From 6726101e36af537f3a177fbad4a2f56cf0c7379d Mon Sep 17 00:00:00 2001 From: brianf Date: Thu, 21 Sep 2017 17:37:17 -0400 Subject: [PATCH] Added Ecosystem to Java --- .../java/org/owasp/dependencycheck/analyzer/JarAnalyzer.java | 5 +++++ .../org/owasp/dependencycheck/analyzer/JarAnalyzerTest.java | 1 + 2 files changed, 6 insertions(+) diff --git a/dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/JarAnalyzer.java b/dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/JarAnalyzer.java index db54d1ab6..b2376688a 100644 --- a/dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/JarAnalyzer.java +++ b/dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/JarAnalyzer.java @@ -157,6 +157,10 @@ public class JarAnalyzer extends AbstractFileTypeAnalyzer { * The name of the analyzer. */ private static final String ANALYZER_NAME = "Jar Analyzer"; + /** + * The dependency ecosystem. + */ + static final String DEPENDENCY_ECOSYSTEM = "Java"; /** * The phase that this analyzer is intended to run in. */ @@ -258,6 +262,7 @@ public class JarAnalyzer extends AbstractFileTypeAnalyzer { final boolean hasPOM = analyzePOM(dependency, classNames, engine); final boolean addPackagesAsEvidence = !(hasManifest && hasPOM); analyzePackageNames(classNames, dependency, addPackagesAsEvidence); + dependency.setDependencyEcosystem(DEPENDENCY_ECOSYSTEM); } catch (IOException ex) { throw new AnalysisException("Exception occurred reading the JAR file (" + dependency.getFileName() + ").", ex); } diff --git a/dependency-check-core/src/test/java/org/owasp/dependencycheck/analyzer/JarAnalyzerTest.java b/dependency-check-core/src/test/java/org/owasp/dependencycheck/analyzer/JarAnalyzerTest.java index 4d9684f3d..cf254cb60 100644 --- a/dependency-check-core/src/test/java/org/owasp/dependencycheck/analyzer/JarAnalyzerTest.java +++ b/dependency-check-core/src/test/java/org/owasp/dependencycheck/analyzer/JarAnalyzerTest.java @@ -58,6 +58,7 @@ public class JarAnalyzerTest extends BaseTest { file = BaseTest.getResourceAsFile(this, "dwr.jar"); result = new Dependency(file); instance.analyze(result, null); + assertEquals(JarAnalyzer.DEPENDENCY_ECOSYSTEM,result.getDependencyEcosystem()); boolean found = false; for (Evidence e : result.getVendorEvidence()) { if (e.getName().equals("url")) {