Skip to content

Commit 504cdd2

Browse files
authored
Merge branch 'main' into update-dependencies
2 parents c44d23a + e4d0ad5 commit 504cdd2

1 file changed

Lines changed: 4 additions & 4 deletions

File tree

README.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88
[National Vulnerability Database](https://nvd.nist.gov/) dependency checker tool.
99

1010
For a given project, all the .jar files from its classpath
11-
will be checked for known security vulnerabilities. `nvd-clojure` passes them to a library called [DependencyCheck](https://github.com/jeremylong/DependencyCheck) which does the vulnerability analysis. Quoting the README from that library:
11+
will be checked for known security vulnerabilities. `nvd-clojure` passes them to a library called [DependencyCheck](https://github.com/dependency-check/DependencyCheck) which does the vulnerability analysis. Quoting the README from that library:
1212

1313
> DependencyCheck is a utility that attempts to detect publicly disclosed
1414
> vulnerabilities contained within project dependencies. It does this by
@@ -191,7 +191,7 @@ There are some specific settings below which are worthy of a few comments:
191191
- It shouldn't normally be necessary to change this
192192
* `:suppression-file` default unset
193193
- Allows for CVEs to be permanently or temporarily suppressed.
194-
- See [DependencyCheck documentation](https://jeremylong.github.io/DependencyCheck/general/suppression.html) for the XML file format.
194+
- See [DependencyCheck documentation](https://dependency-check.github.io/DependencyCheck/general/suppression.html) for the XML file format.
195195
- If a nvd-clojure.edn file was automatically generated for you, then this file will also be automatically generated (and enabled) for you.
196196
* `:verbose-summary` default false
197197
- When set to true, the summary table includes a severity determination for all dependencies.
@@ -218,14 +218,14 @@ clojure -J-Dclojure.main.report=stderr -J-Dorg.slf4j.simpleLogger.log.org.apache
218218

219219
## Attribution
220220

221-
`nvd-clojure` uses Jeremy Long's [DependencyCheck](https://github.com/jeremylong/DependencyCheck)
221+
`nvd-clojure` uses Jeremy Long's [DependencyCheck](https://github.com/dependency-check/DependencyCheck)
222222
library to do the heavy lifting.
223223

224224
## References
225225

226226
* https://nvd.nist.gov/
227227
* https://www.owasp.org/index.php/OWASP_Dependency_Check
228-
* https://github.com/jeremylong/DependencyCheck
228+
* https://github.com/dependency-check/DependencyCheck
229229
* https://github.com/liquidz/antq
230230

231231
## License

0 commit comments

Comments
 (0)