IntelliJã®gradleプãƒã‚¸ã‚§ã‚¯ãƒˆã«owasp dependency checkã‚’å°Žå…¥ã™ã‚‹ - Qiita#æ¦‚è¦ é–‹ç™ºæ®µéšŽã§ã€ä¾å˜ãƒ©ã‚¤ãƒ–ラリã«è„†å¼±æ€§ãŒè¦‹ã¤ã‹ã‚‹å ´åˆãŒå¤šã€…ã‚ã‚‹ãŒã€è‡ªå‹•çš„ã«æ¤œå‡ºã—ãŸã„。 gradleプラグインã®ã€Œowasp dependency checkã€ã¯ã€ä¾å˜ãƒ©ã‚¤ãƒ–ラリをã€NISTãŒä¸»å‚¬ã™ã‚‹NVD（National Vulnerability Database）ã®ãƒ‡ãƒ¼ã‚¿ã¨ç…§åˆã—ã€æ—¢çŸ¥ã®è„†å¼±ã‚’レãƒãƒ¼ãƒˆï¼ˆCVSSスコアã€CVE区分ãªã©ï¼‰ã™ã‚‹ã€‚ IntelliJã®gradleプãƒã‚¸ã‚§ã‚¯ãƒˆã«ã€Œowasp dependency checkã€ã‚’å°Žå…¥ã—ã€ä¾å˜ãƒ©ã‚¤ãƒ–ラリã®è„†å¼±æ€§ã‚’検出ã™ã‚‹ã‚¿ã‚¹ã‚¯ã‚’実践ã—ã¦ã¿ã‚‹ã€‚ è¨å®šã¯build.gradleã®ã¿ã€å®Ÿè¡Œã‚‚gradleタスクãªã®ã§ã€ä»–ã®IDE(eclipse)ã§ã‚‚åŒæ§˜ã«å°Žå…¥å¯èƒ½ã€‚ #環境 OWASP dependency-check-gradle plugin 3.3.1 gradle: 4.8 IntelliJ IDEA 2018.2.2 (C
{{#tags}}- {{label}}
{{/tags}}