Commits

Commit history

1. Commits on Feb 2, 2026

   • Eliminate some unintended vulns in the test cases.

     

     Dave Wichers

     committed
     e6e9c2eView commit details

     Copy full SHA for e6e9c2e

     View code at this pointBrowse repository at this point

   • Minor code cleanup to one method in Utils and removal of some commented

     Show description for 72cf655
     

     Dave Wichers

     committed
     72cf655View commit details

     Copy full SHA for 72cf655

     View code at this pointBrowse repository at this point
2. Commits on Jan 13, 2026

   • Make database helper method private since not intended to be used by

     Show description for 89214f7
     

     Dave Wichers

     committed
     89214f7View commit details

     Copy full SHA for 89214f7

     View code at this pointBrowse repository at this point
3. Commits on Jan 11, 2026

   • fix wrong hostname

     darkspirit510

     committed
     dc9abbaView commit details

     Copy full SHA for dc9abba

     View code at this pointBrowse repository at this point
4. Commits on Mar 2, 2025

   • spotless

     darkspirit510

     committed
     283e0e6View commit details

     Copy full SHA for 283e0e6

     View code at this pointBrowse repository at this point
5. Commits on Feb 15, 2025

   • SonarQube report as Java class

     darkspirit510

     committed
     32933c4View commit details

     Copy full SHA for 32933c4

     View code at this pointBrowse repository at this point
6. Commits on Jan 24, 2025

   • Fix runContrastCodeSec_OnSource.sh script. Add Snyk version to runSnyk

     Show description for f190e05
     

     Dave Wichers

     committed
     f190e05View commit details

     Copy full SHA for f190e05

     View code at this pointBrowse repository at this point
7. Commits on Jan 7, 2025

   • Upgrade a few plugins. Add missing ESAPI property due to previous ESAPI

     Show description for dbb943b
     davewichers

     committed
     dbb943bView commit details

     Copy full SHA for dbb943b

     View code at this pointBrowse repository at this point
8. Commits on Nov 29, 2024

   • Due to ESAPI 2.6.0.0 upgrade, have to drop esapi logging properties file

     Show description for 70a0838
     davewichers

     committed
     70a0838View commit details

     Copy full SHA for 70a0838

     View code at this pointBrowse repository at this point
9. Commits on Apr 15, 2024

   • Upgrade some dependencies and change some tool scripts to produce sarif

     Show description for 00bcf97
     davewichers

     committed
     00bcf97View commit details

     Copy full SHA for 00bcf97

     View code at this pointBrowse repository at this point
10. Commits on Apr 5, 2024

    • Upgrade to new version of LDAP library that works with Java 11.

      Show description for 2c67145
      

      analyst

      committed
      2c67145View commit details

      Copy full SHA for 2c67145

      View code at this pointBrowse repository at this point
11. Commits on Sep 8, 2023

    • fix for SQL queries accumulation in multiple requests on same testcase

      kishan-k2io

      committed
      512523bView commit details

      Copy full SHA for 512523b

      View code at this pointBrowse repository at this point
12. Commits on Nov 29, 2022

    • Change database entry value to be more distinct.

      davewichers

      committed
      54f3770View commit details

      Copy full SHA for 54f3770

      View code at this pointBrowse repository at this point
13. Commits on Mar 30, 2022

    • Upgrade the 2 Apache HTTP Component libraries used by crawler

      Show description for 80a7ff9
      davewichers

      committed
      80a7ff9View commit details

      Copy full SHA for 80a7ff9

      View code at this pointBrowse repository at this point
14. Commits on Mar 29, 2022

    • Remove one unused dependency and fix a minor dependency analyze

      Show description for 151e8a0
      davewichers

      committed
      151e8a0View commit details

      Copy full SHA for 151e8a0

      View code at this pointBrowse repository at this point
15. Commits on Mar 15, 2022

    • Update Benchmark UI so all formats disable autocomplete. Also eliminate all use of

      Show description for 7645fad
      davewichers

      committed
      7645fadView commit details

      Copy full SHA for 7645fad

      View code at this pointBrowse repository at this point

    • Upgrade a bunch of dependencies. Change xml autoformat to join comment lines. Minor tweaks to two run scripts for tools.

      davewichers

      committed
      46e1276View commit details

      Copy full SHA for 46e1276

      View code at this pointBrowse repository at this point
16. Commits on Nov 2, 2021

    • Fix utility method so more 'standard' headers are filtered out when trying to identify the custom header for test cases that use that.

      davewichers

      committed
      b6fa171View commit details

      Copy full SHA for b6fa171

      View code at this pointBrowse repository at this point
17. Commits on Oct 7, 2021

    • Simplify configuration of 2 config files. Minor updates to a number of test cases.

      davewichers

      committed
      8df1619View commit details

      Copy full SHA for 8df1619

      View code at this pointBrowse repository at this point
18. Commits on Sep 23, 2021

    • This is a MAJOR change. This commit rips out all the utilities included with Benchmark to score it, run crawlers on it, etc. Those utilities are now in a seperate project called BenchmarkUtils. Ben…

      Show description for 8d4fcf9
      davewichers

      committed
      8d4fcf9View commit details

      Copy full SHA for 8d4fcf9

      View code at this pointBrowse repository at this point
19. Commits on Sep 22, 2021

    • Add dependency used by a script. Minor tweaks to a few scripts.

      davewichers

      committed
      f2ab32aView commit details

      Copy full SHA for f2ab32a

      View code at this pointBrowse repository at this point

    • Merge pull request #158 from darkspirit510/sast-scripts

      Show description for 57e3859
      davewichers

      authored
      57e3859View commit details

      Copy full SHA for 57e3859

      View code at this pointBrowse repository at this point
20. Commits on Sep 14, 2021

    • Update AppScanDynamicReader2.java per pull request #157, with additional changes by me, including running spotless properly.

      davewichers

      committed
      8d841bcView commit details

      Copy full SHA for 8d841bc

      View code at this pointBrowse repository at this point
21. Commits on Sep 11, 2021

    • scripts to create several SAST reports

      darkspirit510

      committed
      1935850View commit details

      Copy full SHA for 1935850

      View code at this pointBrowse repository at this point
22. Commits on Aug 18, 2021

    • Enhance CodeQLReader to report 'new' unmapped rules and add mappings to existing rules. This improves its score because java/predictable-seed rule is now properly mapped to CWE 330, which is the va…

      Show description for 4247b45
      davewichers

      committed
      4247b45View commit details

      Copy full SHA for 4247b45

      View code at this pointBrowse repository at this point
23. Commits on Jul 7, 2021

    • Change crawler invocation to not compile everything first. Add more

      Show description for e457c9a
      davewichers

      committed
      e457c9aView commit details

      Copy full SHA for e457c9a

      View code at this pointBrowse repository at this point
24. Commits on Jul 6, 2021

    • Add ability to detect new CWEs reported by these tools we haven't seen before, so we can make sure they are mapped properly to test cases if they are relevant.

      davewichers

      committed
      becbdcfView commit details

      Copy full SHA for becbdcf

      View code at this pointBrowse repository at this point
25. Commits on Jul 5, 2021

    • Enhance Contrast and Fortify parsers slightly. Add back to BenchmarkScore

      Show description for 17a057c
      davewichers

      committed
      17a057cView commit details

      Copy full SHA for 17a057c

      View code at this pointBrowse repository at this point

    • Merge pull request #154 from darkspirit510/shiftleft-jsonl

      Show description for 90e70ff
      davewichers

      authored
      90e70ffView commit details

      Copy full SHA for 90e70ff

      View code at this pointBrowse repository at this point

    • Delete some contributed code related to parsing CodeQL results that didn't actually

      Show description for f541c69
      davewichers

      committed
      f541c69View commit details

      Copy full SHA for f541c69

      View code at this pointBrowse repository at this point

    • Merge pull request #155 from Moose0621/master

      Show description for a91876e
      davewichers

      authored
      a91876eView commit details

      Copy full SHA for a91876e

      View code at this pointBrowse repository at this point
26. Commits on Jul 2, 2021

    • Refactoring of scorecard generation code and add some scorecard generation enhancements. Upgrade a few libraries.

      davewichers

      committed
      379232bView commit details

      Copy full SHA for 379232b

      View code at this pointBrowse repository at this point
27. Commits on Jun 23, 2021

    • re-adding logic for CodeQLParser in BenchmarkScore.java

      Moose0621

      committed
      4440bc3View commit details

      Copy full SHA for 4440bc3

      View code at this pointBrowse repository at this point

    • restoring the old PR

      Moose0621

      committed
      8f84d31View commit details

      Copy full SHA for 8f84d31

      View code at this pointBrowse repository at this point
28. Commits on Jun 11, 2021

    • fix ShiftLeftScan reader to parse JSONL format

      darkspirit510

      committed
      29c9ebbView commit details

      Copy full SHA for 29c9ebb

      View code at this pointBrowse repository at this point