From c9c354f161274da59e575290a9f68c9d3797bb8b Mon Sep 17 00:00:00 2001 From: Andreas Dann Date: Tue, 14 Nov 2023 19:06:18 +0100 Subject: [PATCH 1/4] update version of maven plugin --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index d589110be..771620163 100644 --- a/README.md +++ b/README.md @@ -49,7 +49,7 @@ This section provides the bare minimum to setup Steady and to use its Maven plug For Maven, `cd` into your project and run the `app` analysis goal as follows (see [here](https://eclipse.github.io/steady/user/manuals/analysis/) for more information about available goals): - `mvn org.eclipse.steady:plugin-maven:3.2.0:app` + `mvn org.eclipse.steady:plugin-maven:3.2.5:app` **Note**: During application scans, a lot of information about its dependencies is uploaded to the backend, which makes that the first scan takes significantly more time than later scans of the same application. From 0233a1800e3e75fcf86d1b4baf804098aa1f7474 Mon Sep 17 00:00:00 2001 From: Andreas Dann Date: Tue, 14 Nov 2023 19:08:40 +0100 Subject: [PATCH 2/4] start-steady script does not exist replace with setup-steady.sh in readme --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 771620163..70f7e808c 100644 --- a/README.md +++ b/README.md @@ -41,7 +41,7 @@ This section provides the bare minimum to setup Steady and to use its Maven plug **Notes**: - Tested with Docker 20.10.11 + Docker Compose 1.29.2 on Intel Macs with macOS 12.3.1, and Docker 20.10.15 + Docker Compose 1.29.0 on Ubuntu 20.04.4 and 18.04.6. - - During its first execution, triggered by the setup script or directly using `start-steady.sh -s ui`, the backend will be bootstrapped by downloading and processing code-level information of hundreds of vulnerabilities maintained in the open-source knowledge base [Project KB](https://github.com/sap/project-kb). While the bootstrapping can take up to two hours, later updates will import the delta on a daily basis. Run `start-steady.sh -s none` to shut down all Docker Compose services of the backend. + - During its first execution, triggered by the setup script or directly using `setup-steady.sh -s ui`, the backend will be bootstrapped by downloading and processing code-level information of hundreds of vulnerabilities maintained in the open-source knowledge base [Project KB](https://github.com/sap/project-kb). While the bootstrapping can take up to two hours, later updates will import the delta on a daily basis. Run `setup-steady.sh -s none` to shut down all Docker Compose services of the backend. 2. A Steady **scan client**, e.g. the Maven plugin, analyzes the code of your application project and its dependencies. Being [available on Maven Central](https://search.maven.org/search?q=g:org.eclipse.steady), the clients do not require any installation. However, they need to be run whenever your application's code or dependencies change. From 1b10c6915063a50d12b79e6b56c1faed89ff876b Mon Sep 17 00:00:00 2001 From: Andreas Dann Date: Wed, 15 Nov 2023 11:36:24 +0100 Subject: [PATCH 3/4] added Henrik suggestion --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 70f7e808c..373c4131b 100644 --- a/README.md +++ b/README.md @@ -41,7 +41,7 @@ This section provides the bare minimum to setup Steady and to use its Maven plug **Notes**: - Tested with Docker 20.10.11 + Docker Compose 1.29.2 on Intel Macs with macOS 12.3.1, and Docker 20.10.15 + Docker Compose 1.29.0 on Ubuntu 20.04.4 and 18.04.6. - - During its first execution, triggered by the setup script or directly using `setup-steady.sh -s ui`, the backend will be bootstrapped by downloading and processing code-level information of hundreds of vulnerabilities maintained in the open-source knowledge base [Project KB](https://github.com/sap/project-kb). While the bootstrapping can take up to two hours, later updates will import the delta on a daily basis. Run `setup-steady.sh -s none` to shut down all Docker Compose services of the backend. + - During its first execution, triggered by the setup script triggered by `setup-steady.sh` or directly using `start-steady.sh -s ui`, the backend will be bootstrapped by downloading and processing code-level information of hundreds of vulnerabilities maintained in the open-source knowledge base [Project KB](https://github.com/sap/project-kb). While the bootstrapping can take up to two hours, later updates will import the delta on a daily basis. Run `start-steady.sh -s none` to shut down all Docker Compose services of the backend. 2. A Steady **scan client**, e.g. the Maven plugin, analyzes the code of your application project and its dependencies. Being [available on Maven Central](https://search.maven.org/search?q=g:org.eclipse.steady), the clients do not require any installation. However, they need to be run whenever your application's code or dependencies change. From 05ee19762261501850770040dffb07dd8b8eef8d Mon Sep 17 00:00:00 2001 From: Andreas Dann Date: Mon, 4 Dec 2023 21:11:12 +0100 Subject: [PATCH 4/4] rm duplicate triggered --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 373c4131b..28ae89d87 100644 --- a/README.md +++ b/README.md @@ -41,7 +41,7 @@ This section provides the bare minimum to setup Steady and to use its Maven plug **Notes**: - Tested with Docker 20.10.11 + Docker Compose 1.29.2 on Intel Macs with macOS 12.3.1, and Docker 20.10.15 + Docker Compose 1.29.0 on Ubuntu 20.04.4 and 18.04.6. - - During its first execution, triggered by the setup script triggered by `setup-steady.sh` or directly using `start-steady.sh -s ui`, the backend will be bootstrapped by downloading and processing code-level information of hundreds of vulnerabilities maintained in the open-source knowledge base [Project KB](https://github.com/sap/project-kb). While the bootstrapping can take up to two hours, later updates will import the delta on a daily basis. Run `start-steady.sh -s none` to shut down all Docker Compose services of the backend. + - During its first execution, triggered by the setup script by `setup-steady.sh` or directly using `start-steady.sh -s ui`, the backend will be bootstrapped by downloading and processing code-level information of hundreds of vulnerabilities maintained in the open-source knowledge base [Project KB](https://github.com/sap/project-kb). While the bootstrapping can take up to two hours, later updates will import the delta on a daily basis. Run `start-steady.sh -s none` to shut down all Docker Compose services of the backend. 2. A Steady **scan client**, e.g. the Maven plugin, analyzes the code of your application project and its dependencies. Being [available on Maven Central](https://search.maven.org/search?q=g:org.eclipse.steady), the clients do not require any installation. However, they need to be run whenever your application's code or dependencies change.