Skip to content

Commit d64600b

Browse files
authoredSep 7, 2022
Prepare 1.12.0-SNAPSHOT (#874)
* Prepare 1.12.0-SNAPSHOT
1 parent 0421f12 commit d64600b

File tree

6 files changed

+12
-5
lines changed

6 files changed

+12
-5
lines changed
 

‎README.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ The [jars](https://mvnrepository.com/artifact/com.sap.oss.phosphor/fosstars-rati
3838
<dependency>
3939
<groupId>com.sap.oss.phosphor</groupId>
4040
<artifactId>fosstars-rating-core</artifactId>
41-
<version>1.10.1</version>
41+
<version>1.11.0</version>
4242
</dependency>
4343
```
4444

‎pom.xml

+1-1
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66

77
<groupId>com.sap.oss.phosphor</groupId>
88
<artifactId>fosstars-rating-core</artifactId>
9-
<version>1.11.0-SNAPSHOT</version>
9+
<version>1.12.0-SNAPSHOT</version>
1010
<packaging>jar</packaging>
1111

1212
<name>Fosstars Rating Core</name>

‎src/main/java/com/sap/oss/phosphor/fosstars/advice/oss/github/OssSecurityGithubAdvisor.java

+2
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,7 @@
1414
import com.sap.oss.phosphor.fosstars.advice.oss.OwaspDependencyCheckAdvisor;
1515
import com.sap.oss.phosphor.fosstars.advice.oss.SecurityPolicyAdvisor;
1616
import com.sap.oss.phosphor.fosstars.advice.oss.SigningAdvisor;
17+
import com.sap.oss.phosphor.fosstars.advice.oss.SnykAdvisor;
1718

1819
/**
1920
* This is an advisor for open-source projects hosted on GitHub.
@@ -38,6 +39,7 @@ public OssSecurityGithubAdvisor() {
3839
new SigningAdvisor(AdviceForGitHubContextFactory.INSTANCE),
3940
new NoHttpAdvisor(AdviceForGitHubContextFactory.INSTANCE),
4041
new BanditAdvisor(AdviceForGitHubContextFactory.INSTANCE),
42+
new SnykAdvisor(AdviceForGitHubContextFactory.INSTANCE),
4143
new GoSecAdvisor(AdviceForGitHubContextFactory.INSTANCE));
4244
}
4345
}

‎src/test/java/com/sap/oss/phosphor/fosstars/model/score/oss/SnykDependencyScanScoreTest.java

+1-3
Original file line numberDiff line numberDiff line change
@@ -59,6 +59,4 @@ public void testCalculateWithAllUnknown() {
5959
public void testWithNoInfo() {
6060
new DependencyScanScore().calculate();
6161
}
62-
}
63-
64-
62+
}

‎src/test/resources/com/sap/oss/phosphor/fosstars/model/rating/oss/OssArtifactSecurityRatingTestVectors.yml

+5
Original file line numberDiff line numberDiff line change
@@ -683,6 +683,11 @@ elements:
683683
type: "BooleanFeature"
684684
name: "If a project uses Dependabot"
685685
flag: false
686+
- type: "BooleanValue"
687+
feature:
688+
type: "BooleanFeature"
689+
name: "If a project uses Snyk"
690+
flag: false
686691
- type: "VulnerabilitiesValue"
687692
feature:
688693
type: "VulnerabilitiesFeature"

‎src/test/resources/com/sap/oss/phosphor/fosstars/model/score/oss/DependencyScanScoreTestVectors.yml

+2
Original file line numberDiff line numberDiff line change
@@ -134,13 +134,15 @@ elements:
134134
packageManagers:
135135
packageManagers:
136136
- "MAVEN"
137+
- "GOMODULES"
137138
- type: "LanguagesValue"
138139
feature:
139140
type: "LanguagesFeature"
140141
name: "A set of programming languages"
141142
languages:
142143
elements:
143144
- "JAVA"
145+
- "GO"
144146
expectedScore:
145147
type: "DoubleInterval"
146148
from: 8.0

0 commit comments

Comments
 (0)
Please sign in to comment.