c59615f452
patch for issue #510 and #512
2017-01-22 08:01:40 -05:00
847bed2fa0
added manifest implementation-version
2017-01-22 07:42:11 -05:00
a9af15f6f8
checkstyle/pmd suggested corrections
2017-01-21 08:47:52 -05:00
92519ae955
updated notes
2017-01-21 08:09:48 -05:00
2d90aca1f2
minor code cleanup
2017-01-21 08:05:54 -05:00
f29ed38c34
Merge pull request #644 from oosterholt/master
...
Add troubling JAR file name to the exception when JAR reading errors occur
2017-01-21 06:21:18 -05:00
df8d4fd77c
Minor change: When JAR reading errors occur, at least add the file name
...
to the exception. Without it, finding the troubling JAR is hard.
2017-01-18 13:52:17 +01:00
baa2e2c6ff
updated archetype for new analyzers to be more complete
2017-01-15 12:18:01 -05:00
9d5769bb69
Merge branch 'issue575'
2017-01-15 11:19:37 -05:00
4cdfa804ee
fixed accidental commit
2017-01-14 09:43:34 -05:00
523cd23b6b
filter version numbers for issue #575
2017-01-14 09:41:34 -05:00
61866e9e76
updated source version
2017-01-14 08:55:20 -05:00
ff7fbdc98d
updated year to speed test case
2017-01-14 07:34:35 -05:00
b625d642ea
updated documentation for #635
2017-01-14 07:31:31 -05:00
8733a85ebb
patch per issue#642
2017-01-13 06:53:26 -05:00
5ab5a7b72b
tuned linguist language stats
2017-01-09 20:05:37 -05:00
3cb8b9fa9e
Merge branch 'hgschmie-additional_analyzers'
2017-01-08 11:52:09 -05:00
429039bf1c
documentation for issue #635
2017-01-08 11:37:50 -05:00
29d28c3408
fixed PR #635 to cover other interfaces
2017-01-08 11:23:52 -05:00
372d484440
Merge branch 'additional_analyzers' of https://github.com/hgschmie/DependencyCheck into hgschmie-additional_analyzers
2017-01-08 10:33:57 -05:00
eac47800a3
added documentation for PR #636
2017-01-08 08:55:29 -05:00
86a85db12b
removed for now
2017-01-08 08:54:47 -05:00
4ab6cd278c
updated documentation for PR #636
2017-01-08 08:51:56 -05:00
233a068c8b
Merge pull request #636 from hgschmie/fail_on_any_vuln
...
adds a new flag 'failBuildOnAnyVulnerability'
2017-01-08 08:19:24 -05:00
d9f0ffa742
Merge pull request #634 from hgschmie/enable_disable
...
rework the enabled / disabled logic
2017-01-08 08:18:12 -05:00
8d63ee19ed
fix for Jenkins integration, updates to commit f47c6b0
2017-01-08 07:55:35 -05:00
1fb74e1a27
Merge pull request #639 from dejan2609/java-6-compatibility
...
check code against Java 1.6 API signatures
2017-01-07 06:40:47 -05:00
c94ab6108c
check code against Java 1.6 API signatures
2017-01-04 16:42:07 +01:00
bf285e19ab
added site for archetype
2017-01-02 21:59:09 -05:00
b1ceca73e4
added plugin archetype to site
2017-01-02 21:48:04 -05:00
f3aca63b61
version upgrades and added enforcer for java version
2017-01-02 21:47:27 -05:00
fca107d287
added site distribution
2017-01-02 21:46:15 -05:00
64b6964fff
checkstyle corrections
2017-01-02 21:45:49 -05:00
6af0842838
added logging
2017-01-02 21:45:21 -05:00
4c49adf1ba
reduced code duplication
2017-01-02 21:44:59 -05:00
5f4e4fab56
reduced code duplication
2017-01-02 21:43:51 -05:00
146d7e3fbf
reduced code duplciation
2017-01-02 21:42:20 -05:00
4d22800747
fixed type
2017-01-02 21:40:57 -05:00
541a7f8180
removed unused code
2017-01-02 21:40:04 -05:00
f205cf79c9
Merge branch 'plugins'
2016-12-30 17:02:32 -05:00
d8bb6488b7
added archetype per #612
2016-12-30 17:01:09 -05:00
4324563c0a
updated plugins path for #612
2016-12-30 16:42:37 -05:00
bad03660b1
added plugins directory per #612
2016-12-29 07:38:11 -05:00
20b1ff38f9
adds a new flag 'failBuildOnAnyVulnerability'
...
In our build system, we enable checkers based on boolean
values. Currently, the only way to enable failing the build on
vulnerabilities is by providing a numeric value (0-10) for another
property. This change adds a boolean switch that will fail the build
if any vulnerability is present (we have a strict "no vulnerabilities
in our builds" policy).
2016-12-28 17:24:26 -08:00
def78a3cfd
rework the enabled / disabled logic
...
If an analyzer is disabled from the configuration, it should not be
initialized (because some of the may actually fail during that process
nor should the engine log in any way that those exist.
With these changes, it is possible for me to turn off unwanted
analyzers (e.g. Ruby analyzers for a java project) from the maven
plugin and not confuse my users with spurious misleading messages.
2016-12-28 16:39:25 -08:00
a41158a716
adds maven configuration switches for more analyzers
2016-12-28 16:38:28 -08:00
63ad13ff7a
added enabled properties per issue #612
2016-12-27 08:46:04 -05:00
dd92ec675f
fixed error in tests
2016-12-27 08:45:42 -05:00
6e1512f7d9
added enabled setting ( #612 ) and added additional checks to see if the update should occur ( #631 )
2016-12-27 08:45:01 -05:00
287b1df3fd
added enabled settings for all analyzers per #612
2016-12-26 09:11:26 -05:00
Jeremy Long