Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

JENKINS-74934: Display project references in OWASP dependency check table #156

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

mbrannstrom
Copy link

@mbrannstrom mbrannstrom commented Nov 28, 2024

Display project references in OWASP dependency check table.

See JENKINS-74934 for more information.

Parse "dependency/projectReferences/projectReference" from the dependency-check XML, available in dependency-check.1.7.xsd through dependency-check.4.0.xsd (latest).

Then display the value in the Dependency-Check Reports table, and also make it filterable (searchable).

Testing done

Added test-case to verify that XML parsing works fine (see ReportParserTest.testProjectReferences)

Deployed plugin to Jenkins installation and verified that the plugin works as intended.

Note that old jobs that were run with a previous version of the dependency-check plugin will not have the project references value populated in the table. It seems like the parsed Java objects are stored for historical jobs, rather than the original XML. However, new jobs will have value, as shown in the screenshot.

Also verified that the new table field is searchable (worked out of the box).

Submitter checklist

  • Make sure you are opening from a topic/feature/bugfix branch (right side) and not your main branch!
  • Ensure that the pull request title represents the desired changelog entry
  • Please describe what you did
  • Link to relevant issues in GitHub or Jira
  • Link to relevant pull requests, esp. upstream and downstream changes
  • Ensure you have provided tests - that demonstrates feature works or fixes the issue

Screenshot

Skärmavbild 2024-11-28 kl  11 11 01

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant