GitHub Viewer
4.0.0
org.owasp
benchmark
1.2
war
OWASP Benchmark for Java
OWASP Benchmark is a Java test suite designed to evaluate the accuracy, coverage, and speed of automated software vulnerability detection tools.
https://owasp.org/www-project-benchmark/
davewichers
Dave Wichers
dave.wichers@owasp.org
GNU General Public License, version 2 (GPL2)
https://choosealicense.com/licenses/gpl-2.0/
findsecbugs
com.github.spotbugs
spotbugs-maven-plugin
compile
spotbugs
Max
Low
true
${basedir}/src/main/resources/findbugs-security-include.xml
${basedir}/src/main/resources/findbugs-security-exclude.xml
com.h3xstream.findsecbugs
findsecbugs-plugin
1.11.0
deploy
maven-antrun-plugin
ldap-server
package
run
database-server
package
run
database-init
package
run
org.codehaus.cargo
cargo-maven3-plugin
300000
tomcat${tomcat.major.version}x
${tomcat.url}
${log.directory}/cargo-output.log
false
${log.directory}/cargo.log
${basedir}/src/config/${runenv}/server.xml
conf
true
${basedir}/src/config/${runenv}/context.xml
conf
true
${project.build.directory}/tomcat${tomcat.major.version}x
8443
https
HTTP/1.1
ISO-8859-1
false
TLS
${project.basedir}/.keystore
changeit
tomcat
true
${tomcat.jvmargs}
${tomcat.jvmargs.debug}
deploywcontrast
maven-antrun-plugin
ldap-server
package
run
database-server
package
run
database-init
package
run
org.codehaus.cargo
cargo-maven3-plugin
300000
tomcat${tomcat.major.version}x
${tomcat.url}
${log.directory}/cargo-output.log
false
${log.directory}/cargo.log
${basedir}/src/config/${runenv}/server.xml
conf
true
${basedir}/src/config/${runenv}/context.xml
conf
true
${project.build.directory}/tomcat${tomcat.major.version}x
-Xmx8G
-javaagent:${basedir}/tools/Contrast/contrast.jar
-Dcontrast.dir=${basedir}/tools/Contrast/working
-Dcontrast.config.path=${basedir}/tools/Contrast/contrast.yaml
8443
https
HTTP/1.1
ISO-8859-1
false
TLS
${project.basedir}/.keystore
changeit
tomcat
true
deploywseeker
-javaagent:${basedir}/tools/seeker/seeker-agent.jar
-Dseeker.server.url=https://server.example.com:8888
-Dseeker.project.key=Benchmark
maven-antrun-plugin
ldap-server
package
run
database-server
package
run
database-init
package
run
org.codehaus.cargo
cargo-maven3-plugin
300000
tomcat${tomcat.major.version}x
${tomcat.url}
${log.directory}/cargo-output.log
false
${log.directory}/cargo.log
${basedir}/src/config/${runenv}/server.xml
conf
true
${basedir}/src/config/${runenv}/context.xml
conf
true
${project.build.directory}/tomcat${tomcat.major.version}x
${seeker.javaagent} ${seeker.server.url} ${seeker.project.key} -Xss2m -Xmx8G
8443
https
HTTP/1.1
ISO-8859-1
false
TLS
${project.basedir}/.keystore
changeit
tomcat
true
deploywcxiast
maven-antrun-plugin
ldap-server
package
run
database-server
package
run
database-init
package
run
org.codehaus.cargo
cargo-maven3-plugin
300000
tomcat${tomcat.major.version}x
${tomcat.url}
${log.directory}/cargo-output.log
false
${log.directory}/cargo.log
${basedir}/src/config/${runenv}/server.xml
conf
true
${basedir}/src/config/${runenv}/context.xml
conf
true
-Xmx8G
-javaagent:${basedir}/tools/CxIAST/cx-launcher.jar
-Diast.home=${basedir}/tools/CxIAST/
-Xverify:none
8443
https
HTTP/1.1
ISO-8859-1
false
TLS
${project.basedir}/.keystore
changeit
tomcat
true
deploywhcl
maven-antrun-plugin
ldap-server
package
run
database-server
package
run
database-init
package
run
org.codehaus.cargo
cargo-maven3-plugin
400000
tomcat${tomcat.major.version}x
${tomcat.url}
${log.directory}/cargo-output.log
false
${log.directory}/cargo.log
${basedir}/src/config/${runenv}/server.xml
conf
true
${basedir}/src/config/${runenv}/context.xml
conf
true
-Xmx8G
-javaagent:${basedir}/tools/HCL/secagent.jar=agent_path=${basedir}/tools/HCL/secagent.jar
-Dsecagent.log=${basedir}/tools/HCL/working/HCL-IAST.hcl
8443
https
HTTP/1.1
ISO-8859-1
false
TLS
${project.basedir}/.keystore
changeit
tomcat
true
javax
javaee-api
7.0
provided
com.sun.jersey
jersey-servlet
1.19.4
commons-codec
commons-codec
1.15
commons-dbcp
commons-dbcp
1.4
commons-lang
commons-lang
2.6
org.slf4j
slf4j-log4j12
1.7.32
org.apache.directory.server
apacheds-core
${version.apacheds}
bouncycastle
bcprov-jdk15
commons-collections
commons-collections
org.apache.directory.server
apacheds-core-api
${version.apacheds}
org.apache.directory.server
apacheds-core-constants
${version.apacheds}
org.apache.directory.server
apacheds-jdbm-partition
${version.apacheds}
org.apache.directory.server
apacheds-jdbm-store
${version.apacheds}
org.apache.directory.server
apacheds-ldif-partition
${version.apacheds}
org.apache.directory.server
apacheds-protocol-ldap
${version.apacheds}
org.apache.directory.server
apacheds-protocol-shared
${version.apacheds}
org.apache.directory.server
apacheds-xdbm-base
${version.apacheds}
org.apache.directory.shared
shared-ldap
${version.apache-shared-ldap}
commons-collections
commons-collections
org.apache.directory.shared
shared-ldap-schema
${version.apache-shared-ldap}
org.apache.directory.shared
shared-ldap-schema-loader
${version.apache-shared-ldap}
org.apache.directory.shared
shared-ldap-schema-manager
${version.apache-shared-ldap}
org.apache.httpcomponents
httpclient
4.5.13
org.apache.httpcomponents
httpcore
4.4.14
org.bouncycastle
bcprov-jdk15on
1.69
org.hibernate
hibernate-core
${version.hibernate}
commons-collections
commons-collections
org.hibernate
hibernate-entitymanager
${version.hibernate}
org.jdom
jdom2
2.0.6
org.hsqldb
hsqldb
2.3.6
org.owasp.esapi
esapi
2.2.3.1
org.springframework
spring-context
${version.springframework}
org.springframework
spring-jdbc
${version.springframework}
org.springframework
spring-tx
${version.springframework}
org.springframework
spring-web
${version.springframework}
org.springframework
spring-webmvc
${version.springframework}
xml-apis
xml-apis
1.4.01
benchmark
co.leantechniques
maven-buildtime-extension
3.0.3
${basedir}/src/main/resources
org.apache.maven.plugins
maven-antrun-plugin
3.0.0
org.apache.maven.plugins
maven-assembly-plugin
3.3.0
org.apache.maven.plugins
maven-dependency-plugin
3.2.0
com.sun.jersey:jersey-servlet
commons-dbcp:commons-dbcp
org.hibernate:hibernate-entitymanager
org.slf4j:slf4j-log4j12
org.springframework:spring-webmvc
org.apache.maven.plugins
maven-antrun-plugin
org.apache.maven.plugins
maven-clean-plugin
3.1.0
org.apache.maven.plugins
maven-compiler-plugin
3.8.1
true
1000m
2000m
org.apache.maven.plugins
maven-deploy-plugin
3.0.0-M1
org.apache.maven.plugins
maven-enforcer-plugin
3.0.0-M3
org.codehaus.mojo
extra-enforcer-rules
1.3
enforce-bytecode-version
enforce
1.7
com.google.guava:guava
Dependencies shouldn't require Java 8+.
warn
enforce-jdk-version
enforce
1.7
Benchmark is currently written to support Java 7 and 8.
org.apache.maven.plugins
maven-help-plugin
3.2.0
org.apache.maven.plugins
maven-install-plugin
3.0.0-M1
org.apache.maven.plugins
maven-pmd-plugin
3.14.0
true
1.7
org.apache.maven.plugins
maven-project-info-reports-plugin
3.1.2
org.apache.maven.plugins
maven-resources-plugin
3.2.0
org.apache.maven.plugins
maven-site-plugin
3.9.1
org.apache.maven.plugins
maven-surefire-plugin
3.0.0-M5
org.apache.maven.plugins
maven-war-plugin
3.3.2
${maven.war.webxml}
org.codehaus.cargo
cargo-maven3-plugin
1.9.7
com.github.spotbugs
spotbugs-maven-plugin
${version.spotbugs.maven}
Max
Low
true
com.github.spotbugs
spotbugs
${version.spotbugs}
com.internetitem
write-properties-file-maven-plugin
1.0.1
org.jasig.mojo.jspc
jspc-maven-plugin
2.0.2
com.diffplug.spotless
spotless-maven-plugin
2.13.0
origin/master
*.md
data/**/*.*
*results/**/*.*
scorecard/**/*.*
target/**/*.*
false
true
4
**/*.html
data/**/*.*
results/**/*.*
target/**/*.*
HTML
${basedir}/DevStyleHtml.prefs
**/*.xml
data/**/*.*
results/**/*.*
scorecard/**/*.*
target/**/*.*
XML
${basedir}/DevStyleXml.prefs
1.7
spotless-apply
compile
apply
org.apache.maven.plugins
maven-jxr-plugin
2.3
org.codehaus.mojo
versions-maven-plugin
2.5
dependency-updates-report
plugin-updates-report
property-updates-report
org.apache.maven.plugins
maven-project-info-reports-plugin
3.0.0
dependency-convergence
1.7
1.7
false
UTF-8
UTF-8
${basedir}/src/config/web.xml
local
-Xms1G
-Xmx8G
-Xdebug
-Xrunjdwp:transport=dt_socket,server=y,suspend=n,address=5050
-Xnoagent
-Djava.compiler=NONE
${project.build.directory}/log
1.5.7
0.9.19
1.6.0
3.6.10.Final
4.3.0
4.4.1
4.3.30.RELEASE
8
8.5.70
https://archive.apache.org/dist/tomcat/tomcat-${tomcat.major.version}/v${version.tomcat}/bin/apache-tomcat-${version.tomcat}.zip