更新内容

• #I62MMP:补充js等框架中简单license声明的识别能力 补充js等框架中简单license声明的识别能力 由 @chenyaxun 贡献 !44:#I62MMP 补充js等框架中简单license声明的识别能力
• fix issue#I8JDS9 由 @Elouan 贡献 !45:fix issue#I8JDS9
• fix issue#I8BG28 README文件增加工具运行成功案例 由 @jwang 贡献 !49:fix issue#I8BG28 README文件增加工具运行成功案例
• fix issue#I8YGQC OAT依赖开源软件版本升级 由 @jwang 贡献 !51:fix issue#I8YGQC OAT依赖开源软件版本升级
• OAT二进制溯源校验--支持OAT.xml 中预编译二进制的参考溯源信息配置 由 @高亮（Kubi） 贡献 !43:OAT二进制溯源校验--支持OAT.xml 中预编译二进制的参考溯源信息配置
• fix issue#I8P8OW ts文件被误识别二进制文件问题 由 @jwang 贡献 !50:fix issue#I8P8OW ts文件被误识别二进制文件问题

完整的更新日志: https://gitee.com/openharmony-sig/tools_oat/compare/v2.0.0-beta.2...v2.0.0

（一）增加扫描后输出一份详细的扫描报告，便于评审时全面审核各类风险确认细节，包括如下内容：
1、扫描溯源信息：扫描用户、时间、工具名、工具版本、运行工具的命令
2、工程基本信息：工程名、工程主许可
3、扫描汇总信息：工程文件数、被过滤文件数、被过滤策略数、许可证数、版权声明数、等
4、扫描详细清单：被过滤文件清单、被过滤策略清单、许可证及版权声明清单等
5、项目的OAT定制规则。

（二）优化代码的外部依赖，便于维护。

扫描详情示例如下：
========Report Basic Information========

Report User: jalenchen
Report Time: 2022-10-29T11:58:51Z
Report Tool: OAT
Report Tool Version: 2.0.0-beta.1
Report Notes: Generated by OAT,If you have any questions or concerns, please create issue at https://gitee.com/openharmony-sig/tools_oat/issues
Report Command: java -jar ohos_ossaudittool-2.0.0-beta.1.jar -mode s -s C:/_chen/projects/code-v3.2-Beta2/OpenHarmony/base/xxx -n third_party_xxx

========Report Project List========

Report Project Count: 1
Project Begin 1/1:

========Project Basic Information========

Project Name: xxx
Project Home Page: xxx
Project Branch:
Project Commit Id:
Project Version:
Project Main License: Apache-2.0

========Project Summary Information========

Project File Count: 37
Project Normal File Count: 31
Project Filtered File Count: 6
Project Filtered By Header File Count: 0

Policy Filtered-FileName Count: 0
Policy Filtered-FileType Count: 2
Policy Filtered-LicenseHeader Count: 0
Policy Filtered-Compatibility Count: 0
Policy Filtered-Copyright Count: 0

Project License Count: 2
Project Normal License Count: 1
Project Abnormal License Count: 1
Project Compatible License Count: 1
Project Not Compatible License Count: 0
Project Copyright Count: 1
Project Normal Copyright Count: 1
Project Abnormal Copyright Count: 0

Policy Not Passed-FileType Count: 1
Policy Not Passed-Compatibility Count: 0
Policy Not Passed-WrongLicenseHeader Count: 2
Policy Not Passed-NoLicenseHeader Count: 0
Policy Not Passed-WrongCopyright Count: 0
Policy Not Passed-NoCopyright Count: 2
Project License File: TRUE
Project README: TRUE
Project README.OpenSource: TRUE

========Project Filtered File Information========

Project Filtered File md C:/_chen/projects/code-v3.2- xxx
Project Filtered File git C:/_chen/projects/code-v3.2- xxx

========Project Filtered Policy Information========

Policy Filtered-FileType-!archive binary C:/_chen/projects/code-v3.2- xxx
Policy Filtered-FileType-!archive binary C:/_chen/projects/code-v3.2- xxx

========Project License Information========

Project Normal License Apache-2.0

Project Abnormal License xxx

Project Compatible License Apache-2.0

========Project Copyright Information========

Project Normal Copyright Copyright (c) 2021 Huawei Device Co., Ltd.

XXXXXXXXX Policy Not Passed Begin XXXXXXXXX

Policy Not Passed-FileType C:/_chen/projects/code-v3.2-Beta2/OpenHarmony/base/xxx.so

Policy Not Passed-WrongLicenseHeader InvalidLicense C:/_chen/projects/code-v3.2-
Policy Not Passed-WrongLicenseHeader InvalidLicense C:/_chen/projects/code-v3.2-

Policy Not Passed-NoCopyright NULL C:/_chen/projects/code-v3.2-
Policy Not Passed-NoCopyright NULL C:/_chen/projects/code-v3.2-

XXXXXXXXX Policy Not Passed End XXXXXXXXX

========Project OAT.xml========
Project Config:

xxxxxxxxxxxxxxx xxxxxxxxxxxxxxx

1、解决漏洞：

漏洞编号：
CVE-2021-44228
CVE-2021-45046
CVE-2021-44832
CVE-2021-45105
CVE-2020-9488
漏洞归属组件：
log4j
漏洞归属版本：
2.10.0
CVSS V3.0分值：
10.00,9.00,6.60,5.90,3.70

漏洞编号：
CVE-2022-25647
漏洞归属组件：
gson
漏洞归属版本：
2.8.0
CVSS V3.0分值：
7.50
漏洞简述：
https://nvd.nist.gov/vuln/detail/CVE-2022-25647

漏洞编号：
CVE-2021-37714
漏洞归属组件：
jsoup
漏洞归属版本：
1.11.3
CVSS V3.0分值：
7.50
漏洞简述：
https://nvd.nist.gov/vuln/detail/CVE-2021-37714

2、支持多种命令行扫描模式
3、支持命令行传入检查规则进行扫描
4、支持指定文件夹识别Project清单并扫描
5、重构，支持扫描流程各环节可扩展