Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • Java Runtime 11.
  • X-Server access (Linux only). The DISPLAY variable must be set, and access control must be disabled for the xhost command (run xtest xhost +). This is required to ensure that overview images in HTML reports display correctly.
  • OWASP Dependency-Check results in XML format. See the OWASP Dependency-Check documentation for details.
  • Analysis from OWASP Dependency-Check 8.2.1 is supported.

...

The OWASP Dependency-Check Pack is a separate tool and must connect to DTP to send results to your DTP project. Specify the following settings in the settings.properties file located in the installation directory.

dtp.serverSpecifies the host name of the DTP server.
dtp.portSpecifies the DTP port number. Default is 8443.
dtp.userSpecifies the username for DTP authentication.
dtp.password

Specifies the user password for DTP authentication. You can encode your DTP password by running the dependency.sh or dependency.bat with the -encodepass parameter. For example:

./dependencycheck.sh -encodepass=<MYPASSWORD>

dtp.project

Specifies the name of the existing DTP project that you want to link to. 

build.id

Specifies the build that the data should be associated with. For accurate results, the build ID should match the build ID configured in your static analysis tool. 

Usage

If you have not already done so, execute OWASP Dependency-Check. The results should be output to an XML file. To send these results to Parasoft DTP using OWASP Dependency-Check Pack:

...