Instrument your applications with Contrast Security to gain real-time visibility to vulnerabilities in your application, and to defend them against attacks. Contrast integrates with your existing SDLC processes to provide an easy way to view and fix vulnerabilities in your code, and protect your applications. The Contrast for Eclipse plugin lists the vulnerabilities from your application directly in your Eclipse environment enabling developers to resolve issues faster. Please note that you will need the Contrast TeamServer in order to use this feature. You can learn more about Contrast Security’s latest products by visiting our website at www.contrastsecurity.com . To schedule a demo, contact us at (https://www.contrastsecurity.com/demo) or by calling 1-888-371-1333 Welcome to the Era of Self-Protecting Software.
Categories: Source Code Analyzer, Team Development, Testing, Tools
Additional Details
Eclipse Versions: 2020-12 (4.18), 2020-09 (4.17), 2020-06 (4.16), 2020-03 (4.15), 2019-12 (4.14), 2019-09 (4.13), 2019-06 (4.12), 2019-03 (4.11), 2018-12 (4.10), 2018-09 (4.9), Photon (4.8), Oxygen (4.7), Neon (4.6)
Platform Support: Windows, Mac, Linux/GTK
Organization Name: Contrast Security
Development Status: Production/Stable
Date Created: Monday, August 25, 2014 - 18:21
License: GPL
Date Updated: Tuesday, July 20, 2021 - 09:24
Submitted by: Harold McGinnis
| Date | Ranking | Installs | Clickthroughs |
|---|---|---|---|
| December 2023 | 300/579 | 12 | 7 |
| November 2023 | 277/686 | 61 | 32 |
| October 2023 | 336/673 | 37 | 44 |
| September 2023 | 476/663 | 10 | 45 |
| August 2023 | 396/673 | 18 | 67 |
| July 2023 | 443/668 | 13 | 67 |
| June 2023 | 300/669 | 43 | 66 |
| May 2023 | 427/671 | 17 | 70 |
| April 2023 | 460/667 | 11 | 87 |
| March 2023 | 462/686 | 16 | 22 |
| February 2023 | 388/667 | 23 | 23 |
| January 2023 | 422/675 | 17 | 9 |
Unsuccessful Installs
Unsuccessful Installs in the last 7 Days: 2
| Count | Error Message |
|---|---|
| 2 | Cannot continue the operation. There is another install operation in progress. |
Marketplace Drag to Install Button
By adding the following code below to your website you will be able to add an install button for Contrast Security for Eclipse.
HTML Code:
Markdown Syntax:
Output:
Reviews Add new review
I have installed the plugin but getting the below error
Submitted by yashwanth gk on Fri, 05/19/2017 - 00:09
org.eclipse.core.runtime.CoreException: Plug-in com.contrastsecurity.ide.eclipse.ui was unable to load class com.contrastsecurity.ide.eclipse.ui.internal.views.VulnerabilitiesView.
at org.eclipse.core.internal.registry.osgi.RegistryStrategyOSGI.throwException(RegistryStrategyOSGI.java:194)
at org.eclipse.core.internal.registry.osgi.RegistryStrategyOSGI.createExecutableExtension(RegistryStrategyOSGI.java:178)
at org.eclipse.core.internal.registry.ExtensionRegistry.createExecutableExtension(ExtensionRegistry.java:905)
at org.eclipse.core.internal.registry.ConfigurationElement.createExecutableExtension(ConfigurationElement.java:243)
at org.eclipse.core.internal.registry.ConfigurationElementHandle.createExecutableExtension(ConfigurationElementHandle.java:55)
at org.eclipse.ui.internal.registry.ViewDescriptor.createView(ViewDescriptor.java:58)
at org.eclipse.ui.internal.ViewReference.createPart(ViewReference.java:101)
at org.eclipse.ui.internal.e4.compatibility.CompatibilityPart.createPart(CompatibilityPart.java:279)
at org.eclipse.ui.internal.e4.compatibility.CompatibilityPart.create(CompatibilityPart.java:317)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
And also i am unable to run the server with tomcat
Cannot configure contrast in Eclipse Mars
Submitted by Damaris Suarez… on Wed, 04/26/2017 - 08:38
Hi, I used the drag and drop feature to install constrast, however, I am not allowed to run server with contrast feature, and when I go to Window -> Preferences -> Contrast I get a form with
Team Server:
Usernam
Service Key
API Key
What are my regular account credentials? I am not sure how to configure this.
I am running a tomcat application 7.0.73 in my local machine.
Thanks in advance,
Dámaris.
Re: Cannot configure contrast in Eclipse Mars
Submitted by Kaushik Srinivas on Tue, 05/16/2017 - 12:27
In reply to Cannot configure contrast in Eclipse Mars by Damaris Suarez…
Hi Damaris,
If you are an admin in your Contrast console, you will be able to view this under Organization Settings. Please reach out to your Contrast admin if you do not have the privileges on Contrast.
Thanks!
Unable to install the plugin
Submitted by prasad enganti on Fri, 06/10/2016 - 14:46
Unable to read repository at
java.util.NoSuchElementException
Could you give more
Submitted by Ehden Sinai on Mon, 06/13/2016 - 14:13
In reply to Unable to install the plugin by prasad enganti
Could you give more information about this error? When does it occur? Can you post the full stack trace instead of just one line?
Thanks,
Ehden
Unable to install the plugin
Submitted by prasad enganti on Tue, 06/14/2016 - 16:32
In reply to Could you give more by Ehden Sinai
Thanks for the response Ehden,
Please find more details. I am trying to install this plugin to test security for one of the project iam working on.
While installing plugin from Market place, i am getting this message.
eclipse.buildId=4.3.2.M20140221-1700
java.version=1.8.0_77
java.vendor=Oracle Corporation
BootLoader constants: OS=win32, ARCH=x86_64, WS=win32, NL=en_US
Framework arguments: -product org.eclipse.epp.package.jee.product
Command-line arguments: -os win32 -ws win32 -arch x86_64 -product org.eclipse.epp.package.jee.product
Error
Tue Jun 14 16:25:46 EDT 2016
Unable to read repository at "//eclipse.contrastsecurity.com/repository/content.xml"
java.util.NoSuchElementException
at java.util.StringTokenizer.nextToken(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.doTunneling(Unknown Source)
at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(Unknown Source)
at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(Unknown Source)
at org.eclipse.ecf.provider.filetransfer.browse.URLFileSystemBrowser.runRequest(URLFileSystemBrowser.java:113)
at org.eclipse.ecf.provider.filetransfer.browse.AbstractFileSystemBrowser$DirectoryJob.run(AbstractFileSystemBrowser.java:69)
at org.eclipse.core.internal.jobs.Worker.run(Worker.java:53)
Session Data:
eclipse.buildId=4.3.2.M20140221-1700
java.version=1.8.0_77
java.vendor=Oracle Corporation
BootLoader constants: OS=win32, ARCH=x86_64, WS=win32, NL=en_US
Framework arguments: -product org.eclipse.epp.package.jee.product
Command-line arguments: -os win32 -ws win32 -arch x86_64 -product org.eclipse.epp.package.jee.product
Thanks
Prasad
Re: Failed to Install: Unable to read repository
Submitted by Yun Ding on Fri, 12/04/2015 - 04:22
I got the same error while installing the plugin from marketplace.
Visiting the site eclipse.contrastsecurity.com (with https) shows "Coming soon". I downloaded the certificate from this site and added the cert to to a custom truststore. Then, I started Eclipse with the vm argument -Djavax.net.ssl.trustStore pointing to the custom truststore. The error is still there.
I tried out both on Eclipse Kepler and Eclipse Luna.
Hope, someone can help. Thanks!
Failed to Install: Unable to read repository
Submitted by Even Cheng on Fri, 11/20/2015 - 18:55
Hi, I'm getting this error and cannot install this plugin from marketplace:
Unable to read repository at https: //eclipse.contrastsecurity.com/repository/content.xml.
javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
at sun.security.ssl.Alerts.getSSLException(Alerts.java:154)
at sun.security.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:2023)
at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1125)
at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1375)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1403)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1387)
at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:535)
at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:403)
at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:177)
at org.apache.http.impl.conn.ManagedClientConnectionImpl.open(ManagedClientConnectionImpl.java:304)
at org.apache.http.impl.client.DefaultRequestDirector.tryConnect(DefaultRequestDirector.java:611)
at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:446)
at org.apache.http.impl.client.AbstractHttpClient.doExecute(AbstractHttpClient.java:863)
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:82)
at org.eclipse.ecf.provider.filetransfer.httpclient4.HttpClientFileSystemBrowser.runRequest(HttpClientFileSystemBrowser.java:259)
at org.eclipse.ecf.provider.filetransfer.browse.AbstractFileSystemBrowser$DirectoryJob.run(AbstractFileSystemBrowser.java:69)
at org.eclipse.core.internal.jobs.Worker.run(Worker.java:54)
Hey Even,
Submitted by Ehden Sinai on Fri, 12/04/2015 - 10:53
In reply to Failed to Install: Unable to read repository by Even Cheng
Hey Even,
Sorry for the slow response. This is an issue we created when we changed hosting for the plugin's update site. We're looking into it. Thanks for the report.
Ehden
Fixed
Submitted by Ehden Sinai on Fri, 12/04/2015 - 11:40
In reply to Failed to Install: Unable to read repository by Even Cheng
Even,
Thanks again for the report. The issue should now be resolved.
Thanks,
Ehden
Liberty profile support
Submitted by JAMES YOUNG on Tue, 07/14/2015 - 09:39
Installed ok..
But... when I use Start with contrast on my WLP server., nothing happens. Does this support WLP 8.5.5?
Thanks,
From the eclipse log...
!ENTRY org.eclipse.ui 4 0 2015-07-14 08:52:47.639
!MESSAGE Unhandled event loop exception
!STACK 0
org.eclipse.e4.core.di.InjectionException: java.lang.NullPointerException
at org.eclipse.e4.core.internal.di.MethodRequestor.execute(MethodRequestor.java:62)
at org.eclipse.e4.core.internal.di.InjectorImpl.invokeUsingClass(InjectorImpl.java:247)
at org.eclipse.e4.core.internal.di.InjectorImpl.invoke(InjectorImpl.java:229)
at org.eclipse.e4.core.contexts.ContextInjectionFactory.invoke(ContextInjectionFactory.java:132)
at org.eclipse.e4.core.commands.internal.HandlerServiceHandler.execute(HandlerServiceHandler.java:149)
at org.eclipse.core.commands.Command.executeWithChecks(Command.java:499)
at org.eclipse.core.commands.ParameterizedCommand.executeWithChecks(ParameterizedCommand.java:508)
at org.eclipse.e4.core.commands.internal.HandlerServiceImpl.executeHandler(HandlerServiceImpl.java:210)
at org.eclipse.e4.ui.workbench.renderers.swt.HandledContributionItem.executeItem(HandledContributionItem.java:825)
at org.eclipse.e4.ui.workbench.renderers.swt.HandledContributionItem.handleWidgetSelection(HandledContributionItem.java:701)
at org.eclipse.e4.ui.workbench.renderers.swt.HandledContributionItem.access$6(HandledContributionItem.java:685)
at org.eclipse.e4.ui.workbench.renderers.swt.HandledContributionItem$4.handleEvent(HandledContributionItem.java:613)
at org.eclipse.swt.widgets.EventTable.sendEvent(EventTable.java:84)
at org.eclipse.swt.widgets.Display.sendEvent(Display.java:4454)
at org.eclipse.swt.widgets.Widget.sendEvent(Widget.java:1388)
at org.eclipse.swt.widgets.Display.runDeferredEvents(Display.java:3799)
at org.eclipse.swt.widgets.Display.readAndDispatch(Display.java:3409)
at org.eclipse.e4.ui.internal.workbench.swt.PartRenderingEngine$9.run(PartRenderingEngine.java:1151)
at org.eclipse.core.databinding.observable.Realm.runWithDefault(Realm.java:332)
at org.eclipse.e4.ui.internal.workbench.swt.PartRenderingEngine.run(PartRenderingEngine.java:1032)
at org.eclipse.e4.ui.internal.workbench.E4Workbench.createAndRunUI(E4Workbench.java:148)
at org.eclipse.ui.internal.Workbench$5.run(Workbench.java:636)
at org.eclipse.core.databinding.observable.Realm.runWithDefault(Realm.java:332)
at org.eclipse.ui.internal.Workbench.createAndRunWorkbench(Workbench.java:579)
at org.eclipse.ui.PlatformUI.createAndRunWorkbench(PlatformUI.java:150)
at org.eclipse.ui.internal.ide.application.IDEApplication.start(IDEApplication.java:135)
at org.eclipse.equinox.internal.app.EclipseAppHandle.run(EclipseAppHandle.java:196)
at org.eclipse.core.runtime.internal.adaptor.EclipseAppLauncher.runApplication(EclipseAppLauncher.java:134)
at org.eclipse.core.runtime.internal.adaptor.EclipseAppLauncher.start(EclipseAppLauncher.java:104)
at org.eclipse.core.runtime.adaptor.EclipseStarter.run(EclipseStarter.java:380)
at org.eclipse.core.runtime.adaptor.EclipseStarter.run(EclipseStarter.java:235)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at org.eclipse.equinox.launcher.Main.invokeFramework(Main.java:648)
at org.eclipse.equinox.launcher.Main.basicRun(Main.java:603)
at org.eclipse.equinox.launcher.Main.run(Main.java:1465)
at org.eclipse.equinox.launcher.Main.main(Main.java:1438)
Caused by: java.lang.NullPointerException
at com.contrastsecurity.eclipse.views.servers.Launcher.prepWorkspace(Launcher.java:68)
at com.contrastsecurity.eclipse.views.servers.Launcher.launch(Launcher.java:52)
at com.contrastsecurity.eclipse.views.servers.Launcher.execute(Launcher.java:261)
at org.eclipse.ui.internal.handlers.HandlerProxy.execute(HandlerProxy.java:294)
at org.eclipse.ui.internal.handlers.E4HandlerProxy.execute(E4HandlerProxy.java:90)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at org.eclipse.e4.core.internal.di.MethodRequestor.execute(MethodRequestor.java:55)
... 38 more
Thanks for the stack trace.
Submitted by Ehden Sinai on Thu, 07/16/2015 - 11:10
In reply to Liberty profile support by JAMES YOUNG
Thanks for the stack trace. We worked out the issue and pushed an update. Let us know if you find any other problems!
License
Submitted by vallatharasu m… on Wed, 05/20/2015 - 10:18
the license is mentioned as Other, what does it mean?
can this plugin be used for commercial purpose?
Re: License
Submitted by Ehden Sinai on Thu, 05/21/2015 - 11:37
In reply to License by vallatharasu m…
Yes, this plugin may be used commercially. A full copy of the license presented during install can be found here.
If you have other questions or comments, feel free to contact us at our support site. For information on Contrast's full commercial enterprise solutions, visit our website.
Licensing Clarifications
Submitted by vallatharasu m… on Fri, 05/22/2015 - 02:40
In reply to Re: License by Ehden Sinai
Thank you for the information. We have few desktop machines which are connected in network. However we use the plugin in only one desktop system. For this do we need to go for license copy or still we can use with free license.
There are no licensing
Submitted by Ehden Sinai on Fri, 05/22/2015 - 11:05
In reply to Licensing Clarifications by vallatharasu m…
There are no licensing concerns here. The plugin is free, although I am not sure it is technically capable of doing what you describe.
Can you clarify what you're trying to do? If you would like to have multiple instances of a web application report vulnerabilities to a central location, this is not something the plugin supports, but we do support from our enterprise product (not an Eclipse plugin).