Commit graph

9 commits

Author SHA1 Message Date
Steffen Ohrendorf
84d8ee22bf
drop missing entities in case of stale lucene data
Signed-off-by: Steffen Ohrendorf <steffen.ohrendorf@gmx.de>
2025-10-15 19:09:12 +02:00
Steffen Ohrendorf
5dcdd7f7ce
normalize VULNERABLESOFTWARE table, make CPE matching case-insensitive
Signed-off-by: Steffen Ohrendorf <steffen.ohrendorf@gmx.de>
2025-09-06 20:42:58 +02:00
jonbally
863b820b80 Added whitespace sanitization in fuzzySearch CPE
The vendor and product String parameters passed to fuzzySearch() might
contain spaces, as the frontend does not prevent inputting these when
manually creating a component. As far as I know CycloneDX and SPDX
also do not restrict this, so imported components could also contain
spaces in their name and vendor properties.
As fuzzySearch() creates a new CPE object which is validated inside the
constructor, this will cause exceptions to be logged for all components
that contain spaces.
I have added a simple replace before passing these strings to the CPE
constructor to prevent the exceptions from being thrown.

Signed-off-by: jonbally <19593213+jonbally@users.noreply.github.com>
2025-06-17 15:04:40 +02:00
nscuro
c5eda9271e
Transfer copyright from Steve Springett to OWASP Foundation
Signed-off-by: nscuro <nscuro@protonmail.com>
2024-03-20 18:39:35 +01:00
meha
f4d38e41e1
Drop dependency on Unirest client (#2427)
* changes added

Signed-off-by: mehab <meha.bhargava@citi.com>

* added unit tests

Signed-off-by: mehab <meha.bhargava@citi.com>

* more cleanup

Signed-off-by: mehab <meha.bhargava@citi.com>

* removed vulndbdatamirror dependency completely

Signed-off-by: mehab <meha.bhargava@citi.com>

* sonatype fixes for PR

Signed-off-by: mehab <meha.bhargava@citi.com>

* added changes for sonatype comments

Signed-off-by: mehab <meha.bhargava@citi.com>

* pr review changes

Signed-off-by: mehab <meha.bhargava@citi.com>

* changed package name to follow convention

Signed-off-by: mehab <meha.bhargava@citi.com>

* resolved merge conflicts and added documentation

Signed-off-by: mehab <meha.bhargava@citi.com>

* PR review related changes

Signed-off-by: mehab <meha.bhargava@citi.com>

* PR review related changes

Signed-off-by: mehab <meha.bhargava@citi.com>

* unit tests added for defectdojo and updated for fortifyclient

Signed-off-by: mehab <meha.bhargava@citi.com>

* corrected pom

Signed-off-by: mehab <meha.bhargava@citi.com>

---------

Signed-off-by: mehab <meha.bhargava@citi.com>

Closes #2350
2023-02-20 13:17:49 +01:00
nscuro
2b121994a0
Enforce license header with checkstyle
Signed-off-by: nscuro <nscuro@protonmail.com>
2023-02-05 17:43:16 +01:00
nscuro
50b6c89987
Add checkstyle plugin to enforce import style
Signed-off-by: nscuro <nscuro@protonmail.com>
2023-02-05 17:43:14 +01:00
syalioune
c40c11753f
Restore lucene index during startup & allow rebuild through UI (#2200)
* Fix: Restoring lucene index build during startup by having a dedicated listener

A REST API is also exposed to allow index rebuild through the GUI. See #2104
Automatic periodic consistency check with database are performed if enabled

Signed-off-by: Alioune SY <sy_alioune@yahoo.fr>

* Fix: Restoring lucene index build during startup by having a dedicated listener

Takint into account review comments

Signed-off-by: Alioune SY <sy_alioune@yahoo.fr>

* Fix: Restoring lucene index build during startup by having a dedicated listener

Fixing unit tests.

Signed-off-by: Alioune SY <sy_alioune@yahoo.fr>

Signed-off-by: Alioune SY <sy_alioune@yahoo.fr>

Fixes #2104
2022-12-06 16:38:06 +01:00
Drew Thompson
f3442b9fd3 PR 1604 review comments implemented
Signed-off-by: Drew Thompson <drew.michael.thompson+ghdco@gmail.com>
2022-07-19 11:19:25 -05:00
Renamed from src/main/java/org/dependencytrack/search/FuzzyVulnerableSoftwareSearchMananger.java (Browse further)