etnetera / owasp-dependency-check

MIT License
6 stars 13 forks source link

On Windows, `dependency-check.bat` gives almost no info/logs #20

Closed gian1200 closed 9 months ago

gian1200 commented 10 months ago

Running ./dependency-check-bin/dependency-check/bin/dependency-check.bat ... on Windows (Powershell) has almost no logs compared to ./dependency-check-bin/dependency-check/bin/dependency-check.sh ...

Also, when there is an error, the exception seems broken and gives no useful information.

dependency-check.bat should print the same logs as dependency-check.sh

Log is also broken:

owasp-dependency-check: Dependency-Check Core path: C:\<project path>\dependency-check-bin\dependency-check\bin\dependency-check.bat
owasp-dependency-check: Dependency-Check Core version: 9.0.2
owasp-dependency-check: Running command:
 C:\<project path>\dependency-check-bin\dependency-check\bin\dependency-check.bat --out=./dependency-check-reports --project="<project name>" --data=/tmp/dependency-check-data --format=HTML --format=JSON --scan=package-lock.json
Error: Command failed: C:\<project path>\dependency-check-bin\dependency-check\bin\dependency-check.bat --out=./dependency-check-reports --project="<project name>" --data=/tmp/dependency-check-data --format=HTML --format=JSON --scan=package-lock.json

    at ChildProcess.exithandler (node:child_process:422:12)
    at ChildProcess.emit (node:events:517:28)
    at maybeClose (node:internal/child_process:1098:16)
    at Process.ChildProcess._handle.onexit (node:internal/child_process:303:5) {
  code: 13,
  killed: false,
  signal: null,
  cmd: 'C:\\<project path>\\dependency-check-bin\\dependency-check\\bin\\dependency-check.bat --out=./dependency-check-reports --project="<project name>" --data=/tmp/dependency-check-data --format=HTML --format=JSON --scan=package-lock.json'
}

Running owasp-dependency-check -f HTML -f JSON shows even less logs

centi commented 9 months ago

The "bin" folder contains a build from another project, which I do not maintain. You should look at (and probably file an issue) on: https://github.com/jeremylong/DependencyCheck/tree/main/cli.

This project is only a Node.js wrapper for the linked CLI tool.