github-mirrors/odc-analyzer
1
0
Fork 0
mirror of https://github.com/ysoftdevs/odc-analyzer.git synced 2026-03-20 00:04:59 +01:00
Code Issues 2 Packages Projects Releases Wiki Activity

Added support for scanning transitive dependencies for .NET libraries (except those with unlimited set of supported TMFs).

Browse Source
This commit is contained in:
Šesták Vít
2018-03-07 13:59:43 +01:00
parent d87535df84
commit dcc109a729
8 changed files with 229 additions and 89 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
app/com/ysoft/odc/OdcParser.scala
View File

@@ -67,6 +67,7 @@ abstract sealed class AbstractDependency{
def license: String
def vulnerabilities: Seq[Vulnerability]
def suppressedVulnerabilities: Seq[Vulnerability]
def hashes = Hashes(sha1 = sha1, md5 = md5)
}
final case class Dependency(
@@ -85,7 +86,9 @@ final case class Dependency(
isVirtual: Boolean
) extends AbstractDependency {
def hashes = Hashes(sha1 = sha1, md5 = md5)
def relatedSameDependencies: Seq[RelatedDependency] = relatedDependencies.filter(_.hashes == hashes)
def filePaths: Seq[String] = Seq(filePath) ++ relatedSameDependencies.map(_.filePath)
def plainLibraryIdentifiers: Set[PlainLibraryIdentifier] = identifiers.flatMap(_.toLibraryIdentifierOption).toSet
@@ -116,6 +119,7 @@ final case class RelatedDependency(
* @param dependencies
*/
final case class GroupedDependency(dependencies: Map[Dependency, Set[ReportInfo]]) {
def paths: Set[String] = dependencies.keySet.flatMap(dependency => dependency.filePaths)
def parsedDescriptions: Seq[Seq[Seq[String]]] = descriptions.toSeq.sorted.map(_.trim.split("\n\n").filterNot(_=="").toSeq.map(_.split("\n").toSeq))
def isVulnerable: Boolean = vulnerabilities.nonEmpty
def maxCvssScore = (Seq(None) ++ vulnerabilities.map(_.cvssScore)).max