Commit Graph

125 Commits

Author SHA1 Message Date
Šesták Vít 8095deae70 Fixed handling of slightly diverging dependencies (e.g., different filename) when comparing scans. It used to be considered as two separate dependencies. This caused such dependencies to appear in both added and removed dependencies. 2018-02-05 10:36:47 +01:00
Šesták Vít d57b9aeb97 Added support for installed plugins in Maven scans. 2017-12-20 15:06:12 +01:00
Šesták Vít 5f9546934e When comparing, also list vulnerable dependencies 2017-12-08 17:08:59 +01:00
Šesták Vít 644bd3b539 Give more information when comparing commits. 2017-12-08 15:58:08 +01:00
Šesták Vít 9343619ca9 Initial support for virtual dependencies.
Well, they will probably not work anyway, because they don't have hashes. But at this point, at least the parser does not crash at isVirtual="false"
2017-12-08 12:20:07 +01:00
Šesták Vít 39ba123efc Added support for comparison of scans 2017-12-08 10:18:25 +01:00
Šesták Vít 2e21f78105 Added search for newer NuGet 2017-11-15 16:28:31 +01:00
Šesták Vít 0735ef5dd2 Added a minor comment 2017-11-15 16:28:02 +01:00
Šesták Vít 53890026b4 Removed unneeded library 2017-10-16 16:56:57 +02:00
Šesták Vít 65232504cb Updated confidence highlighting 2017-10-16 09:24:55 +02:00
Šesták Vít 2a95b07b54 Added more fail safety for vulnerability export.
This should affect all exports when a vulnerability disappears.
2017-10-11 16:54:40 +02:00
Šesták Vít cdb31dcc4e Failsafe behavior for e-mail notifications.
If the vulnerability is not found, it now does its best for providing relevant information. Even if no additional information (other than vulnerability identifier) can be provided, it does not cause an exception when sending e-mail. Which is the main point of this improvement.
2017-10-11 15:48:20 +02:00
Šesták Vít 8688ffd730 Added identifier confidence 2017-10-09 15:46:23 +02:00
Šesták Vít 1097e77d1c Preffer CPE identifiers 2017-10-09 15:01:04 +02:00
Šesták Vít e43cee7743 E-mail export: More descriptive error message when some vulnerability is missing 2017-10-06 11:05:57 +02:00
Šesták Vít 876086ce3f Fixed issue with newlines in JIRA export 2017-10-06 10:06:53 +02:00
Šesták Vít 629b42d943 Added throttling to JIRA in order to make it more server friendly 2017-09-11 23:48:38 +02:00
Šesták Vít a155188fec Fixed affected projects not appearing in some views 2017-08-02 09:55:41 +02:00
Šesták Vít f8e073cc54 .NET scans are now able to detect a missing library 2017-08-01 16:26:55 +02:00
Šesták Vít 4ac4b7b501 Improved main library detection for .NET 2017-08-01 16:14:55 +02:00
Šesták Vít 9a93099f60 Added config option for NuGet -source 2017-08-01 16:04:19 +02:00
Šesták Vít 22e4cff12b Added .NET scans. 2017-08-01 15:28:34 +02:00
Šesták Vít b23cc3e3dc Menu made smaller in order to better fit all the items 2017-08-01 09:47:04 +02:00
Šesták Vít 2d1198d7cc Changed plot descriptions 2017-07-31 16:19:28 +02:00
Šesták Vít 0ec8928ff7 Moved Status to “…” 2017-07-31 16:19:13 +02:00
Šesták Vít 2049759430 Added new ODC scans for Java libraries. Those can scan even transitive dependencies and can be run before adding a new library to a project. 2017-07-31 14:35:03 +02:00
Šesták Vít bb0089cd97 Added forgotten file 2017-06-28 10:49:29 +02:00
Šesták Vít 420a765dc4 Added a proper error message for a missing library 2017-06-28 09:15:55 +02:00
Šesták Vít ffabc8a4e5 Added support for brand 2017-06-21 13:06:35 +02:00
Šesták Vít b00857368a Added throttling to reduce Bamboo peak load and number of concurrent connections 2017-06-21 10:18:39 +02:00
Šesták Vít c55c37fa9a Added a standalone page for library 2017-06-20 01:16:32 +02:00
Šesták Vít 2d0651cfc7 Minor hashes refactoring 2017-06-19 13:09:17 +02:00
Šesták Vít e732e2fbb9 Minor markup cleanup 2017-06-19 10:53:49 +02:00
Šesták Vít 74ab645475 Added list of all project, including those not included by the filter 2017-06-15 17:30:15 +02:00
Šesták Vít 70f263baaa Adjusted sorting 2017-05-23 15:45:31 +02:00
Šesták Vít ef1d434871 Fix for notifications: When a vulnerability reappears, it should not try to recreate a ticket for it 2017-04-05 13:14:49 +02:00
Šesták Vít 1a1fb0b9f5 Keep filter when switching between pages (mostly; does not work in Notifications and Status) 2017-04-03 07:46:21 +02:00
Šesták Vít 248f7baaab Show values in legend 2017-03-31 16:48:30 +02:00
Šesták Vít 6e7d87796a Updated expand/collapse symbols to be more mainstream. For example, they now match Wikipedia. 2017-03-31 12:11:35 +02:00
Šesták Vít c646dbf620 Added a quick workaround against multiplicities. 2017-03-31 11:00:16 +02:00
Šesták Vít 50c6b6daee Minor tuning for vulnerabilities for a library. 2017-03-31 10:26:55 +02:00
Šesták Vít 6044947481 Added false positive heuristics. 2017-03-31 09:05:45 +02:00
Šesták Vít 10b3a3b6f1 Another set of UI improvements 2017-03-21 16:54:20 +01:00
Šesták Vít 134ec971a4 Minor style updates 2017-03-21 13:03:02 +01:00
Šesták Vít 5fb632d432 Added some expand symbols 2017-03-21 08:57:33 +01:00
Šesták Vít e757485c84 Added explanation for evidence. 2017-03-20 17:15:00 +01:00
Šesták Vít 5fd5c6d974 Added license 2017-03-20 17:14:30 +01:00
Šesták Vít b33f8e44ca Fixed severity column wrapping 2017-03-20 16:51:23 +01:00
Šesták Vít a08b0ceabf Filter empty paragraphs 2017-03-20 16:44:45 +01:00
Šesták Vít 41b4873847 Major vulnerable libraries UI redesign 2017-03-20 14:34:34 +01:00