Ounce Teams With Maven - Software Development Times On The Web

Ounce Teams With Maven
New version of analysis engine integrates with Apache’s build platform
By Jeff Feinman

January 3, 2008 — Ounce Labs yesterday released the latest version of its flagship security analysis engine, with new build automation capabilities that include support for the Apache Software Foundation’s Maven build platform.

Ounce 5.0.4 comes with two new components: the Ounce-Maven plug-in and the Ounce Automation Server.

The Ounce-Maven plug-in allows Ounce to integrate with the Maven build environment by enabling the generation of Ounce projects and applications that are based on Maven project files.

Ounce scans can also be carried out on Maven projects with the option to publish and save results, and a report can be displayed with the results of the scan.

The plug-in operates independently of other Ounce components when creating application and project files, but it uses the Ounce Automation Server for scanning and reporting.

The Ounce Automation Server allows the managed running of scans and publishing the results in addition to generating reports. It can be configured to act as an Ounce user and, when in use, have the same permissions of that user. It comes with a free-standing CLI, the Ounce Automation Server Command Line client. According to Ounce officials, clients of the Ounce Automation Server are tied to a particular host, reducing the likelihood of confusion.

The source code for the Ounce-Maven plug-in will be hosted at the Codehaus open source project repository.

EMAIL THIS ARTICLE

SEND FEEDBACK

MORE TOP STORIES

SUBSCRIBE TODAY!

E-Newsletters:
  News on Mon/Thurs.
  Test & QA Report
  EclipseSource

SUBMIT

JOB BOARD

PDF & PRINT EDITION

* Requires Resource Account! LOGIN or SIGN UP

* Download Current Issue!
ISSUE 8/1/2008 PDF

* Need Back Issues?
DOWNLOAD HERE

Receive The Print Edition?
SUBSCRIBE HERE

EVENTS CALENDAR

SHARE 2008
8/10/2008 to 8/15/2008
San Jose
SHARE

ACM SIGGRAPH
8/11/2008 to 8/15/2008
Los Angeles
ACM SIGGRAPH

Intel Developer Forum
8/19/2008 to 8/21/2008
San Francisco
Intel

Business of Software 2008
9/3/2008 to 9/4/2008
Boston
Red Gate Software

VSLive New York
9/7/2008 to 9/10/2008
New York City
1105 Media

MORE EVENTS

GET NOTIFIED!
About all of the latest Resources

SD TIMES 100

6th Annual SD Times 100

It's time once again to
recognize the organizations
or individuals that have
demonstrated leadership in
their markets.

HOME SITE MAP RSS CURRENT ISSUE BACK ISSUES SUBSCRIBER SERVICES ABOUT US CONTACT US BZ MEDIA