forked from pmckeown/dependency-track-maven-plugin
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Add functionality to suppress CVEs in upload goal (pmckeown#423)
- Loading branch information
Kevin Pepryk
committed
Nov 27, 2024
1 parent
398bded
commit 0482893
Showing
16 changed files
with
742 additions
and
447 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
92 changes: 58 additions & 34 deletions
92
src/main/java/io/github/pmckeown/dependencytrack/finding/Analysis.java
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,43 +1,67 @@ | ||
| package io.github.pmckeown.dependencytrack.finding; | ||
|
|
||
| import com.fasterxml.jackson.annotation.JsonCreator; | ||
| import com.fasterxml.jackson.annotation.JsonProperty; | ||
| import javax.xml.bind.annotation.XmlElement; | ||
|
|
||
| import org.apache.commons.lang3.builder.ToStringBuilder; | ||
| import org.apache.commons.lang3.builder.ToStringStyle; | ||
|
|
||
| import javax.xml.bind.annotation.XmlElement; | ||
| import com.fasterxml.jackson.annotation.JsonCreator; | ||
| import com.fasterxml.jackson.annotation.JsonProperty; | ||
|
|
||
| public class Analysis { | ||
|
|
||
| public enum State { | ||
| NOT_AFFECTED, | ||
| FALSE_POSITIVE, | ||
| IN_TRIAGE, | ||
| EXPLOITABLE, | ||
| NOT_SET | ||
| } | ||
|
|
||
| private boolean isSuppressed; | ||
| private State state; | ||
|
|
||
| @JsonCreator | ||
| public Analysis(@JsonProperty("isSuppressed") boolean isSuppressed, @JsonProperty("state") State state) { | ||
| this.isSuppressed = isSuppressed; | ||
| this.state = state; | ||
| } | ||
|
|
||
| @XmlElement | ||
| public boolean isSuppressed() { | ||
| return isSuppressed; | ||
| } | ||
|
|
||
| @XmlElement | ||
| public State getState() { | ||
| return state; | ||
| } | ||
|
|
||
| @Override | ||
| public String toString() { | ||
| return ToStringBuilder.reflectionToString(this, ToStringStyle.JSON_STYLE); | ||
| } | ||
| public enum AnalysisState { | ||
| NOT_AFFECTED, | ||
| FALSE_POSITIVE, | ||
| IN_TRIAGE, | ||
| EXPLOITABLE, | ||
| NOT_SET, | ||
| RESOLVED | ||
| } | ||
|
|
||
| public enum AnalysisJustification { | ||
| CODE_NOT_PRESENT, | ||
| CODE_NOT_REACHABLE, | ||
| REQUIRES_CONFIGURATION, | ||
| REQUIRES_DEPENDENCY, | ||
| REQUIRES_ENVIRONMENT, | ||
| PROTECTED_BY_COMPILER, | ||
| PROTECTED_AT_RUNTIME, | ||
| PROTECTED_AT_PERIMETER, | ||
| PROTECTED_BY_MITIGATING_CONTROL, | ||
| NOT_SET | ||
| } | ||
|
|
||
| private boolean isSuppressed; | ||
| private AnalysisState analysisState; | ||
| private AnalysisJustification analysisJustification; | ||
|
|
||
| @JsonCreator | ||
| public Analysis(@JsonProperty("isSuppressed") final boolean isSuppressed, | ||
| @JsonProperty("analysisState") final AnalysisState analysisState, | ||
| @JsonProperty("analysisJustification") final AnalysisJustification analysisJustification) { | ||
| this.isSuppressed = isSuppressed; | ||
| this.analysisState = analysisState; | ||
| this.analysisJustification = analysisJustification; | ||
| } | ||
|
|
||
| @XmlElement | ||
| public boolean isSuppressed() { | ||
| return isSuppressed; | ||
| } | ||
|
|
||
| @XmlElement | ||
| public AnalysisState getAnalysisState() { | ||
| return analysisState; | ||
| } | ||
|
|
||
| @XmlElement | ||
| public AnalysisJustification getAnalysisJustification() { | ||
| return analysisJustification; | ||
| } | ||
|
|
||
| @Override | ||
| public String toString() { | ||
| return ToStringBuilder.reflectionToString(this, ToStringStyle.JSON_STYLE); | ||
| } | ||
| } |
66 changes: 66 additions & 0 deletions
66
src/main/java/io/github/pmckeown/dependencytrack/finding/AnalysisDecisionRequest.java
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,66 @@ | ||
| package io.github.pmckeown.dependencytrack.finding; | ||
|
|
||
| import org.apache.commons.lang3.builder.ToStringBuilder; | ||
| import org.apache.commons.lang3.builder.ToStringStyle; | ||
|
|
||
| import io.github.pmckeown.dependencytrack.finding.Analysis.AnalysisJustification; | ||
| import io.github.pmckeown.dependencytrack.finding.Analysis.AnalysisState; | ||
|
|
||
| public class AnalysisDecisionRequest { | ||
|
|
||
| /* | ||
| * For project, component and vulnerability the according UUID must be used | ||
| */ | ||
| private String project; | ||
| private String component; | ||
| private String vulnerability; | ||
| private AnalysisState analysisState; | ||
| private AnalysisJustification analysisJustification; | ||
| private String analysisDetails; | ||
| private boolean isSuppressed; | ||
|
|
||
| public AnalysisDecisionRequest(final String project, final String component, final String vulnerability, | ||
| final AnalysisState analysisState, final AnalysisJustification analysisJustification, | ||
| final String analysisDetails, final boolean isSuppressed) { | ||
| this.project = project; | ||
| this.component = component; | ||
| this.vulnerability = vulnerability; | ||
| this.analysisState = analysisState; | ||
| this.isSuppressed = isSuppressed; | ||
| this.analysisJustification = analysisJustification; | ||
| this.analysisDetails = analysisDetails; | ||
| } | ||
|
|
||
| public String getProject() { | ||
| return project; | ||
| } | ||
|
|
||
| public String getComponent() { | ||
| return component; | ||
| } | ||
|
|
||
| public String getVulnerability() { | ||
| return vulnerability; | ||
| } | ||
|
|
||
| public AnalysisState getAnalysisState() { | ||
| return analysisState; | ||
| } | ||
|
|
||
| public AnalysisJustification getAnalysisJustification() { | ||
| return analysisJustification; | ||
| } | ||
|
|
||
| public String getAnalysisDetails() { | ||
| return analysisDetails; | ||
| } | ||
|
|
||
| public boolean isSuppressed() { | ||
| return isSuppressed; | ||
| } | ||
|
|
||
| @Override | ||
| public String toString() { | ||
| return ToStringBuilder.reflectionToString(this, ToStringStyle.JSON_STYLE); | ||
| } | ||
| } |
Oops, something went wrong.