Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Vulnerabilities are reported in DTP as violations of the OWASP Top 10 2021 A6: Vulnerable and Outdated Components guideline. Merging the OWASP Dependency Check Pack data with code analysis results from Parasoft Jtest or dotTEST enables the full implementation of your OWASP security compliance initiative.

  


Requirements

  • Java Runtime 8 or higher (provided in DTP installation).
  • X-Server access (Linux only). The DISPLAY variable must be set and access control must be disabled for the xhost command (run xtest xhost +). This is required to ensure that overview images in HTML reports display correctly.
  • OWASP dependency-check results in XML format. See the OWASP dependency-check documentation for details.
  • Analysis from OWASP dependency check 6.4.1 is supported.
  • A valid license for Parasoft Test 10.4 added to your DTP License Server.

...

After copying the rules, documentation associated with OWASP dependency-check violations will be available in DTP interfaces, such as the Documentation tab of the Violations Explorer. 

Connecting to DTP

The OWASP Dependency-Check Pack is a separate tool and must connect to DTP to acquire a license and to send results to your DTP project. Specify  Specify the following settings in the settings.properties file located in the installation directory:

dtp.server

Specifies the host name of the DTP server.

...