首页
开源
资讯
活动
开源许可证
软件工程云服务
软件代码质量检测云服务
持续集成与部署云服务
社区个性化内容推荐服务
贡献审阅人推荐服务
群体化学习服务
重睛鸟代码扫描工具
登录
注册
代码拉取完成,页面将自动刷新
Watch
14
Star
27
Fork
43
OpenHarmony-SIG
/
tools_oat
Fork 仓库
加载中
取消
确认
代码
Issues
5
Pull Requests
0
Wiki
2
统计
发行版
最新版
v2.0.0
83830a6
2024-01-24 15:20
对比
v2.0.0 Release版本
高亮(Kubi)
## 更新内容 * #I62MMP 补充js等框架中简单license声明的识别能力 由 @jalenchen 贡献 https://gitee.com/openharmony-sig/tools_oat/pulls/44 * fix issue#I8JDS9 由 @elouan 贡献 https://gitee.com/openharmony-sig/tools_oat/pulls/45 * fix issue#I8BG28 README文件增加工具运行成功案例 由 @wang-jingwei 贡献 https://gitee.com/openharmony-sig/tools_oat/pulls/49 * fix issue#I8YGQC OAT依赖开源软件版本升级 由 @wang-jingwei 贡献 https://gitee.com/openharmony-sig/tools_oat/pulls/51 * OAT二进制溯源校验--支持OAT.xml 中预编译二进制的参考溯源信息配置 由 @kubigao 贡献 https://gitee.com/openharmony-sig/tools_oat/pulls/43 * fix issue#I8P8OW ts文件被误识别二进制文件问题 由 @wang-jingwei 贡献 https://gitee.com/openharmony-sig/tools_oat/pulls/50 **完整的更新日志**: https://gitee.com/openharmony-sig/tools_oat/compare/v2.0.0-beta.2...v2.0.0
最后提交信息为:
!51
fix issue#I8YGQC OAT依赖开源软件版本升级
v2.0.0-beta.2
ca2ca25
2022-11-02 14:45
对比
v2.0.0-beta.2
chenyaxun
(一)增加扫描后输出一份详细的扫描报告,便于评审时全面审核各类风险确认细节,包括如下内容: 1、扫描溯源信息:扫描用户、时间、工具名、工具版本、运行工具的命令 2、工程基本信息:工程名、工程主许可 3、扫描汇总信息:工程文件数、被过滤文件数、被过滤策略数、许可证数、版权声明数、等 4、扫描详细清单:被过滤文件清单、被过滤策略清单、许可证及版权声明清单等 5、项目的OAT定制规则。 (二)优化代码的外部依赖,便于维护。 扫描详情示例如下: ========Report Basic Information======== Report User: jalenchen Report Time: 2022-10-29T11:58:51Z Report Tool: OAT Report Tool Version: 2.0.0-beta.1 Report Notes: Generated by OAT,If you have any questions or concerns, please create issue at https://gitee.com/openharmony-sig/tools_oat/issues Report Command: java -jar ohos_ossaudittool-2.0.0-beta.1.jar -mode s -s C:/_chen/projects/code-v3.2-Beta2/OpenHarmony/base/xxx -n third_party_xxx ========Report Project List======== Report Project Count: 1 Project Begin 1/1: ========Project Basic Information======== Project Name: xxx Project Home Page: xxx Project Branch: Project Commit Id: Project Version: Project Main License: Apache-2.0 ========Project Summary Information======== Project File Count: 37 Project Normal File Count: 31 Project Filtered File Count: 6 Project Filtered By Header File Count: 0 Policy Filtered-FileName Count: 0 Policy Filtered-FileType Count: 2 Policy Filtered-LicenseHeader Count: 0 Policy Filtered-Compatibility Count: 0 Policy Filtered-Copyright Count: 0 Project License Count: 2 Project Normal License Count: 1 Project Abnormal License Count: 1 Project Compatible License Count: 1 Project Not Compatible License Count: 0 Project Copyright Count: 1 Project Normal Copyright Count: 1 Project Abnormal Copyright Count: 0 Policy Not Passed-FileType Count: 1 Policy Not Passed-Compatibility Count: 0 Policy Not Passed-WrongLicenseHeader Count: 2 Policy Not Passed-NoLicenseHeader Count: 0 Policy Not Passed-WrongCopyright Count: 0 Policy Not Passed-NoCopyright Count: 2 Project License File: TRUE Project README: TRUE Project README.OpenSource: TRUE ========Project Filtered File Information======== Project Filtered File md C:/_chen/projects/code-v3.2- xxx Project Filtered File git C:/_chen/projects/code-v3.2- xxx ========Project Filtered Policy Information======== Policy Filtered-FileType-!archive binary C:/_chen/projects/code-v3.2- xxx Policy Filtered-FileType-!archive binary C:/_chen/projects/code-v3.2- xxx ========Project License Information======== Project Normal License Apache-2.0 Project Abnormal License xxx Project Compatible License Apache-2.0 ========Project Copyright Information======== Project Normal Copyright Copyright (c) 2021 Huawei Device Co., Ltd. XXXXXXXXX Policy Not Passed Begin XXXXXXXXX Policy Not Passed-FileType C:/_chen/projects/code-v3.2-Beta2/OpenHarmony/base/xxx.so Policy Not Passed-WrongLicenseHeader InvalidLicense C:/_chen/projects/code-v3.2- Policy Not Passed-WrongLicenseHeader InvalidLicense C:/_chen/projects/code-v3.2- Policy Not Passed-NoCopyright NULL C:/_chen/projects/code-v3.2- Policy Not Passed-NoCopyright NULL C:/_chen/projects/code-v3.2- XXXXXXXXX Policy Not Passed End XXXXXXXXX ========Project OAT.xml======== Project Config: <configuration> <oatconfig> <licensefile></licensefile> <policylist> <policy name="projectPolicy" desc=""> xxxxxxxxxxxxxxx </policy> </policylist> <filefilterlist> <filefilter name="binaryFileTypePolicyFilter" desc="Filters for binary file policies" > xxxxxxxxxxxxxxx </filefilter> </filefilterlist> </oatconfig> </configuration>
最后提交信息为:
!42
支持导出扫描详情报告
v2.0.0-beta.1
eac6111
2022-09-14 19:31
对比
v2.0.0-beta.1
chenyaxun
1、解决漏洞: --------------------------- 漏洞编号: CVE-2021-44228 CVE-2021-45046 CVE-2021-44832 CVE-2021-45105 CVE-2020-9488 漏洞归属组件: log4j 漏洞归属版本: 2.10.0 CVSS V3.0分值: 10.00,9.00,6.60,5.90,3.70 --------------------------- 漏洞编号: CVE-2022-25647 漏洞归属组件: gson 漏洞归属版本: 2.8.0 CVSS V3.0分值: 7.50 漏洞简述: https://nvd.nist.gov/vuln/detail/CVE-2022-25647 --------------------------- 漏洞编号: CVE-2021-37714 漏洞归属组件: jsoup 漏洞归属版本: 1.11.3 CVSS V3.0分值: 7.50 漏洞简述: https://nvd.nist.gov/vuln/detail/CVE-2021-37714 --------------------------- 2、支持多种命令行扫描模式 3、支持命令行传入检查规则进行扫描 4、支持指定文件夹识别Project清单并扫描 5、重构,支持扫描流程各环节可扩展
最后提交信息为:
!40
解决批量扫描模式下大量工程且包含超大工程场景下的性能问题
下载
请输入验证码,防止盗链导致资源被占用
取消
下载