checker-maven-plugin

KO | EN

gitlite — search

#javascript #hacktoberfest #ai #llm #go #machine-learning #docker #macos #cli #kubernetes #vue #security #mcp #ios

checker-maven-plugin

(★ 10)

Analyzes your Java Maven Project dependencies for security issues and technical debts (CVE/EOL/+).

checker-maven-plugin 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Use now

* (https://www.owasp.org/index.php/OWASP_Dependency_Check) 
(https://search.maven.org/artifact/org.owasp/dependency-check-maven/5.2.1/maven-plugin)
* (https://spotbugs.github.io/) (https://find-sec-bugs.github.io/)
* * (https://errorprone.info/ https://github.com/google/error-prone)
* if github: (https://dependabot.com/) https://github.com/dependabot
* (https://github.com/meitar/awesome-cybersecurity-blueteam)
* (https://github.com/STAMP-project/dspot)
* (http://mvnrepository.com/)

# Maven Security checker plugin for Java Maven dependencies

Analyzes your Java Maven Project dependencies for security issues and technical debts (CVE/EOL/+).

* [Current JavaTM CVE/EOL JSON list](https://github.com/based2/checker-maven-plugin/blob/master/src/main/resources/java_cve.json)
* [redhat victims](https://securityblog.redhat.com/2014/02/05/embedded-vulnerability-detection-command-line-tool/)
* [Crowdsourcing Security Brief of Sonatype](http://www.sonatype.com/people/2012/03/todays-security-brief-application-security-is-widely-neglected-by-some-surprising-companies/)

## Sources

* (https://access.redhat.com/security/security-updates/#/)
* (https://aws.amazon.com/fr/security/security-bulletins/)
* (https://www.microsoft.com/en-us/msrc/technical-security-notifications)
* (http://www.oracle.com/technetwork/topics/security/alerts-086861.html)
* (https://blogs.oracle.com/sunsecurity/)
* (https://security-tracker.debian.org/tracker/)
* (https://support.apple.com/en-us/HT201222)

* (https://www.cvedetails.com/)
* (https://www.talosintelligence.com/vulnerability_info)
* (https://googleprojectzero.blogspot.com/)

* (https://vigilance.fr/)

* (http://cert.europa.eu/cert/newsletter/en/latest_Security%20Bulletins_.html)
** (http://cert.europa.eu/cert/filteredition/en/CERT-LatestNews.html)
* (http://osdir.com/ml/bugtraq.security/)
* (https://www.us-cert.gov/cas/bulletins/)
* (http://www.cert.org.cn/publish/english/115/index.html)
* (http://www.jpcert.or.jp/english/)
* (https://www.buerger-cert.de/archive)
* (http://www.certa.ssi.gouv.fr/)
* (https://www.cert.be/pro/advisories/software/java)
* (http://www.govcert.nl/english/service-provision/knowledge-and-publications/factsheets)
* (https://www.circl.lu/)
* (http://www.cert.ee/)
* (https://www.cert.dk/)
* (http://www.cert.se/)
* (http://www.cert.fi/en/reports.html)
* (http://www.securitepublique.gc.ca/cnt/rsrcs/cybr-ctr/index-fra.aspx)
* (https://www.cert.fi/en/reports.html)
* (https://cassandra.cerias.purdue.edu/CVE_changes/)

Notes:
http://maven.apache.org/plugins/maven-project-info-reports-plugin/xref/index.html

https://github.com/skuro/plan-maven-plugin
http://maven.40175.n5.nabble.com/ANN-Rate-my-Mojo-part-II-Launchify-td5696672.html
http://mojo.codehaus.org/cassandra-maven-plugin/
http://code.google.com/p/pulloid/ java,pull,xml,parser,java,android,license_aslv2
http://maven.apache.org/plugins/localization.html
http://www.displaytag.org
http://www.jboss.org/shrinkwrap license_aslv2,jar
http://sourceforge.net/projects/dnsjnio/ dns,java,nio,license_aslv2
https://docs.sonatype.org/display/Repository/Sonatype+OSS+Maven+Repository+Usage+Guide maven,upload,artifact,new,central,upload
http://jira.codehaus.org/browse/MAVENUPLOAD

return getDirBySystemProperty( "JAVAFX_HOME" );
https://bitbucket.org/cedarsoft/org.jfxtras.maven-plugin/src/6db3cbe0665b/src/main/java/org/jfxtras/InstallSdkToLocalRepository.java 
http://blog.cedarsoft.com/2010/10/hierarchical-structures-with-java-enums/ enums,java,hierarchy,tree
http://blog.cedarsoft.com/2010/08/unit-testing-time-zone-and-stuff/ testing,time,zone,java
http://blog.cedarsoft.com/2010/11/setting-java-library-path-programmatically/#comments path,java,java.library.path
http://www.cdnjs.com/ cdn,js
https://github.com/lenniboy/jspc-maven-plugin maven,jsp,precompilation,java,plugin
http://searls.github.com/jasmine-maven-plugin/ maven,java,testing,plugin
https://github.com/lenniboy/debug-maven-plugin tree,maven,plugin,debug,dependency,conflict
http://www.trackyourtests.com/ java,testing,maven,history,github
http://www.thebuzzmedia.com/software/exiftool-enhanced-java-integration-for-exiftool/ java,exif,exiftool,photo,metadata
http://jawr.java.net/features.html java,license_aslv2,maven,bundle,cdn,jawr

http://www.xebialabs.com/features deployit
http://jduchess.org/duchess-france/blog/paris-jug-de-mai-build-share-deploy-jusquau-bout-de-la-nuit-5/ deployit,itil,cdn,maven,fr
http://www.dbmaintain.org/overview.html maven,database,deployment,ant,version,sql,testing
https://evolvis.org/plugins/mediawiki/wiki/kaliko/index.php/Main_Page scheduler,webservice,java

https://docs.sonatype.org/display/AETHER/Using+Aether+in+Maven+Plugins maven,aether,mojo,plugin
http://www.eclipse.org/aether/ maven,aether,eclipse
https://github.com/sonatype/mvnsh mvn,shell,maven
http://stackoverflow.com/questions/6291146/arquillian-shrinkwrap-mavendependencyresolver-behind-proxy
http://philippe.poumaroux.free.fr/public/thucydides/thucydides-fr.html java,testing,thucydides,tdd,maven,fr,manuel
https://github.com/thucydides-webtests/thucydides java,testing,thucydides,tdd,maven,github
http://maven.40175.n5.nabble.com/Converting-an-Artifact-Aether-to-MavenProject-td5609901.html
http://git.eclipse.org/c/aether/aether-demo.git/tree/aether-demo-snippets/src/main/java/org/eclipse/aether/examples/ResolveTransitiveDependencies.java
http://git.eclipse.org/c/aether/aether-demo.git/tree/aether-demo-snippets/src/main/java/org/eclipse/aether/examples/ResolveTransitiveDependencies.java
http://stackoverflow.com/questions/5393873/epl-eclipse-public-license-gpl-gnu-public-license-lgpl-lesser-gpl-and-lic license,license_epl,license_gpl,discussion,epl,gpl
http://www.fsf.org/blogs/licensing/using-the-gpl-for-eclipse-plug-ins license,license_epl,license_gpl,discussion,epl,gpl
http://maven.apache.org/plugins/maven-shade-plugin/examples/resource-transformers.html maven,uberjar,jar,onejar
https://github.com/eclipse/aether-demo/tree/master/aether-demo-snippets/src/main/java/org/eclipse/aether/examples
http://objenesis.googlecode.com/svn/docs/index.html java,reflection,license_aslv2
https://dev.eclipse.org/mailman/listinfo/aether-users maven,aether,mailing list,archive
http://www.rexsl.com/ xml,java,maven,xsl,rest,services,license_bsd,jaxb,jax-rs
http://www.jcabi.com/ java,aether,maven
http://www.jcabi.com/jcabi-log/decors.html java,logging,formatting,decors,license_bsd
http://trac.fazend.com/rempl/ rempl,code,analysis,java
http://superuser.com/questions/261440/whats-the-closest-equivalent-of-little-snitch-mac-program-on-windows privacy,personal active filter,little snitch

http://www.jarvana.com/jarvana/view/org/sonatype/aether/aether-spi/1.1/aether-spi-1.1-javadoc.jar!/overview-summary.html
http://code.google.com/p/vosao/ cms,gae
http://news.ycombinator.com/item?id=3988801 rabk,karma,reputation
https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&order=relevance+desc&bug_status=__open__&product=Aether aether,bugtracker

testing
java.io.IOException: Stream closed
	at java.io.BufferedInputStream.getInIfOpen(Unknown Source)
	at java.io.BufferedInputStream.fill(Unknown Source)
	at java.io.BufferedInputStream.read(Unknown Source)
	at org.codehaus.plexus.util.xml.XmlReader.getBOMEncoding(XmlReader.java:635)
	at org.codehaus.plexus.util.xml.XmlReader.doRawStream(XmlReader.java:459)
	at org.codehaus.plexus.util.xml.XmlReader.<init>(XmlReader.java:180)
	at org.codehaus.plexus.util.xml.XmlReader.<init>(XmlReader.java:143)
	at org.codehaus.plexus.util.xml.XmlStreamReader.<init>(XmlStreamReader.java:86)
	at org.codehaus.plexus.util.ReaderFactory.newXmlReader(ReaderFactory.java:104)
	at org.apache.maven.plugin.testing.AbstractMojoTestCase.setUp(AbstractMojoTestCase.java:91)
	at junit.framework.TestCase.runBare(TestCase.java:132)
	at junit.framework.TestResult$1.protect(TestResult.java:110)
	at junit.framework.TestResult.runProtected(TestResult.java:128)
	at junit.framework.TestResult.run(TestResult.java:113)
	at junit.framework.TestCase.run(TestCase.java:124)
	at junit.framework.TestSuite.runTest(TestSuite.java:243)
	at junit.framework.TestSuite.run(TestSuite.java:238)
	at org.junit.internal.runners.JUnit38ClassRunner.run(JUnit38ClassRunner.java:83)
	at org.eclipse.jdt.internal.junit4.runner.JUnit4TestReference.run(JUnit4TestReference.java:50)
	at org.eclipse.jdt.internal.junit.runner.TestExecution.run(TestExecution.java:38)
	at org.eclipse.jdt.internal.junit.runner.RemoteTestRunner.runTests(RemoteTestRunner.java:467)
	at org.eclipse.jdt.internal.junit.runner.RemoteTestRunner.runTests(RemoteTestRunner.java:683)
	at org.eclipse.jdt.internal.junit.runner.RemoteTestRunner.run(RemoteTestRunner.java:390)
	at org.eclipse.jdt.internal.junit.runner.RemoteTestRunner.main(RemoteTestRunner.java:197)
	
ExecutionEnvironment
Exception in thread "main" java.lang.NullPointerException: mavenProject may not be null
    at org.twdata.maven.mojoexecutor.MojoExecutor$ExecutionEnvironment.<init>(MojoExecutor.java:280)
    at org.twdata.maven.mojoexecutor.MojoExecutor.executionEnvironment(MojoExecutor.java:122)
    at org.github.based2.maven.plugin.checker.MavenSecurityChecker.loadMavenDependencyTree(MavenSecurityChecker.java:150)
    at org.github.based2.maven.plugin.checker.MavenSecurityChecker.main(MavenSecurityChecker.java:284)

MavenProject project;
MavenSession session
 BuildPluginManager pluginManager

The plugins support several configuration options that can either be expressed
in your project's POM file or in your settings.xml file. Where you put the
plugin settings depends on whether you want a specific setting to be configured
globally or on a per-project basis.

All GitHub Maven plugins support the following core configuration elements.

The notation below shows the plugin configuration property name followed
by the settings configuration property in parentheses.

* host (github.global.host)
  * Domain of GitHub API calls (defaults to `api.github.com`)
* oauth2Token (github.global.oauth2Token)
  * OAuth2 access token for API authentication
  * [More about GitHub OAuth support](http://developer.github.com/v3/oauth/)
* userName (github.global.userName)
  * GitHub user name used for API authentication
* password (github.global.password)
  * GitHub password used for API authentication
* repositoryName
  * Name of repository that downloads will be uploaded to
* repositoryOwner
  * Owner of repository that downloads will be uploaded to

*Note:* `repositoryOwner` property and `repositoryName` are optional and will be
inferred from the following properties if not specified

* `project.url`
 * `project.scm.url`
 * `project.scm.connection`
 * `project.scm.developerConnection`

## [Downloads Plugin](http://github.github.com/maven-plugins/downloads-plugin)
Maven plugin that creates and uploads built resources to be available as 
GitHub repository downloads.  The plugin has an `upload` goal and is configured
with a goal prefix of `ghDownloads`. The plugin will upload the single build
artifact by default but can be reconfigured to include/exclude files found in
the build directory or to include attached artifacts such as Javadoc jars or
sources jars.

### Configuration

* description
  * Description visible on the repository download page
* includes
  * Sub-elements will be treated as patterns to include from the
    `project.build.directory` as downloads
  * This element is optional and will default to create a download of the
    build's main artifact
* excludes
  * Sub-elements will be treated as patterns to exclude from the
    `project.build.directory` as downloads
  * This element is optional and will default to create a download of the
    build's main artifact
* includeAttached (github.downloads.includeAttached)
  * true | false (default: false)
  * Whether to create downloads from attached artifacts, by default only the
    main artifact is uploaded
* dryRun (github.downloads.dryRun)
  * true | false (default: false)
  * Log what files *would* be uploaded and what existing downloads *would* be
    deleted without actually modifying the current downloads
* override (github.downloads.override)
  * true | false (default: false)
  * Whether existing downloads with the same name will be deleted before
    attempting to upload a new version
  * *Note:* Attempts to upload a download with the same name as one that already
    exists will fail unless this is set to true
* suffix
  * String to be appended after file name but before file extension for uploaded files
  * A suffix of `-master` would cause artifacts to be uploaded as `myartifact-1.0-master.jar`

### Example
```xml
<build>
  <plugins>
    <plugin>
      <groupId>com.github.github</groupId>
      <artifactId>downloads-maven-plugin</artifactId>
      <version>0.4</version>
      <configuration>
        <description>${project.version} release of ${project.name}</description>
        <override>true</override>
        <includeAttached>true</includeAttached>
      </configuration>
    </plugin>
  </plugins>
</build>
```

To upload a built artifact run the following command:

`$ mvn clean install ghDownloads:upload`

You can also bind the upload goal to execute as part of a specific phase:

```xml
<executions>
  <execution>
    <goals>
      <goal>upload</goal>
    </goals>
    <phase>install</phase>
  </execution>
</executions>
```

## [Site Plugin](http://github.github.com/maven-plugins/site-plugin)
Maven plugin that commits files generated and updates a specific branch
reference in a GitHub repository.  This plugin can be used to deploy a created
Maven site to a `gh-pages` branch so that it can be served statically as a
GitHub Project Page.  The plugin has a `site` goal and is configured with a goal
prefix of `ghSite`.

### Configuration

* branch
  * Branch ref that will be updated to commit made
  * Default: `refs/heads/gh-pages`
* message
  * Message used for commit
* outputDirectory
  * Directory that includes and excludes will be relative to
  * Defaults to `siteOutputDirectory` or `project.reporting.outputDirectory`
* includes
  * Sub-elements will be treated as patterns to include from the
    `outputDirectory`
* excludes
  * Sub-elements will be treated as patterns to exclude from the
    `outputDirectory`
* path
  * Path relative to the root of the repository that all blobs should be
    relative to
* force (github.site.force)
  * true | false (default: false)
  * Whether to force a ref update, default is fast-forwards only
* merge (github.site.merge)
  * true | false (default: false)
  * Whether to merge with the current tree or completely replace the tree that
    the commit points to
* dryRun (github.site.dryRun)
  * true | false (default: false)
  * Log what blobs, tree, and commits *would* be created without actually
    creating them
* noJekyll (github.site.noJekyll)
  * true | false (default: false)
  * Whether to always create a `.nojekyll` file at the root of the site if one
    doesn't already exist.  This setting should be enabled if your site contains
    any folders that begin with an underscore.

# Licenses
* [Apache License, Version 2.0](http://www.apache.org/licenses/LICENSE-2.0)
* [GNU Free Documentation License](http://www.gnu.org/licenses/fdl.html)

checker-maven-plugin

checker-maven-plugin 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

checker-maven-plugin

checker-maven-plugin 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README