You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
- The project is migrating from hosting the release archives on Bintray and moving them to Github under the assets for each [release](https://github.com/jeremylong/DependencyCheck/releases)
931
+
- The project is migrating from hosting the release archives on Bintray and moving them to Github under the assets for each [release](https://github.com/dependency-check/DependencyCheck/releases)
932
932
-**Please update any automation you have to point to the new location.**
933
933
- Npm Audit Analyzer now correctly skips dev dependencies (`--nodeAuditSkipDevDependencies`); see #2482.
934
934
- GoLang Analyzer now scans transitive dependencies; see #2680.
935
935
- Several bug fixes found in 6.0.1.
936
936
937
-
See the full listing of [changes](https://github.com/jeremylong/DependencyCheck/milestone/16?closed=1).
937
+
See the full listing of [changes](https://github.com/dependency-check/DependencyCheck/milestone/16?closed=1).
Copy file name to clipboardExpand all lines: README.md
+7-7
Original file line number
Diff line number
Diff line change
@@ -6,7 +6,7 @@
6
6
7
7
Dependency-Check is a Software Composition Analysis (SCA) tool that attempts to detect publicly disclosed vulnerabilities contained within a project's dependencies. It does this by determining if there is a Common Platform Enumeration (CPE) identifier for a given dependency. If found, it will generate a report linking to the associated CVE entries.
8
8
9
-
Documentation and links to production binary releases can be found on the [github pages](http://jeremylong.github.io/DependencyCheck/). Additionally, more information about the architecture and ways to extend dependency-check can be found on the [wiki].
9
+
Documentation and links to production binary releases can be found on the [github pages](https://dependency-check.github.io/DependencyCheck). Additionally, more information about the architecture and ways to extend dependency-check can be found on the [wiki].
10
10
11
11
## Notice
12
12
@@ -104,7 +104,7 @@ For instructions on the use of the Jenkins plugin please see the [OWASP Dependen
The latest CLI can be downloaded from github in the [releases section](https://github.com/dependency-check/DependencyCheck/releases).
109
109
110
110
Downloading the latest release:
@@ -133,7 +133,7 @@ $ dependency-check --out . --scan [path to jar files to be scanned]
133
133
134
134
### Maven Plugin
135
135
136
-
More detailed instructions can be found on the [dependency-check-maven github pages](http://jeremylong.github.io/DependencyCheck/dependency-check-maven).
136
+
More detailed instructions can be found on the [dependency-check-maven github pages](https://dependency-check.github.io/DependencyCheck/dependency-check-maven).
137
137
By default, the plugin is tied to the `verify` phase (i.e. `mvn verify`). Alternatively,
138
138
one can directly invoke the plugin via `mvn org.owasp:dependency-check-maven:check`.
139
139
@@ -165,11 +165,11 @@ The dependency-check plugin can be configured using the following:
165
165
166
166
### Gradle Plugin
167
167
168
-
For instructions on the use of the Gradle Plugin, please see the [dependency-check-gradle github page](http://jeremylong.github.io/DependencyCheck/dependency-check-gradle).
168
+
For instructions on the use of the Gradle Plugin, please see the [dependency-check-gradle github page](https://dependency-check.github.io/DependencyCheck/dependency-check-gradle).
169
169
170
170
### Ant Task
171
171
172
-
For instructions on the use of the Ant Task, please see the [dependency-check-ant github page](http://jeremylong.github.io/DependencyCheck/dependency-check-ant).
172
+
For instructions on the use of the Ant Task, please see the [dependency-check-ant github page](https://dependency-check.github.io/DependencyCheck/dependency-check-ant).
The documentation on the [github pages](http://jeremylong.github.io/DependencyCheck/) is generated from this repository:
342
+
The documentation on the [github pages](https://dependency-check.github.io/DependencyCheck/) is generated from this repository:
343
343
344
344
mvn -s settings.xml site site:staging
345
345
@@ -357,7 +357,7 @@ mvn -s settings.xml install
357
357
License
358
358
-------
359
359
360
-
Permission to modify and redistribute is granted under the terms of the Apache 2.0 license. See the [LICENSE.txt](https://raw.githubusercontent.com/jeremylong/DependencyCheck/main/LICENSE.txt) file for the full license.
360
+
Permission to modify and redistribute is granted under the terms of the Apache 2.0 license. See the [LICENSE.txt](https://raw.githubusercontent.com/dependency-check/DependencyCheck/main/LICENSE.txt) file for the full license.
361
361
362
362
Dependency-Check makes use of several other open source libraries. Please see the [NOTICE.txt][notices] file for more information.
Copy file name to clipboardExpand all lines: ant/README.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -6,7 +6,7 @@ performed are a "best effort" and as such, there could be false positives as wel
6
6
vulnerabilities in 3rd party components is a well-known problem and is currently documented in the 2021 OWASP
7
7
Top 10 as [A06:2021 – Vulnerable and Outdated Components](https://owasp.org/Top10/A06_2021-Vulnerable_and_Outdated_Components/).
8
8
9
-
Documentation and links to production binary releases can be found on the [github pages](http://jeremylong.github.io/DependencyCheck/dependency-check-ant/index.html).
9
+
Documentation and links to production binary releases can be found on the [github pages](https://dependency-check.github.io/DependencyCheck/dependency-check-ant/index.html).
Copy file name to clipboardExpand all lines: cli/README.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@ performed are a "best effort" and as such, there could be false positives as wel
5
5
vulnerabilities in 3rd party components is a well-known problem and is currently documented in the 2021 OWASP
6
6
Top 10 as [A06:2021 – Vulnerable and Outdated Components](https://owasp.org/Top10/A06_2021-Vulnerable_and_Outdated_Components/).
7
7
8
-
Documentation and links to production binary releases can be found on the [github pages](http://jeremylong.github.io/DependencyCheck/dependency-check-cli/index.html).
8
+
Documentation and links to production binary releases can be found on the [github pages](https://dependency-check.github.io/DependencyCheck/dependency-check-cli/index.html).
Copy file name to clipboardExpand all lines: core/README.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -8,7 +8,7 @@ Copyright & License
8
8
9
9
Dependency-Check is Copyright (c) 2012-2014 Jeremy Long. All Rights Reserved.
10
10
11
-
Permission to modify and redistribute is granted under the terms of the Apache 2.0 license. See the [LICENSE.txt](https://raw.githubusercontent.com/jeremylong/DependencyCheck/main/LICENSE.txt) file for the full license.
11
+
Permission to modify and redistribute is granted under the terms of the Apache 2.0 license. See the [LICENSE.txt](https://raw.githubusercontent.com/dependency-check/DependencyCheck/main/LICENSE.txt) file for the full license.
12
12
13
13
Dependency-Check makes use of several other open source libraries. Please see the [NOTICE.txt][notices] file for more information.
Copy file name to clipboardExpand all lines: src/site/resources/general/SampleReport.html
+3-3
Original file line number
Diff line number
Diff line change
@@ -542,7 +542,7 @@
542
542
<body>
543
543
<div id="modal-background"></div>
544
544
<div id="modal-content">
545
-
<div>Press CTR-C to copy XML <a href="http://jeremylong.github.io/DependencyCheck/general/suppression.html" class="infolink" target="_blank" title="Help with suppressing false positives">[help]</a></div>
545
+
<div>Press CTR-C to copy XML <a href="https://dependency-check.github.io/DependencyCheck/general/suppression.html" class="infolink" target="_blank" title="Help with suppressing false positives">[help]</a></div>
546
546
<button onclick="suppressSwitchTo('gav')" id="modal-suppress-change-to-gav" class="modal-button suppresstype" title="Supress by Maven Group Artifact Version">Suppress By GAV</button>
547
547
<button onclick="suppressSwitchTo('sha1')" id="modal-suppress-change-to-sha1" class="modal-button suppresstype" title="Supress by SHA1 hash">Suppress By SHA1</button><br/>
548
548
<input type="hidden" id="suppress-name"/>
@@ -559,8 +559,8 @@
559
559
implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided
560
560
is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever
561
561
arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.</p>
0 commit comments