Skip to content

Latest commit

 

History

History
31 lines (19 loc) · 768 Bytes

File metadata and controls

31 lines (19 loc) · 768 Bytes

Dependency suggest

This rust program will download the latest version of Java dependency having the same major version. Then it will check if the latest version contains any vulnerabilities.

Why Rust?

I just want to practice Rust.

Prerequisite

Dependency-check CLI is required to perform vulnerability check.

You can download from the official site.

Build

cargo build

Execute

DEPENDENCY_CHECK_SCRIPT=<Path of dependency-check.sh> ./dependency-suggest <Group ID> <Artifact ID> <Version>

Example:

DEPENDENCY_CHECK_SCRIPT=~/Downloads/dependency-check/bin/dependency-check.sh ./dependency-suggest org.apache.logging.log4j log4j-core 2.17.0