124 Commits

Author SHA1 Message Date
Jeremy Long
638b3c0695 checkstyle correction
Former-commit-id: 01f643ad33e0475d2c2daaa5076ec604952df8d6
2015-02-28 06:46:10 -05:00
Jeremy Long
01ef2e1061 checkstyle corrections
Former-commit-id: b821a8b9a680c875a3013099a362b0277d97119f
2015-02-26 09:15:28 -05:00
Jeremy Long
d530eddc57 final commit to patch issue #185
Former-commit-id: 1e77bec21239a0ea228795df7bfa5678d9930d6c
2015-02-26 08:47:07 -05:00
Jeremy Long
9c15bdfe41 Merge branch 'master' of https://github.com/jeremylong/DependencyCheck
Former-commit-id: 7a189b5240ff2c831c6d6f42555148f5f00586bd
2015-02-22 10:24:59 -05:00
Jeremy Long
64dedf892d work in progress
Former-commit-id: 74f303b69fa5af225b75d6643aed60e66a4cf081
2015-02-22 10:24:45 -05:00
Jeremy Long
d6fc456039 work in progress
Former-commit-id: 0ff4b90e22accc5adb1d91735fe4979838fdc651
2015-02-22 10:23:31 -05:00
Hans Joachim Desserud
cf677bd70e Prefer checking isEmpty over size() > 0. Plus fix some typos
Former-commit-id: 754f300c0b120c0c9098c17c19dbd11aa7a39844
2015-02-22 11:42:14 +01:00
Jeremy Long
ebf995537e added project references
Former-commit-id: e6e63edce05c2985fd20b544839a033f5f050d20
2015-02-12 20:47:55 -05:00
Jeremy Long
49edb6c2e1 nop
Former-commit-id: 90c0ace35561abff762037b4388f5aedd6adfa4f
2015-02-08 19:28:29 -05:00
Jeremy Long
bef0657801 fixed unit test
Former-commit-id: 7bd2d15b7ae30f5a84f2ef4ce62bf893fb7c03e4
2015-02-08 07:49:56 -05:00
Jeremy Long
d79d5b5f33 added project references as part of patch for issue #185
Former-commit-id: 3146c47f89031eaf09e513b6eb757bcc98ee9edf
2015-02-08 07:17:16 -05:00
Jeremy Long
d5753b9589 updated to address issue #193
Former-commit-id: 8361c2fdbec4191e52db16b870406e3e45d97d0d
2015-02-07 18:16:07 -05:00
Jeremy Long
88924ea520 changed where the flag is set to only update once in a multi-module project (from issue #168) to resolve issue #191
Former-commit-id: 56b8342ffeead397b2c9554c36bf360cb4c2b7fe
2015-01-21 19:27:13 -05:00
Jeremy Long
5078e32dc7 updated the documentation showing the aggregate goal instead of the aggregate property
Former-commit-id: 81e2b937c98ec3e87a53ed0573885359ff448c2a
2014-12-28 09:14:39 -05:00
Jeremy Long
ecaadff0d8 added documentation regarding disabling the central analyzer and that the aggregate property has been replaced by the aggregate goal
Former-commit-id: 01d67e8ceeae8ab6c0bec54a694cf39d6688a0b7
2014-12-28 09:13:35 -05:00
Jeremy Long
f2ad8cc7d1 added the ability to disable the Central Analyzer (issue #175)
Former-commit-id: e56475fdf3dc94ea60b7acf8badd6a23197881d5
2014-12-28 09:12:22 -05:00
Jeremy Long
c478415667 initial version
Former-commit-id: cf662ed17ec8b525dcef9826021c3a3be92a0c47
2014-12-28 06:46:39 -05:00
Jeremy Long
fc832b67c5 made BaseTest public
Former-commit-id: d18c65e8485e0c32e15a3b399ffb5f9a3618fb9a
2014-12-28 06:44:08 -05:00
Jeremy Long
4deeb33f08 added JavaDoc to resetFileTypeAnalzyers()
Former-commit-id: 7feb30ff1750684d60d69a01c76733df0d32b62c
2014-12-27 06:57:21 -05:00
Jeremy Long
3bf4cf8c85 corrected logging statements
Former-commit-id: 55ebf05bbf831c8e87ca8f5b9b74d18e1cfa252c
2014-12-27 06:55:21 -05:00
Jeremy Long
62a3efa23a Corrected duplicate code identified by CPD
Former-commit-id: 223a20b4a61a69a6dd0714e1683633dd73eb4302
2014-12-27 06:52:14 -05:00
Jeremy Long
cc7ebe6d52 removed old, unused test cases
Former-commit-id: 57e354d428df6eeed595afddc08359d72bef3067
2014-12-27 06:44:17 -05:00
Jeremy Long
5d920e4b44 added BaseTest to initialize the Settings for tests in the maven-plugin
Former-commit-id: 7da3f4712abcbebf157c8d26174cf0fe2f19f12b
2014-12-27 06:44:03 -05:00
Jeremy Long
1264ea54a1 moved setup to a base test that can be used in other test classes later
Former-commit-id: fe87e1ce9e9230e628bb5b8e90b0c2e85acd8245
2014-12-27 06:42:58 -05:00
Jeremy Long
20a55b3342 added test case
Former-commit-id: 4b24fb1a31b103c56c51f99d1c6e1aaa05c73a4b
2014-12-26 07:11:30 -05:00
Jeremy Long
8bfe67fc60 additional error handling, checkstyle corrections, and added resetFileTypeAnalyzers to enable reuse of the engine as part of resolution to issue #173
Former-commit-id: b964d2fd30a5520abb732a6768b9e89ba3978749
2014-12-26 07:10:22 -05:00
Jeremy Long
d42a1c6ab1 added a scan artifacts method to enable scanning of a MavenProject as part of resolution for issue #173
Former-commit-id: 7db9d35d2b0327ed678502bd8ad3c9050613eefb
2014-12-26 07:09:11 -05:00
Jeremy Long
80a89ef6d1 additional changes to resolve issue #173
Former-commit-id: 30edb64043b45c028aea77ec172d1ed127672a45
2014-12-26 07:07:27 -05:00
Jeremy Long
dfaa5df965 re-enabled summary and fail build on CVSS scores
Former-commit-id: f4568c46bfd2933aebf3e8bfe270749846fc4c01
2014-12-24 08:34:05 -05:00
Jeremy Long
32055ecdcc updated error message
Former-commit-id: 1dff15f05f6380565b2df230093bccbeb4cbbe25
2014-12-24 08:07:07 -05:00
Jeremy Long
9db71c5f0c replaced with new classes
Former-commit-id: 2b09e2533af5748b2ff41b551482bef8e012e2fe
2014-12-24 07:59:25 -05:00
Jeremy Long
99856bf285 cleaned up maven report aggregration by removing the aggregate configuration and creating an aggregate goal
Former-commit-id: bba05b6052a2b2347b055884ffdf678d7ed8f17f
2014-12-24 07:58:53 -05:00
Jeremy Long
4d006b3e05 updated to resolve class loading issues with CPEAnalyzer and updated to use execution root instead of root parent project to store context flags
Former-commit-id: 948ce11556e157e3d127be8f04cc2e4abfba2712
2014-12-24 07:47:22 -05:00
Jeremy Long
38a5834785 added type checking for CPEAnalyzer to avoid exceptions
Former-commit-id: 6f407c839f4c2f74900f46901f4a8452abe83e06
2014-12-17 11:25:16 -05:00
Jeremy Long
bf1b7bd7a2 added logging statements
Former-commit-id: 399ad8e258b88b32eecf9082b62bc27c4387c64a
2014-12-17 11:16:13 -05:00
Jeremy Long
2306327057 added logging
Former-commit-id: ab39408750a77fb70d05b7115bf6c6ace4f7ff52
2014-12-17 11:15:32 -05:00
Jeremy Long
4555b02592 checkstyle, findbugs, and pmd corrections
Former-commit-id: 85573816e82855343af1d41576ffc2479e8595ed
2014-12-06 13:16:06 -05:00
Jeremy Long
3b90d1a564 updates to ensure that the logger is initialized correctly
Former-commit-id: c468df5c8dbd16edefae8e65ac28eed394c1fa87
2014-12-03 15:54:03 -05:00
Jeremy Long
d724855dfc minor updates and addition of JavaDoc
Former-commit-id: ac465b9c252dec453f8528b7e466bd61f8d7adb4
2014-12-03 15:53:22 -05:00
Jeremy Long
aa0d7cb4e9 added initialize method to resolve issue with initializing the logger
Former-commit-id: 9123f1243375c4443e6617db1de69bbcceaf1130
2014-12-03 05:56:33 -05:00
Jeremy Long
0cd43ce35c updates to reduce load times in multi-module projects per issue #168
Former-commit-id: adfaaaddffffa9b078d6b78a1ac031e6d8343f21
2014-12-02 06:43:54 -05:00
Jeremy Long
ac98c8e395 corrected the order of operations so that report aggregation can include the last module
Former-commit-id: 4169dedceee6f35c5357ee9841e94123acec575d
2014-12-01 06:51:57 -05:00
Jeremy Long
c3bf6aa3f8 updated documentation to reflect change with NexusAnalyzer
Former-commit-id: 6a16bb3fc9f45a77d030d4d0f9999b764fd6fa12
2014-11-09 20:07:22 -05:00
Jeremy Long
d2fa14bbe2 updated documentation to reflect change with NexusAnalyzer
Former-commit-id: bbe1286d3ff9e4886b2eb52fe0ff04962922dd06
2014-11-09 20:06:32 -05:00
Jeremy Long
89c63e6d87 checkstyle corrections
Former-commit-id: 77b519236f1afe7ad8eab0407d055e7f9ab4745f
2014-11-05 21:52:52 -05:00
Jeremy Long
2081407e38 added pom evidence to dependency - yes, this moves some analysis to the plugin; but in this case that is okay and will allow future enhancements
Former-commit-id: f69fd0701a8db1ab729199c4090dee1cd023d114
2014-10-25 08:09:45 -04:00
Erik Hooijmeijer
f9e4ca0cc2 corrected javadoc
Former-commit-id: 3e0533a8a36afcacb647610f352bfd854e505272
2014-10-22 19:10:54 +02:00
Erik Hooijmeijer
5caf023677 added excludeInternalGroupIds configuration parameter that allows the exclusion of groupIds of internal projects. This is to speed up analysis as internal projects have no public vulnerabilites nor a sonatype listing but do frequently have names that collide with other libraries. The parameter can have multiple values, e.g. <excludeInternalGroupIds><groupId>nl.someinteral.project</groupId><groupId>org.another.one</groupId></excludeInternalGroupIds>
Former-commit-id: ffa0716366c6c7b65d1181f2bd945472b75b5483
2014-10-22 19:08:33 +02:00
Erik Hooijmeijer
35c2f4873c values from the project pom.xml are now taken into account as well
Former-commit-id: ca6c5b40f09959f162b337f2cb4268a57ce46d3d
2014-10-21 20:09:54 +02:00
Jeremy Long
c503935d6a updated to correctly close the ObjectOutputStream based on guidance from the CERT Java Secure Coding Standard
Former-commit-id: 1c7b929055f273d49b1203c117d7bb12162cfdb2
2014-09-12 06:36:00 -04:00