diff --git a/dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/CPEAnalyzer.java b/dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/CPEAnalyzer.java index f55bbc4d9..c7fcbc8a4 100644 --- a/dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/CPEAnalyzer.java +++ b/dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/CPEAnalyzer.java @@ -579,7 +579,7 @@ public class CPEAnalyzer implements Analyzer { for (IdentifierMatch m : collected) { if (bestIdentifierQuality.equals(m.getConfidence()) && bestEvidenceQuality.equals(m.getEvidenceConfidence())) { - Identifier i = m.getIdentifier(); + final Identifier i = m.getIdentifier(); if (bestIdentifierQuality == IdentifierConfidence.BEST_GUESS) { i.setConfidence(Confidence.LOW); } else {