github albuch/sbt-dependency-check v2.1.0

latest releases: v5.1.0, v5.0.0, v4.3.0...
3 years ago

Updated dependency-check-core to v6.0.3 (#140). See release notes of DependencyCheck v5.3.1 - v6.0.3

Noteworthy changes

  • After upgrading run dependencyCheckPurge to clean your database
  • Users mirroring the NVD feeds - sbt-dependency-check now requires the use of the version 1.1 data feeds - please ensure you are using 1.1 not the 1.0 data feed.
  • Added an experimental PE Analyzer that reads the PE headers of DLL and EXE files that can be activated with dependencyCheckPEAnalyzerEnabled
  • Added experimental Analyzers for pip and Pipfile that can be activated with dependencyCheckPipAnalyzerEnabled , dependencyCheckPipfileAnalyzerEnabled,
  • Added an experimental Analyzer for Mix Audit to scan Elixir dependencies that can be activated with dependencyCheckMixAuditAnalyzerEnabled. Configure dependencyCheckMixAuditPath to point to the mix_audit binary
  • Added dependencyCheckCveUser and dependencyCheckCvePassword settings to support NVD feed mirrors with Basic Authentication

Don't miss a new sbt-dependency-check release

NewReleases is sending notifications on new releases.