Skip to content

Releases: digitalcoyote/NuGetDefense

v3.0.7 Remove Non-Vulnerable Packages from reports

19 Jul 23:07
Compare
Choose a tag to compare

Thansk to PR #94 Packages without vulnerabilities are now removed from the packages report. If you need this restored for any reason, raise an issue and we'll evaluate a solution. Most people won't care about dependencies without vulnerabilities, and this decrease the amount of data that one might need to look over for soltuions with many packages. If you need this, raise an issue or submit a PR with the old behavior gated behind configuration and I'll merge it in.

v3.0.5 Bug Fix Release

07 Jul 23:25
Compare
Choose a tag to compare

Fixes #89 thanks to PR #90 Missing Config leads to Non-Zero Exit Code

Thanks to @ChristopherThiedeVireq for this Fix

v3.0.4 Bug Fix Release

26 Jun 20:07
Compare
Choose a tag to compare

This fix is thanks to @ChristopherThiedeVireq and addresses issues with the JsonReport when a solution is scanned.

v3.0.3

22 Jun 03:17
Compare
Choose a tag to compare

Bug Fix Release:

  • Fixes #83
  • Fixes a problem in GitHubAdvisoryDatabase Source where the vulnerabilities reported were incorrectly keyed

Both of these fixes are again thanks to @a-teece

v3.0.2 Bug Fix Release

16 Jun 02:37
Compare
Choose a tag to compare

A special thanks to @a-teece for finding and fixing the following:

  • #76 Error scanning a solution that includes a wix project
  • #77 Exception when OSSIndex is disabled or fails to update
  • #79 Old style projects are not parsed correctly
  • #80 Incorrect warning message when running on Windows

Fixing GitHub Security Advisory Database Version Parsing

27 Feb 03:08
Compare
Choose a tag to compare

Fixed an issue that caused some Vulnerable versions to parse incorrectly causing exceptions during scans.

Fixed .Net Framework Support

15 Nov 12:58
Compare
Choose a tag to compare
Pre-release

Fixed the NuGetDefense targets file to only add --tfm when a value is able to be appended.

Fixes for Sqlite Cache round 2

06 Nov 04:01
Compare
Choose a tag to compare
Pre-release

With the new unit tests for caching, a few more issues were caught. It would have had trouble caching and reporting cached vulenrablities under a variety of scenarios.

Fixes for Sqlite Cache

01 Nov 00:19
Compare
Choose a tag to compare
Pre-release

Fixed multiple issues with Sqlite caching including problems with the queries and a failure to actually update the cache

Backporting 3.x features to .Net Core 3.1

13 Mar 03:25
Compare
Choose a tag to compare

This should be a very straightforward build of NuGetDefense 3.0.1 targeting netcoreapp3.1 instead of .Net 6