Ounce Labs' solutions enable organizations to identify, prioritize, and eliminate business risk to enterprises caused by software security vulnerabilities. Ounce analyzes application source code to provide the most complete and accurate analysis of application vulnerabilities and their relative priorities, enabling business users and IT professionals to optimize their resources in resolving the most critical issues.
The Ounce/Maven Plugin makes it easy to integrate static source code analysis into your Maven build framework. Specialized goals allow you to extend the Maven framework to generate:
For more information about Ounce Labs' solution, see www.ouncelabs.com.
The Ounce plugin has several goals:
Instructions on how to use the ounce plugin goals:
The following examples show how to use the ounce plugin in more advanced use-cases: