Update OWASP suppression date bounds
Recipe ID
org.openrewrite.xml.security.UpdateOwaspSuppressionDateArtifact
org.openrewrite:rewrite-xmlUpdates the expiration date for OWASP suppressions having a matching cve tag. For use with the OWASP dependency-check tool. More details: https://jeremylong.github.io/DependencyCheck/general/suppression.html.
Usage
You’ll need the Moderne CLI configured before running the command below.
mod run . --recipe org.openrewrite.xml.security.UpdateOwaspSuppressionDate --recipe-option "cveList=CVE-2022-1234"If the recipe isn’t available locally, install it with:
mod config recipes jar install org.openrewrite:rewrite-xml:8.88.0Options
| Name | Type | Description |
|---|---|---|
cveListrequired | List | Update suppressions having any of the specified CVE tags. e.g. CVE-2022-1234 |
untilDate | String | Optional. The date to add to the suppression. Default will be 30 days from today. e.g. 2023-01-01 |
Data tables
Structured output this recipe can produce.
- Source files that had resultsSource files that were modified by the recipe run.
org.openrewrite.table.SourcesFileResults - Source files that had search resultsSearch results that were found during the recipe run.
org.openrewrite.table.SearchResults - Source files that errored on a recipeThe details of all errors produced by a recipe run.
org.openrewrite.table.SourcesFileErrors - Recipe performanceStatistics used in analyzing the performance of recipes.
org.openrewrite.table.RecipeRunStats