SOOS Core SCA Java Library

SOOS is an independent software security company, located in Winooski, VT USA, building security software for your team. SOOS, Software security, simplified.

Use SOOS to scan your software for vulnerabilities and open source license issues with SOOS Core SCA. Generate SBOMs. Govern your open source dependencies. Run the SOOS DAST vulnerability scanner against your web apps or APIs.

Demo SOOS or Register for a Free Trial.

If you maintain an Open Source project, sign up for the Free as in Beer SOOS Community Edition.

Development

Requirements

• Maven
• JDK 11

Build

mvn clean compile assembly:single

Note: Copy the file soos-ci-analysis-java to the soos folder inside your project

Run Locally

Set environment variables SOOS_API_KEY and SOOS_CLIENT_ID

Command Prompt

java -jar -Dof=fail_the_build -Ddte=soos -Dfte= -Dwd=./ -Darmw=300 -Darpi=10 -Dburi=https://api.soos.io/api/ -Dscp=./ -Dpn="Java Test" soos/soos-sca.jar

Powershell

java -jar "-Dof=fail_the_build" "-Ddte=soos" "-Dfte=" "-Dwd=./" "-Darmw=300" "-Darpi=10" "-Dburi=https://api.soos.io/api/" "-Dscp=./" "-Dpn=test" .\soos\soos-sca.jar