File tree Expand file tree Collapse file tree 2 files changed +7
-3
lines changed Expand file tree Collapse file tree 2 files changed +7
-3
lines changed Original file line number Diff line number Diff line change @@ -12,7 +12,7 @@ configuration.
1212
1313The problem with using known vulnerable components was covered in a paper by
1414Jeff Williams and Arshan Dabirsiaghi titled, "[ The Unfortunate Reality of
15- Insecure Libraries] ( http ://www1.contrastsecurity .com/the-unfortunate-reality -of-insecure-libraries? & amp ; __hssc=92971330.1.1412763139545 & amp ; __hstc=92971330.5d71a97ce2c038f53e4109bfd029b71e.1412763139545.1412763139545.1412763139545.1 & amp ; hsCtaTracking=7bbb964b-eac1-454d-9d5b-cc1089659590%7C816e01cf-4d75-449a-8691-bd0c6f9946a5 ) "
15+ Insecure Libraries] ( https ://www.scribd .com/document/175866686/Aspect-Security- the-Unfortunate-Reality -of-Insecure-Libraries ) "
1616(registration required). The gist of the paper is that we as a development
1717community include third party libraries in our applications that contain well
1818known published vulnerabilities \( such as those at the
@@ -32,7 +32,9 @@ OWASP dependency-check's core analysis engine can be used as:
3232- [ Gradle Plugin] ( dependency-check-gradle/index.html )
3333- [ Jenkins Plugin] ( dependency-check-jenkins/index.html )
3434- [ Maven Plugin] ( dependency-check-maven/index.html ) - Maven 3.6.3 or newer required
35- - [ SBT Plugin] ( https://github.com/albuch/sbt-dependency-check )
35+
36+ Unofficial (Not endorsed by OWASP)
37+ - [ SBT Plugin] ( https://github.com/nMoncho/sbt-dependency-check )
3638
3739For help with dependency-check the following resource can be used:
3840
Original file line number Diff line number Diff line change @@ -8,7 +8,9 @@ build and reporting process:
88- [ Gradle Plugin] ( dependency-check-gradle/index.html )
99- [ Jenkins Plugin] ( dependency-check-jenkins/index.html )
1010- [ Maven Plugin] ( dependency-check-maven/index.html )
11- - [ SBT Plugin] ( https://github.com/albuch/sbt-dependency-check )
11+
12+ Unofficial (Not endorsed by OWASP)
13+ - [ SBT Plugin] ( https://github.com/nMoncho/sbt-dependency-check )
1214
1315In addition, dependency-check can be executed from the
1416[ command line] ( dependency-check-cli/index.html ) .
You can’t perform that action at this time.
0 commit comments