 moved reporting functions from the core maven plugin to a utility class
Former-commit-id: 0d8507b8534320189ea5f36d0fc1cac7d0843c0f
2014-08-08 14:43:00 -04:00
Jeremy Long
3ce85d8ca9 rework of report generation and added fix for proxy (patch for proxy was from Erik Wramner) to close issue #136
Former-commit-id: afc81123b31189618ade397b830bf421db2918f8
2014-08-08 14:42:23 -04:00
Jeremy Long
d3bff2f39d version 1.2.5-SNAPSHOT
Former-commit-id: 85ed1238022348f1e9496ffe3c95d4ff8e3d09c3
2014-08-05 18:55:30 -04:00