https://github.com/secure-software-engineering/cognicrypt-ci-integration
This repository contains code for a Jenkins adaptor for CogniCrypt which is based on warnings-ng-plugin https://github.com/jenkinsci/warnings-ng-plugin
https://github.com/secure-software-engineering/cognicrypt-ci-integration
Last synced: 5 months ago
JSON representation
This repository contains code for a Jenkins adaptor for CogniCrypt which is based on warnings-ng-plugin https://github.com/jenkinsci/warnings-ng-plugin
- Host: GitHub
- URL: https://github.com/secure-software-engineering/cognicrypt-ci-integration
- Owner: secure-software-engineering
- License: mit
- Created: 2020-09-14T08:25:00.000Z (over 5 years ago)
- Default Branch: develop
- Last Pushed: 2022-03-21T12:24:18.000Z (almost 4 years ago)
- Last Synced: 2025-05-16T22:35:16.069Z (9 months ago)
- Language: Java
- Size: 61.5 KB
- Stars: 0
- Watchers: 5
- Forks: 1
- Open Issues: 6
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# CogniCrypt for Build Environments
This repository hosts various plugins which integrate
[CogniCrypt Static Analysis](https://www.eclipse.org/cognicrypt/)
into your build environments.
## Contents
Currently this repository lists the following plugins:
1. **Maven build plugin** - `maven`: Runs CogniCrypt analysis at the *verify* phase and reports any crypto API misuses.
Reports can be written to console or into a [SARIF (Static Analysis Results Interchange Format) file](http://docs.oasis-open.org/sarif/sarif/v2.0/csprd01/sarif-v2.0-csprd01.html).
2. **Jenkins Next Generation Warnings plugin** - `jenkins-ng-warnings`: As a post-build-action it takes a SARIF input and presents the findings.
Please see the individual folders for detailed information about building and installing.
## Contributing
TODO
## Limitations
##### Version 1.5-SNAPSHOT
- Maven Plugin only works for JCA CrySL ruleset.
## Credits
This work is part of the research project "AppSecure.nrw - Security-by-Design of Java-based Applications". The project is funded by the European Regional Development Fund (ERDF-0801379).
