Šesták Vít
ef5d7e911d
Update for support of ODC 3.3.2
2018-09-26 15:35:02 +02:00
Šesták Vít
181a4c596c
Adjusted formatting of library identifiers in vulnerability details
2018-04-16 10:34:50 +02:00
Šesták Vít
a2a4ee01c7
Report proper error messages when filter is wrong project or wrong team
2018-03-21 10:45:11 +01:00
Šesták Vít
e6e9d4c940
Added API endpoint for statistics.
2018-03-21 10:15:28 +01:00
Šesták Vít
dcc109a729
Added support for scanning transitive dependencies for .NET libraries (except those with unlimited set of supported TMFs).
2018-03-07 13:59:43 +01:00
Šesták Vít
d87535df84
Added warning for WebJars other than NPM.
2018-03-02 15:57:42 +01:00
Šesták Vít
15f8319de9
Added API for lisling vulnerabilities
2018-03-02 07:43:07 +01:00
Šesták Vít
d56ffbccc6
Makes also working directory fixed for a single scan. Also, ODC path is resolved from working directory. As a result, one can atomically swap symlinks without affecting ongoing scans.
2018-02-28 17:16:07 +01:00
Šesták Vít
bc2e6589fb
Make ODC installation fixed during a single scan. As a result, one can atomically swap symlinks without affecting ongoing scans.
2018-02-28 13:07:36 +01:00
Šesták Vít
9836c5040f
Fix support for empty CVSS score tags.
2018-02-14 15:42:03 +01:00
Šesták Vít
e766abf38c
Adapted for current ODC output format
2018-02-14 09:21:42 +01:00
Šesták Vít
8095deae70
Fixed handling of slightly diverging dependencies (e.g., different filename) when comparing scans. It used to be considered as two separate dependencies. This caused such dependencies to appear in both added and removed dependencies.
2018-02-05 10:36:47 +01:00
Šesták Vít
d57b9aeb97
Added support for installed plugins in Maven scans.
2017-12-20 15:06:12 +01:00
Šesták Vít
5f9546934e
When comparing, also list vulnerable dependencies
2017-12-08 17:08:59 +01:00
Šesták Vít
644bd3b539
Give more information when comparing commits.
2017-12-08 15:58:08 +01:00
Šesták Vít
9343619ca9
Initial support for virtual dependencies.
...
Well, they will probably not work anyway, because they don't have hashes. But at this point, at least the parser does not crash at isVirtual="false"
2017-12-08 12:20:07 +01:00
Šesták Vít
39ba123efc
Added support for comparison of scans
2017-12-08 10:18:25 +01:00
Šesták Vít
2e21f78105
Added search for newer NuGet
2017-11-15 16:28:31 +01:00
Šesták Vít
0735ef5dd2
Added a minor comment
2017-11-15 16:28:02 +01:00
Šesták Vít
53890026b4
Removed unneeded library
2017-10-16 16:56:57 +02:00
Šesták Vít
65232504cb
Updated confidence highlighting
2017-10-16 09:24:55 +02:00
Šesták Vít
2a95b07b54
Added more fail safety for vulnerability export.
...
This should affect all exports when a vulnerability disappears.
2017-10-11 16:54:40 +02:00
Šesták Vít
cdb31dcc4e
Failsafe behavior for e-mail notifications.
...
If the vulnerability is not found, it now does its best for providing relevant information. Even if no additional information (other than vulnerability identifier) can be provided, it does not cause an exception when sending e-mail. Which is the main point of this improvement.
2017-10-11 15:48:20 +02:00
Šesták Vít
8688ffd730
Added identifier confidence
2017-10-09 15:46:23 +02:00
Šesták Vít
1097e77d1c
Preffer CPE identifiers
2017-10-09 15:01:04 +02:00
Šesták Vít
e43cee7743
E-mail export: More descriptive error message when some vulnerability is missing
2017-10-06 11:05:57 +02:00
Šesták Vít
876086ce3f
Fixed issue with newlines in JIRA export
2017-10-06 10:06:53 +02:00
Šesták Vít
629b42d943
Added throttling to JIRA in order to make it more server friendly
2017-09-11 23:48:38 +02:00
Šesták Vít
a155188fec
Fixed affected projects not appearing in some views
2017-08-02 09:55:41 +02:00
Šesták Vít
f8e073cc54
.NET scans are now able to detect a missing library
2017-08-01 16:26:55 +02:00
Šesták Vít
4ac4b7b501
Improved main library detection for .NET
2017-08-01 16:14:55 +02:00
Šesták Vít
9a93099f60
Added config option for NuGet -source
2017-08-01 16:04:19 +02:00
Šesták Vít
22e4cff12b
Added .NET scans.
2017-08-01 15:28:34 +02:00
Šesták Vít
b23cc3e3dc
Menu made smaller in order to better fit all the items
2017-08-01 09:47:04 +02:00
Šesták Vít
5534b442dc
Removed a legacy buildfile
2017-07-31 16:20:22 +02:00
Šesták Vít
bff5478355
Added a missing note for ODC config
2017-07-31 16:19:49 +02:00
Šesták Vít
2d1198d7cc
Changed plot descriptions
2017-07-31 16:19:28 +02:00
Šesták Vít
0ec8928ff7
Moved Status to “…”
2017-07-31 16:19:13 +02:00
Šesták Vít
2049759430
Added new ODC scans for Java libraries. Those can scan even transitive dependencies and can be run before adding a new library to a project.
2017-07-31 14:35:03 +02:00
Šesták Vít
bb0089cd97
Added forgotten file
2017-06-28 10:49:29 +02:00
Šesták Vít
420a765dc4
Added a proper error message for a missing library
2017-06-28 09:15:55 +02:00
Šesták Vít
ffabc8a4e5
Added support for brand
2017-06-21 13:06:35 +02:00
Šesták Vít
b00857368a
Added throttling to reduce Bamboo peak load and number of concurrent connections
2017-06-21 10:18:39 +02:00
Šesták Vít
c55c37fa9a
Added a standalone page for library
2017-06-20 01:16:32 +02:00
Šesták Vít
2d0651cfc7
Minor hashes refactoring
2017-06-19 13:09:17 +02:00
Šesták Vít
e732e2fbb9
Minor markup cleanup
2017-06-19 10:53:49 +02:00
Šesták Vít
74ab645475
Added list of all project, including those not included by the filter
2017-06-15 17:30:15 +02:00
Šesták Vít
79584020b2
Few library version bumps
2017-05-28 23:06:56 +02:00
Šesták Vít
70f263baaa
Adjusted sorting
2017-05-23 15:45:31 +02:00
Šesták Vít
ef1d434871
Fix for notifications: When a vulnerability reappears, it should not try to recreate a ticket for it
2017-04-05 13:14:49 +02:00
Šesták Vít
1a1fb0b9f5
Keep filter when switching between pages (mostly; does not work in Notifications and Status)
2017-04-03 07:46:21 +02:00
Šesták Vít
248f7baaab
Show values in legend
2017-03-31 16:48:30 +02:00
Šesták Vít
6e7d87796a
Updated expand/collapse symbols to be more mainstream. For example, they now match Wikipedia.
2017-03-31 12:11:35 +02:00
Šesták Vít
c646dbf620
Added a quick workaround against multiplicities.
2017-03-31 11:00:16 +02:00
Šesták Vít
50c6b6daee
Minor tuning for vulnerabilities for a library.
2017-03-31 10:26:55 +02:00
Šesták Vít
abceccae5f
Added test for team filter
2017-03-31 09:08:36 +02:00
Šesták Vít
6044947481
Added false positive heuristics.
2017-03-31 09:05:45 +02:00
Šesták Vít
10b3a3b6f1
Another set of UI improvements
2017-03-21 16:54:20 +01:00
Šesták Vít
134ec971a4
Minor style updates
2017-03-21 13:03:02 +01:00
Šesták Vít
5fb632d432
Added some expand symbols
2017-03-21 08:57:33 +01:00
Šesták Vít
e757485c84
Added explanation for evidence.
2017-03-20 17:15:00 +01:00
Šesták Vít
5fd5c6d974
Added license
2017-03-20 17:14:30 +01:00
Šesták Vít
b33f8e44ca
Fixed severity column wrapping
2017-03-20 16:51:23 +01:00
Šesták Vít
a08b0ceabf
Filter empty paragraphs
2017-03-20 16:44:45 +01:00
Šesták Vít
41b4873847
Major vulnerable libraries UI redesign
2017-03-20 14:34:34 +01:00
Šesták Vít
5d1280e6c7
Removed an extra file
2017-03-16 17:25:50 +01:00
Šesták Vít
81e757d04d
More friendly filter
2017-03-16 17:24:54 +01:00
Šesták Vít
d45c84b690
Sort teams alphabetically
2017-03-16 17:04:18 +01:00
Šesták Vít
31dbee77d5
Changed order of menu items in order to make the most important first
2017-03-16 16:57:51 +01:00
Šesták Vít
c1be908990
Added detailed list of dependencies
2017-03-03 15:20:38 +01:00
Šesták Vít
8f7f5d15ee
Removed some garbage
2017-03-01 15:50:34 +01:00
Šesták Vít
79f7cb4c9a
Use text/plain for hygiene.
2017-03-01 15:49:22 +01:00
Šesták Vít
81769c8309
Nice progressbar for loading
2017-03-01 15:48:41 +01:00
Šesták Vít
90f785b865
Lazy-load of dependency details
2017-03-01 15:18:41 +01:00
Šesták Vít
87ba3947ca
Fixed order of identifiers
2017-03-01 13:21:08 +01:00
Šesták Vít
6402edeb47
When exporting all dependencies, export filenames when no reliable identifier is available
2017-02-28 16:57:06 +01:00
Šesták Vít
cf6e1925f7
Added API for listing all dependencies
2017-02-07 16:22:07 +01:00
Šesták Vít
fef70cedcf
Fixed field name
2017-02-07 15:38:17 +01:00
Šesták Vít
e9336f7c4f
Added a forgotten route
2017-01-31 09:53:02 +01:00
Šesták Vít
e4b382024d
Added API for listing of scans
...
Added API support
2017-01-31 09:32:42 +01:00
Šesták Vít
cd37dda90c
Moved status to a less visible place
2017-01-09 13:13:52 +01:00
Šesták Vít
85adaaf612
Added filenames to evidence
2017-01-09 13:10:43 +01:00
Šesták Vít
e236c5b1f9
If authentication has failed, proper error message is used.
2017-01-06 16:46:41 +01:00
Šesták Vít
c9921765e7
Add error flash messages
2017-01-06 16:46:25 +01:00
Šesták Vít
e25e67c9f0
Changed homepage to something more friendly.
2017-01-06 12:22:22 +01:00
Šesták Vít
951d62d1cf
Updated license
2017-01-06 08:51:18 +01:00
Šesták Vít
7749741481
Fixed a missing dependency
2017-01-06 08:47:03 +01:00
Šesták Vít
7c8e252d16
Updated notes on automated tests
2017-01-04 17:24:23 +01:00
Šesták Vít
303b06742c
Team filter cleanup
2017-01-04 17:20:41 +01:00
Šesták Vít
7bc4ccc814
Minor debug output cleanup
2017-01-04 17:18:04 +01:00
Šesták Vít
4bd78c3ed9
Fixed bug in filtering by team. If a team has assigned a project with all subprojects and the project has more than one subproject, only one subproject used to be shown when filtering by team.
...
This is a trivial fix (two/three lines changed), but other additions are in tests.
2017-01-04 17:07:38 +01:00
Šesták Vít
a85a944088
Added SonarQube plugin to build.sbt
2017-01-03 14:34:49 +01:00
Šesták Vít
265ee1dd95
Refactoring: Move configuration parsing off the Projects class
2017-01-02 16:21:35 +01:00
Šesták Vít
f22b86cb78
Added list of files
2016-12-21 17:54:54 +01:00
Šesták Vít
0528d6abbe
Caching using FileCacheApi (for dev env) is now less memory hungry
2016-12-19 14:48:01 +01:00
Šesták Vít
97fef173af
Propagate exceptions when caching in order to make errors less magic
2016-12-19 13:29:15 +01:00
Šesták Vít
0ef9636148
Added suppressed vulnerabilities to statistics
2016-12-19 12:56:14 +01:00
Šesták Vít
307155129c
Scala version update
2016-12-14 08:32:14 +01:00
Šesták Vít
3d39c2e6a5
Fixed JIRA transitions
2016-12-14 08:31:49 +01:00
Šesták Vít
5680eec2d5
Fixed issues not exporting when they disappear
2016-12-13 23:37:18 +01:00
Šesták Vít