Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merge master to SEI_CERT_MET01_J #12

Merged
merged 19 commits into from
Jun 8, 2023
Merged

Merge master to SEI_CERT_MET01_J #12

merged 19 commits into from
Jun 8, 2023

Conversation

JuditKnoll
Copy link
Collaborator

@JuditKnoll JuditKnoll commented Jun 8, 2023

Merged the newest version of the master to the feature branch and resolved merge conflicts.
The build is successful, of course.


Make sure these boxes are checked before submitting your PR -- thank you!

  • Added an entry into CHANGELOG.md if you have changed SpotBugs code

renovate bot and others added 19 commits May 2, 2023 22:00
…34.0 (spotbugs#2420)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…#2419)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…#2421)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
* Added cwe taxonomy to SARIF report spotbugs#2321

- added CWE 4.10 JSON to /etc
- added classes for the CWE weaknesses
- added the SARIF taxon element
- extended Rule, SarifBugReporter and BugCollectionAnalyser classes to include CWE details
- added a GUIDCalculator which implements UUIDv5

* Tests for CWE taxonomies in SARIF report spotbugs#2321

- fixed issues detected while testing
- New BugCollectionAnalyserTest
- added test for CWE taxonomies to SarifBugReporterTest
- applied spotless rules to source code
- made Taxon comparable

* Remove org.eclipse.buildship.core.prefs spotbugs#2321

* Fix SARIF validation issues spotbugs#2321

- CWEs without a severity level have no severity level assigned to them
- convert CWE severity levels to  SARIF severity levels
- the taxon id and relationship id are now strings rather than integers

* Fix tool component spotbugs#2321

* Add an entry to the CHANGELOG.md spotbugs#2321

* Remove printStackTrace from WeaknessCatalog.java spotbugs#2321

* Fix logger in WeaknessCatalogTest.java spotbugs#2321

* Remove extensive Spotbugs copyrght information spotbugs#2321

* Added CWE conversion script spotbugs#2321
spotbugs#2427)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…tions to v2.19.1 (spotbugs#2423)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
* UnionBugs2 now prints to temporary file in order to support large argument list (win)

* UnionResults only expects one argument and can read multiple .xml file paths from one .txt file

* Added UnionResults & UnionBugs2 changes to CHANGELOG.md

* Fixed formatting for UnionResults.java

* Added tests for UnionBugs2Test

* added test for UnionResults

* fixed formatting violations for UnionBugs2 & UnionBugs2Test

* elaborated on test name in UnionBugs2Test

* fixed formatting for UnionResultsTest

---------

Co-authored-by: Simon Hammer <simon.hammer@dk.saabgroup.com>
Co-authored-by: Judit Knoll <judit.knoll@sigmatechnology.com>
* fix TestASM, field name message, add tests

* update CHANGELOG.md

* Fix test

---------

Co-authored-by: Judit Knoll <judit.knoll@sigmatechnology.com>
)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…#2424)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
* New bug type: ASE_ASSERTION_WITH_SIDE_EFFECT

Assertions must never have side effects because they make the behavior of the program dependent on the option whether assertions are enabled or disabled. Therefore we introduced a new detector `FindAssertionsWithSideEffects` to detect such cases and report `ASE_ASSERTION_WITH_SIDE_EFFECT` for each of them. Assertions which contain a method call are also checked andd `ASE_ASSERTION_WITH_SIDE_EFFECT_METHOD` is reported on them if the called method looks like a setter and the object is an instance of a mutable class.

Co-authored-by: Gábor Kutas <@vodorok>

* Typo fixed

* Updated according to the comments of @KengoTODA

* Typo fixed

* reorder arguments to match method signature, fix typo

* add license header

* CHANGELOG updated

* Fix MutableClasses.looksLikeASetter nullsafe

---------

Co-authored-by: Ádám Balogh <adam.balogh@ericsson.com>
Co-authored-by: Judit Knoll <judit.knoll@sigmatechnology.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…2229)

* fix(deps): update dependency com.google.guava:guava to v32

* Update Ideas_2011_07_22 tests to the new type (spotbugs#2438)

Co-authored-by: Judit Knoll <judit.knoll@sigmatechnology.com>

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Judit Knoll <123470644+JuditKnoll@users.noreply.github.com>
Co-authored-by: Judit Knoll <judit.knoll@sigmatechnology.com>
…35.0 (spotbugs#2441)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…potbugs#2442)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@baloghadamsoftware baloghadamsoftware merged commit aec590c into baloghadamsoftware:SEI_CERT_MET01_J Jun 8, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
4 participants