176 Commits

Author SHA1 Message Date
Jeremy Long
cc2953d6a3 version 1.2.8
Former-commit-id: 8c68d365e0dd05957ad26273a635dbb2c6a8871a
2014-12-28 09:26:14 -05:00
Jeremy Long
5078e32dc7 updated the documentation showing the aggregate goal instead of the aggregate property
Former-commit-id: 81e2b937c98ec3e87a53ed0573885359ff448c2a
2014-12-28 09:14:39 -05:00
Jeremy Long
ecaadff0d8 added documentation regarding disabling the central analyzer and that the aggregate property has been replaced by the aggregate goal
Former-commit-id: 01d67e8ceeae8ab6c0bec54a694cf39d6688a0b7
2014-12-28 09:13:35 -05:00
Jeremy Long
f2ad8cc7d1 added the ability to disable the Central Analyzer (issue #175)
Former-commit-id: e56475fdf3dc94ea60b7acf8badd6a23197881d5
2014-12-28 09:12:22 -05:00
Jeremy Long
c478415667 initial version
Former-commit-id: cf662ed17ec8b525dcef9826021c3a3be92a0c47
2014-12-28 06:46:39 -05:00
Jeremy Long
fc832b67c5 made BaseTest public
Former-commit-id: d18c65e8485e0c32e15a3b399ffb5f9a3618fb9a
2014-12-28 06:44:08 -05:00
Jeremy Long
4deeb33f08 added JavaDoc to resetFileTypeAnalzyers()
Former-commit-id: 7feb30ff1750684d60d69a01c76733df0d32b62c
2014-12-27 06:57:21 -05:00
Jeremy Long
3bf4cf8c85 corrected logging statements
Former-commit-id: 55ebf05bbf831c8e87ca8f5b9b74d18e1cfa252c
2014-12-27 06:55:21 -05:00
Jeremy Long
62a3efa23a Corrected duplicate code identified by CPD
Former-commit-id: 223a20b4a61a69a6dd0714e1683633dd73eb4302
2014-12-27 06:52:14 -05:00
Jeremy Long
cc7ebe6d52 removed old, unused test cases
Former-commit-id: 57e354d428df6eeed595afddc08359d72bef3067
2014-12-27 06:44:17 -05:00
Jeremy Long
5d920e4b44 added BaseTest to initialize the Settings for tests in the maven-plugin
Former-commit-id: 7da3f4712abcbebf157c8d26174cf0fe2f19f12b
2014-12-27 06:44:03 -05:00
Jeremy Long
1264ea54a1 moved setup to a base test that can be used in other test classes later
Former-commit-id: fe87e1ce9e9230e628bb5b8e90b0c2e85acd8245
2014-12-27 06:42:58 -05:00
Jeremy Long
20a55b3342 added test case
Former-commit-id: 4b24fb1a31b103c56c51f99d1c6e1aaa05c73a4b
2014-12-26 07:11:30 -05:00
Jeremy Long
8bfe67fc60 additional error handling, checkstyle corrections, and added resetFileTypeAnalyzers to enable reuse of the engine as part of resolution to issue #173
Former-commit-id: b964d2fd30a5520abb732a6768b9e89ba3978749
2014-12-26 07:10:22 -05:00
Jeremy Long
d42a1c6ab1 added a scan artifacts method to enable scanning of a MavenProject as part of resolution for issue #173
Former-commit-id: 7db9d35d2b0327ed678502bd8ad3c9050613eefb
2014-12-26 07:09:11 -05:00
Jeremy Long
80a89ef6d1 additional changes to resolve issue #173
Former-commit-id: 30edb64043b45c028aea77ec172d1ed127672a45
2014-12-26 07:07:27 -05:00
Jeremy Long
1a0e605f0c added jmockit for testing
Former-commit-id: 5fe09b31551fac79670505f709c0b0783431d8a8
2014-12-26 07:06:38 -05:00
Jeremy Long
dfaa5df965 re-enabled summary and fail build on CVSS scores
Former-commit-id: f4568c46bfd2933aebf3e8bfe270749846fc4c01
2014-12-24 08:34:05 -05:00
Jeremy Long
32055ecdcc updated error message
Former-commit-id: 1dff15f05f6380565b2df230093bccbeb4cbbe25
2014-12-24 08:07:07 -05:00
Jeremy Long
9db71c5f0c replaced with new classes
Former-commit-id: 2b09e2533af5748b2ff41b551482bef8e012e2fe
2014-12-24 07:59:25 -05:00
Jeremy Long
99856bf285 cleaned up maven report aggregration by removing the aggregate configuration and creating an aggregate goal
Former-commit-id: bba05b6052a2b2347b055884ffdf678d7ed8f17f
2014-12-24 07:58:53 -05:00
Jeremy Long
4d006b3e05 updated to resolve class loading issues with CPEAnalyzer and updated to use execution root instead of root parent project to store context flags
Former-commit-id: 948ce11556e157e3d127be8f04cc2e4abfba2712
2014-12-24 07:47:22 -05:00
Jeremy Long
38a5834785 added type checking for CPEAnalyzer to avoid exceptions
Former-commit-id: 6f407c839f4c2f74900f46901f4a8452abe83e06
2014-12-17 11:25:16 -05:00
Jeremy Long
bf1b7bd7a2 added logging statements
Former-commit-id: 399ad8e258b88b32eecf9082b62bc27c4387c64a
2014-12-17 11:16:13 -05:00
Jeremy Long
2306327057 added logging
Former-commit-id: ab39408750a77fb70d05b7115bf6c6ace4f7ff52
2014-12-17 11:15:32 -05:00
Jeremy Long
2d389ba73f updated to version 1.2.8-SNAPSHOT
Former-commit-id: d8c12eae66b9fa54188ebde2da3323a132a4d9d2
2014-12-09 06:38:26 -05:00
Jeremy Long
aff52ee3f5 version 1.2.7
Former-commit-id: 9e666f3f6e65b67e7e144e6fc9ac75a3754c3ebb
2014-12-07 10:13:30 -05:00
Jeremy Long
4555b02592 checkstyle, findbugs, and pmd corrections
Former-commit-id: 85573816e82855343af1d41576ffc2479e8595ed
2014-12-06 13:16:06 -05:00
Jeremy Long
3b90d1a564 updates to ensure that the logger is initialized correctly
Former-commit-id: c468df5c8dbd16edefae8e65ac28eed394c1fa87
2014-12-03 15:54:03 -05:00
Jeremy Long
d724855dfc minor updates and addition of JavaDoc
Former-commit-id: ac465b9c252dec453f8528b7e466bd61f8d7adb4
2014-12-03 15:53:22 -05:00
Jeremy Long
aa0d7cb4e9 added initialize method to resolve issue with initializing the logger
Former-commit-id: 9123f1243375c4443e6617db1de69bbcceaf1130
2014-12-03 05:56:33 -05:00
Jeremy Long
0cd43ce35c updates to reduce load times in multi-module projects per issue #168
Former-commit-id: adfaaaddffffa9b078d6b78a1ac031e6d8343f21
2014-12-02 06:43:54 -05:00
Jeremy Long
ac98c8e395 corrected the order of operations so that report aggregation can include the last module
Former-commit-id: 4169dedceee6f35c5357ee9841e94123acec575d
2014-12-01 06:51:57 -05:00
Jeremy Long
d12ba8f3ef version 1.2.7-SNAPSHOT
Former-commit-id: 8721c2c03a5ecb7f81ebaab4febefda2ff968991
2014-11-16 12:45:51 -05:00
Jeremy Long
f333ef76d9 version 1.2.6
Former-commit-id: d32ff0d840fc1d1a3153da73158adc125a589efc
2014-11-16 09:44:11 -05:00
Jeremy Long
c3bf6aa3f8 updated documentation to reflect change with NexusAnalyzer
Former-commit-id: 6a16bb3fc9f45a77d030d4d0f9999b764fd6fa12
2014-11-09 20:07:22 -05:00
Jeremy Long
d2fa14bbe2 updated documentation to reflect change with NexusAnalyzer
Former-commit-id: bbe1286d3ff9e4886b2eb52fe0ff04962922dd06
2014-11-09 20:06:32 -05:00
Jeremy Long
89c63e6d87 checkstyle corrections
Former-commit-id: 77b519236f1afe7ad8eab0407d055e7f9ab4745f
2014-11-05 21:52:52 -05:00
Jeremy Long
2081407e38 added pom evidence to dependency - yes, this moves some analysis to the plugin; but in this case that is okay and will allow future enhancements
Former-commit-id: f69fd0701a8db1ab729199c4090dee1cd023d114
2014-10-25 08:09:45 -04:00
Erik Hooijmeijer
f9e4ca0cc2 corrected javadoc
Former-commit-id: 3e0533a8a36afcacb647610f352bfd854e505272
2014-10-22 19:10:54 +02:00
Erik Hooijmeijer
5caf023677 added excludeInternalGroupIds configuration parameter that allows the exclusion of groupIds of internal projects. This is to speed up analysis as internal projects have no public vulnerabilites nor a sonatype listing but do frequently have names that collide with other libraries. The parameter can have multiple values, e.g. <excludeInternalGroupIds><groupId>nl.someinteral.project</groupId><groupId>org.another.one</groupId></excludeInternalGroupIds>
Former-commit-id: ffa0716366c6c7b65d1181f2bd945472b75b5483
2014-10-22 19:08:33 +02:00
Erik Hooijmeijer
35c2f4873c values from the project pom.xml are now taken into account as well
Former-commit-id: ca6c5b40f09959f162b337f2cb4268a57ce46d3d
2014-10-21 20:09:54 +02:00
Jeremy Long
42519ac843 version 1.2.6-SNAPSHOT
Former-commit-id: 0b301bfa4a942e43976a34195a32982000f34d12
2014-10-14 06:28:14 -04:00
Jeremy Long
92bd305b00 version 1.2.5
Former-commit-id: b3fe4ea80c4286684eda15a3b9f46cebc4f09ee8
2014-09-16 19:47:17 -04:00
Jeremy Long
c503935d6a updated to correctly close the ObjectOutputStream based on guidance from the CERT Java Secure Coding Standard
Former-commit-id: 1c7b929055f273d49b1203c117d7bb12162cfdb2
2014-09-12 06:36:00 -04:00
Jeremy Long
e72e2c6a02 corrected documention error with the reporting sets
Former-commit-id: ab503e5a710a69624a3216edea880e614b003ba8
2014-09-01 08:19:46 -04:00
Jeremy Long
08d001ee05 checkstyle corrections
Former-commit-id: ecc262c75890ef4c8760cb41e7948cb6decdf5d5
2014-09-01 08:13:53 -04:00
Jeremy Long
99d8a07f4a updated documentation as part of resolution for issue #144
Former-commit-id: f47171e52e22e75c582bed47c9d0e9df3945e148
2014-09-01 08:13:34 -04:00
Jeremy Long
eef565134b update to correct issue #79 - the internal report format is no longer supported
Former-commit-id: 4dc9a83008a75d97f3838aa1a41f1d93eb39f2de
2014-09-01 07:39:54 -04:00
Jeremy Long
fc0a556e5f checkstyle and findbugs corrections
Former-commit-id: 2bf90876b7c88bccb93135a0be43f01e49c3cd30
2014-08-30 15:51:24 -04:00