Jeremy Long
bed04150e1
reverted H2 upgrade due to issues with Jenkins and Java 6 compatability
2016-07-27 06:23:56 -04:00
Jeremy Long
7cf040653f
upgraded h2 db version
2016-07-22 06:29:01 -04:00
Jeremy Long
6d5d5ceb7b
Updated exception handling so that issue #215 can be resolved
2016-07-14 06:31:54 -04:00
Jeremy Long
cead88d221
reworked initialization exceptions as part of planned resolution for issue #215
2016-07-09 07:39:00 -04:00
Jeremy Long
b3d9ea3c47
minor code reorg
2016-07-07 06:18:54 -04:00
Jeremy Long
d264d804c8
patches and test case update for issue #522
2016-07-05 09:09:58 -04:00
Jeremy Long
8272da615e
improved test cases to debug issue #522
2016-07-04 08:43:43 -04:00
Jeremy Long
857b993d51
ensured analyzers were correctly initialized and closed
2016-07-04 07:55:53 -04:00
Jeremy Long
a71edf584e
additional testing added
2016-07-04 07:55:19 -04:00
Jeremy Long
5e3da035dd
resolved merge conflict with #525
2016-07-04 07:11:45 -04:00
Jeremy Long
ebb52995a5
converted hint analyzer to use an externalized configuration file to simplify the resolution of issue #522
2016-07-04 07:10:07 -04:00
Jeremy Long
519b82c620
minor cleanup of code/comments
2016-07-04 07:07:07 -04:00
Hans Joachim Desserud
f5f5857897
Add missing @Overrides
2016-07-02 16:23:24 +02:00
Hans Joachim Desserud
1c400b410e
Remove unused imports
2016-07-02 16:23:16 +02:00
Jeremy Long
c20892ee3e
removed stack traces from build
2016-06-27 08:46:46 -04:00
Jeremy Long
d0a7d9eb42
added test for issue #454 to ensure fully executable jar
2016-06-26 07:32:10 -04:00
Jeremy Long
cf97c89fe0
fully exectuable jar for testing resolution for issue #454
2016-06-26 07:30:39 -04:00
Michal Srb
a2309e1c2e
Correctly apply weightings when searching for CPEs
2016-06-14 21:34:04 +02:00
Jeremy Long
b01ae2c6d3
updated to speed-up the unit test
2016-06-05 17:16:43 -04:00
Jeremy Long
f6b80630dd
temporary travis debugging code
2016-06-05 08:30:22 -04:00
Jeremy Long
f43589589d
fixed setup to call super
2016-06-05 08:04:45 -04:00
Jeremy Long
310ca967a1
fixed compareTo in order to resolve issue #503
2016-06-05 06:32:49 -04:00
Jeremy Long
c4b423cb0f
additional tests resources to fix issue #503
2016-06-05 06:32:11 -04:00
Jens Hausherr
f3d3a25856
Add more test cases
2016-06-03 09:50:28 +02:00
Jens Hausherr
ae5a766092
Limit split to fix #503
2016-05-27 15:07:59 +02:00
Jeremy Long
7d83362a85
removed stack trace from build when ruby and bundle-audit are not installed
2016-05-15 07:49:17 -04:00
Jeremy Long
71ef8061f9
merge conflict resolved
2016-05-15 07:29:17 -04:00
Jeremy Long
353b17690f
checkstyle/pmd/findbugs correction(s)
2016-05-15 07:22:52 -04:00
Jeremy Long
ea942398e3
updated test case to use the correct parent class that allows for use of the database during testing
2016-05-15 06:45:57 -04:00
Jeremy Long
6f451736ba
Add ability to flag analyzers as experimental so that they are not always enabled
2016-05-14 07:20:53 -04:00
bjiang
d5e8f54214
fix RubyBundlerAnalyzer.accept
2016-05-06 17:55:21 -04:00
bjiang
83f83d4eee
add RubyBundlerAnalyzerTest
2016-05-06 17:45:40 -04:00
bjiang
b0f4ab9ba5
cleanup & Rakefile support placeholder
2016-05-06 17:25:08 -04:00
bjiang
83ab122ddf
disable RubyBundlerAnalyzer if RubyBundleAuditAnalyzer
2016-05-06 16:42:39 -04:00
bjiang
189da08885
merge upstream
2016-05-03 13:05:56 -04:00
Jeremy Long
4de9818bee
original CVE used in test does not exist in the current default DB used for tests.
2016-05-01 20:16:30 -04:00
Jeremy Long
84b992d3a1
Merge branch 'fix-cvss-for-bundle-audit' of git://github.com/geramirez/DependencyCheck into geramirez-fix-cvss-for-bundle-audit
2016-04-30 11:02:16 -04:00
Jeremy Long
9e46364759
updated test cases to track down build issue
2016-04-30 10:56:50 -04:00
Dave Goddard
0f37c2b59c
Adding sinatra fixture
...
Signed-off-by: Gabriel Ramirez <gabriel.e.ramirez@gmail.com >
2016-04-29 16:17:51 -04:00
David Jahn
8c6b9f9c68
Fixed CVSS for Ruby.
...
this bug was discovered when scanning ruby applications and getting back
`-1` cvss. this turns out to be a problem with bundle-audit cve
database.
Our solution was to use the NVD database, which dependency check uses to
get the CVSS scores for Ruby only if the Criticality is missing from
bundle-audit output. Keep in mind there are compilation errors with the
commit atm.
Fixes #485
Signed-off-by: Gabriel Ramirez <gabriel.e.ramirez@gmail.com >
2016-04-25 09:40:54 -04:00
Jeremy Long
abebecac4a
updated parser and tests to revert to old suppression schema if new schema fails
2016-04-24 09:06:00 -04:00
Jeremy Long
deda02f879
updated suppression schema to require a CPE, CVE, or CVSS Below per issue #488
2016-04-24 07:20:11 -04:00
bjiang
da82f975e4
Add test for project url from pom.xml
2016-04-15 12:30:14 -04:00
bjiang
ab48d2c2ff
multiple improvements
2016-03-28 14:06:30 -04:00
bjiang
a22fc550b3
#472 fix test to only skip the proper test case.
2016-03-21 11:38:52 -04:00
bjiang
343a78917c
Fixed #472 . Disable RubyBundleAuditAnalyzer if exception during initialize.
...
changes:
1. disable self during initialize before bubbling exception
2. new test case RubyBundleAuditAnalyzerTest#testMissingBundleAudit()
2016-03-20 17:06:03 -04:00
bjiang
ff7d0fdb9d
#472 first fix and improve RubyBundleAuditAnalyzerTest.java
...
Test were failing b/c Gemfile.lock and Gemfile were missing.
The files were missing b/c parent .gitignore them.
Changes:
1. Force added new test files, and updated test with more result
validation.
2. Added error logging from bundle-audit.
3. place holder for bundle-audit install directory in test
dependencycheck.properties.
2016-03-20 15:54:24 -04:00
Jeremy Long
cdc07047aa
doclint fixes
2016-03-05 13:18:37 -05:00
Jeremy Long
c832c2da28
doclint fixes
2016-03-05 13:18:37 -05:00
Jeremy Long
8daa713639
doclint fixes
2016-03-05 13:18:36 -05:00
