github-mirrors/DependencyCheck
1
0
Fork 0
mirror of https://github.com/ysoftdevs/DependencyCheck.git synced 2026-01-18 09:37:38 +01:00
Code Issues Packages Projects Releases Wiki Activity
4,351 Commits 7 Branches 56 Tags
cd4f09dc86adfdbf6c19becc2af3dbe116cc568d
Commit Graph

1430 Commits

Author SHA1 Message Date
Jeremy Long
bee4d3a338 fixed bug that left false positive, previously fixed, due to the file name modifications that the archive analyzer makes - regex needed updating to not just look for the start of the filename 
Former-commit-id: 922a9edaf9123524585b97e6cb9f8efd4a389031
 2014-06-14 07:04:02 -04:00
Jeremy Long
0ffef12a8b deprecated the proxyUrl field replacing it with proxyServer; getter and setter for proxyUrl now just wrap proxyServer 
Former-commit-id: 5f1fbdf2eda6f05252f81dd8bf7acd44c01b7b6f
 2014-05-31 06:42:27 -04:00
Jeremy Long
d90d07c68b added code to disable the analyzer if initialization fails 
Former-commit-id: 202baa329f07fb24921ce83660d596d46b71b663
 2014-05-30 05:26:03 -04:00
Jeremy Long
ce292b84fa fixed spelling error in property name 
Former-commit-id: 106e8e9128bc371ff78f3a73c3f0da6012761cba
 2014-05-30 05:25:20 -04:00
Jeremy Long
01690860db renamed PROXY_URL to PROXY_SERVER to avoid confusion 
Former-commit-id: 1fbc025fba68aff644a8b8582657e5ef30024a24
 2014-05-24 07:06:59 -04:00
Jeremy Long
ce48823d38 Moved some of the utility classes from core to a new utils module 
Former-commit-id: 2e6ff9631ff4c843f10db1e022e41e728394e420
 2014-05-21 06:29:46 -04:00
Jeremy Long
d43fee5585 renamed CallableDownloadTask to DownloadTask 
Former-commit-id: 4ed8987945722d99e0f23b2f379321a652f76348
 2014-05-20 21:08:15 -04:00
Jeremy Long
235fcccbd7 if maven identifier already exists we now update it with a hyperlink instead of adding a new one - the Jar analyzer may add a maven identifier based on the pom.xml 
Former-commit-id: db0ae1145d000089fb10e0357566f03632a559b9
 2014-05-17 08:04:03 -04:00
Jeremy Long
91c971b8fd cleaned up pom evidence collection and added a maven identifier if the GAV is available from the pom.xml 
Former-commit-id: 0400863fea2cfe86a5601b3ae134e7e98a4b29c7
 2014-05-17 08:03:04 -04:00
Jeremy Long
e43003cadc fixed false positives related to Apache POI and MS Office CPE/CVE per issue #126 
Former-commit-id: cfde8d86cb339a9f2cf0b8c1f72f5ca198efab8a
 2014-05-14 19:17:47 -04:00
Jeremy Long
9a96165655 Update JarAnalyze to resolve issue #127 
Updated JarAnalyzer to resolve issue #127 - duplicate package and package name evidence in the report.

Former-commit-id: 067643f7e99a7a4f36438b18c07e92a5e8544089
 2014-05-14 18:01:12 -04:00
Jeremy Long
c7f31b3d79 fixed typo in log statement 
Former-commit-id: 08192210f3c5bb322160fba678a56acb36af3198
 2014-05-10 07:23:18 -04:00
Jeremy Long
98d0239d03 pmd correction to logger 
Former-commit-id: 3c3b26ec8fbf4d2602c681ff02f460fe7e712914
 2014-05-10 07:16:50 -04:00
Jeremy Long
ffeab147ce checkstyle corrections 
Former-commit-id: f9ae61d41ba01b6931892a339a9b701ae3c91ce2
 2014-05-10 07:13:07 -04:00
Jeremy Long
23b95178ff updated to remove archive files from the list of dependencies - additionally, if a zip file appears to be a jar it will now make a copy of the zip and scan it as a jar 
Former-commit-id: d927daea530abad2d578dbe0ff38b97d044b4775
 2014-05-10 07:00:43 -04:00
Jeremy Long
9bde80357f patch to remove additional false positives due to SCM entries in the pom 
Former-commit-id: 6101fae1b5957254ddbece5afc2db8edeb7bf9b8
 2014-05-10 06:59:34 -04:00
Jeremy Long
1485733715 updated to use displayFileName field instead of FileName when writing information about dependencies 
Former-commit-id: bd3383ac4831bc44db6b63083e47802cce04b520
 2014-05-10 06:58:51 -04:00
Jeremy Long
d125a7f09d added displayFileName field to the dependency class 
Former-commit-id: 248f5397d37ea6e2f333dc0fe357188865bdb446
 2014-05-10 06:57:44 -04:00
Jeremy Long
77486dffd4 removed additional false positives as part of patch for issue #93 and #119 
Former-commit-id: 86f48b30150f2ba4db99dfc2eb15a0ac50a6e383
 2014-05-10 06:56:53 -04:00
Jeremy Long
c84bcb433f fixed spelling error 
Former-commit-id: d3aed24d6691b58ef132e00f9827e27fceb9fc73
 2014-05-07 19:33:59 -04:00
Jeremy Long
f1e5221257 Merge pull request #122 from colezlaw/master 
Fixed logging order of GrokAssembly for bad assemblies. Using resources ...

Former-commit-id: 65a41d23df6ccfa8c4f05235da3d7c613e4290a0
 2014-05-07 19:31:59 -04:00
Jeremy Long
b8bf01acc3 added checks before warning that a file could not be deleted 
Former-commit-id: 098ea1889b49ade0c73385919906398c86627ab2
 2014-05-07 19:31:21 -04:00
Jeremy Long
65aa7bd1de fixed display bug when only one CPE exists for a given CVE 
Former-commit-id: 18535dc408a51e516626ec4c43a3e72b01fd28f0
 2014-05-07 19:30:45 -04:00
Jeremy Long
6f511444a7 fixed display bug when only one CPE exists for a given CVE 
Former-commit-id: 3b791d0a0fbe2587390e048cffc4453567ddf74a
 2014-05-07 19:29:52 -04:00
Jeremy Long
ef5174d89f fixed bug causing vulnerabilities to be missed 
Former-commit-id: 5c6421ea8475db16f7184340fa5b8b2033d53b29
 2014-05-07 07:05:37 -04:00
Jeremy Long
e2a97e75d8 moved duplicated code to a method 
Former-commit-id: f6cb80dc56ef86294f2490729bb84658d98e6c9a
 2014-05-07 07:03:38 -04:00
Jeremy Long
9fc6e265eb fixed off by one string truncation issue 
Former-commit-id: f25894627402e9e2d310b25163dae7d7db1457d9
 2014-05-07 07:03:02 -04:00
Will Stranathan
f81c42b1fd Fixed logging order of GrokAssembly for bad assemblies. Using resources for logging 
Former-commit-id: 611d665c7f5312462c19c8dcf8e87dc672184f67
 2014-05-03 19:12:39 -04:00
Jeremy Long
8594e146eb updates to help resolve issue 119 
Former-commit-id: c8778008b91b7999cb8d88382efe8a83ebe87102
 2014-05-03 14:46:48 -04:00
Jeremy Long
363568b02c updated to begin fixes for issue #90 and #119 
Former-commit-id: 1ceae6236ecd83e15f91ddab549027082e269e0b
 2014-05-03 12:30:07 -04:00
Jeremy Long
d383776245 added additional informational log statements 
Former-commit-id: 9dfe02f737cffc05838dcffeec1cfca77c3100e1
 2014-05-03 11:00:21 -04:00
Jeremy Long
51eba8da73 updated settings cleanup to prevent issue with the update process 
Former-commit-id: e883b7d37c583b581b41da368dbe9b8d1bafae89
 2014-05-03 10:59:47 -04:00
Jeremy Long
14b4d64244 updated the URL for the NVD CVE external link 
Former-commit-id: 18cd71abd7a1f0d94dde8dba2a3076b28405ab00
 2014-05-03 10:58:41 -04:00
Jeremy Long
7cb7f68cda updated the URL for the NVD CVE external link 
Former-commit-id: 83ad77fb9fe6029fdb95ba7ffc96663d88234631
 2014-05-03 10:58:16 -04:00
Jeremy Long
83300d028b updated the URL for the NVD CVE external link 
Former-commit-id: 7527c31dab810145d8aebc1225ba302aca9fc80e
 2014-05-03 10:57:44 -04:00
Jeremy Long
e58b7782ac updated settings cleanup to prevent issue with the update process 
Former-commit-id: 07122c535d47f3f414659013555fa826ce0e9b9c
 2014-05-03 10:55:15 -04:00
Jeremy Long
0edf017ddc patched for issue #120 - duplicate evidence listed in reports 
Former-commit-id: 3cdc1854af586029911b70fb4b8ff54669bac022
 2014-05-03 08:52:45 -04:00
Jeremy Long
9e0ed57cec checkstyle corrections... javadoc, final variables, etc. 
Former-commit-id: 87905c8a957efb5b57e1c142eda9e7c2e7312f78
 2014-04-27 17:16:49 -04:00
Jeremy Long
8f8c9c4582 updated to reduce exception messages during build when mono isn't available 
Former-commit-id: b6701c012669d3b5fc9e8b7cc168ac8d5df4d8f0
 2014-04-27 09:18:50 -04:00
Jeremy Long
9acfe3afdb Merge branch 'master' of github.com:jeremylong/DependencyCheck 
Former-commit-id: 45916cc4a0b3334ac9d0fe5d849032556db59f8e
 2014-04-27 08:51:31 -04:00
Jeremy Long
9c03962c26 Merge branch 'master' of github.com:bkimminich/DependencyCheck into bkimminich-master 
Former-commit-id: a25a71286aed7adb384e7efde40278006e67d847
 2014-04-27 08:50:59 -04:00
Jeremy Long
7f72ef88e0 removed code duplication ensuring temporary directory exists 
Former-commit-id: fba6dfcd3a133378c5f46f4126fa97c02ab110be
 2014-04-27 08:42:02 -04:00
Steve Springett
fa1adc5294 Cleaning up Velocity. Minor change to Engine and ServiceLoaders to optionally use custom ClassLoader. 
Former-commit-id: 8c1a58247faeaa032ca7389106378b095ac45edf
 2014-04-26 01:25:56 -05:00
Björn Kimminich
579b526196 organized imports 
extracted exception handling


Former-commit-id: 5fa0d46fc4241e8feae58e4f1e8fd365aedb27f5
 2014-04-25 14:39:56 +02:00
Björn Kimminich
654e6942cb attempt to locate suppressions in classpath when they cannot be found via URL or file path 
Former-commit-id: 03e7f14d9561940bb83a38faab926a5e45f2748b
 2014-04-25 14:33:15 +02:00
Jeremy Long
709840ca02 removed unused variable and inner assignment 
Former-commit-id: 24b669e885ae51c2812ed1b31d86241b0a13509d
 2014-04-22 08:14:30 -04:00
Jeremy Long
9fe596f3de checkstyle corrections 
Former-commit-id: 2f6fb660cd0152de284b55de3aab9cbb1b22b0b0
 2014-04-22 08:10:54 -04:00
Jeremy Long
9143564d41 merged update from Will 
Former-commit-id: ee4020e643221aa4ea403a6fb59314e65ab9e1b5
 2014-04-21 20:42:58 -04:00
Jeremy Long
55440ae32b Merge branch 'master' of github.com:jeremylong/DependencyCheck 
Former-commit-id: ddb7a60c533bf82e5f6faa9a5fbd794ca7dfaf5f
 2014-04-21 20:31:48 -04:00
Jeremy Long
db65c0b422 spelling corrections 
Former-commit-id: 35f1650765a5e8de33ef078a13b20bfa2994eb71
 2014-04-21 20:31:26 -04:00