github-mirrors/DependencyCheck
1
0
Fork 0
mirror of https://github.com/ysoftdevs/DependencyCheck.git synced 2026-01-15 00:03:43 +01:00
Code Issues Packages Projects Releases Wiki Activity

added enabled properties in support of issue #86

Browse Source 
Former-commit-id: e6df3962e1e96b28fad499694b580423cd1cb7b5
This commit is contained in:
Jeremy Long
2014-03-23 23:05:41 -04:00
parent 173947fd7d
commit 5028216058
2 changed files with 27 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

36
dependency-check-core/src/main/java/org/owasp/dependencycheck/utils/Settings.java
View File

@@ -145,25 +145,30 @@ public final class Settings {
* The key for a list of suppression files.
*/
public static final String SUPPRESSION_FILE = "suppression.file";
/**
* The properties key for whether the Jar Analyzer is enabled.
*/
public static final String ANALYZER_JAR_ENABLED = "analyzer.jar.enabled";
/**
* The properties key for whether the Archive analyzer is enabled.
*/
public static final String ANALYZER_ARCHIVE_ENABLED = "analyzer.archive.enabled";
/**
* The properties key for whether the .NET Assembly analyzer is enabled.
*/
public static final String ANALYZER_ASSEMBLY_ENABLED = "analyzer.assembly.enabled";
/**
* The properties key for whether the .NET Nuspec analyzer is enabled.
*/
public static final String ANALYZER_NUSPEC_ENABLED = "analyzer.nuspec.enabled";
/**
* The properties key for whether the JavaScript analyzer is enabled.
*/
public static final String ANALYZER_JAVASCRIPT_ENABLED = "analyzer.javascript.enabled";
/**
* The properties key for whether the Nexus analyzer is enabled.
*/
@Deprecated
public static final String ANALYZER_NEXUS_ENABLED = "analyzer.nexus.enabled";
/**
* The properties key used to determine if a given file type analyzer is enabled;
*/
private static final String FILE_ANALYZER_ENABLED = "analyzer.%s.enabled";
/**
* Returns the properties file key to determine if a given File Type Analyzer is enabled.
*
* @param key the properties file ID for a given FileTypeAnalyzer (jar, nexus, etc.)
* @return the properties file key for enabling/disabling a given File Type Analyzer
*/
public static final String getFileAnalyzerEnabledKey(String key) {
return String.format(FILE_ANALYZER_ENABLED, key);
}
/**
* The properties key for the Nexus search URL.
*/
@@ -533,6 +538,7 @@ public final class Settings {
* the values in the contained configuration file.
*
* @param key the key to lookup within the properties file
* @param defaultValue the default value to return if the setting does not exist
* @return the property from the properties file
* @throws InvalidSettingException is thrown if there is an error retrieving the setting
*/

6
dependency-check-core/src/main/resources/dependencycheck.properties
View File

@@ -42,6 +42,12 @@ cve.startyear=2002
cve.url-2.0.base=http://static.nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-%d.xml
cve.url-1.2.base=http://nvd.nist.gov/download/nvdcve-%d.xml
# file type analyzer settings:
analyzer.archive.enabled=true
analyzer.jar.enabled=true
analyzer.nuspec.enabled=true
analyzer.assembly.enabled=true
# the URL for searching Nexus for SHA-1 hashes and whether it's enabled
analyzer.nexus.enabled=true
analyzer.nexus.url=http://repository.sonatype.org/service/local/