Versions Compared

Old Version 4

changes.mady.by.user Robert Andelin

Saved on

compared with

New Version Current

changes.mady.by.user Robert Andelin

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Published by Scroll Versions from space DTPDEVEL and version 2024.1

...

  • Java Runtime 11.
  • X-Server access (Linux only). The DISPLAY variable must be set, and access control must be disabled for the xhost command (run xhost +). This is required to ensure that overview images in HTML reports display correctly.
  • OWASP Dependency-Check results in XML format. See the OWASP Dependency-Check documentation for details.
  • Analysis from OWASP Dependency-Check 8Check 10.0.2 .1 is supported.

Deployment

  1. Extract the dependency-check-pack-<VERSION>.zip file distribution to the desired location. Some extractor tools, such as the default Windows extractors, will create a directory for the dependency check pack files. We recommend creating an installation home directory if your tool does not automatically create a directory to hold the extracted files. 
  2. Follow the instructions for installing Security Compliance Pack into your DTP environment. This step is not required to run the OWASP Dependency-Check Pack, but it is required for viewing results in DTP.

...

After copying the rules, documentation associated with OWASP Dependency-Check violations will be available in DTP interfaces, such as the Documentation tab of the Violations Explorer. 

End User License Agreement Acceptance

Set the following property to accept the Parasoft End User License Agreement (please read the EULA at https://www.parasoft.com/license):

Code Block
titleEULA
parasoft.eula.accepted=true

Connecting to DTP

The OWASP Dependency-Check Pack is a separate tool and must connect to DTP to send results to your DTP project. Specify the following settings in the settings.properties file located in the installation directory.

dtp.serverurlSpecifies the host name of the  the URL to your DTP server. dtp.portSpecifies the DTP port number. Default is 8443Remember to include the https:// protocol; DTP requires https:// connections from other Parasoft tools.
dtp.userSpecifies the username for DTP authentication.
dtp.password

Specifies the user password for DTP authentication. You can encode your DTP password by running the dependency.sh or dependency.bat with the -encodepass parameter. For example:

./dependencycheck.sh -encodepass=<MYPASSWORD>

dtp.project

Specifies the name of the existing DTP project that you want to link to. 

build.id

Specifies the build that the data should be associated with. For accurate results, the build ID should match the build ID configured in your static analysis tool. 

...