From 8680ecd033b991b32033433ec92e570fcdffa36c Mon Sep 17 00:00:00 2001 From: Jeremy Long Date: Wed, 8 Jun 2016 06:40:07 -0400 Subject: [PATCH] updated documentation for experimental analyzers --- .../src/site/markdown/configuration.md | 34 +++++++++---------- .../src/site/markdown/arguments.md | 18 +++++----- .../src/site/markdown/configuration.md | 22 ++++++------ .../dependency-check-gradle/configuration.md | 15 ++++---- 4 files changed, 45 insertions(+), 44 deletions(-) diff --git a/dependency-check-ant/src/site/markdown/configuration.md b/dependency-check-ant/src/site/markdown/configuration.md index a58b73716..e613c45af 100644 --- a/dependency-check-ant/src/site/markdown/configuration.md +++ b/dependency-check-ant/src/site/markdown/configuration.md @@ -43,7 +43,7 @@ proxyPort | The Proxy Port. proxyUsername | Defines the proxy user name. |   proxyPassword | Defines the proxy password. |   connectionTimeout | The URL Connection Timeout. |   -enableExperimental | Enable the experimental analyzers. | false +enableExperimental | Enable the experimental analyzers. If not enabled the *experimental* analyzers (see below) will not be loaded or used. | false Analyzer Configuration ==================== @@ -53,26 +53,26 @@ Note, that specific analyzers will automatically disable themselves if no file types that they support are detected - so specifically disabling them may not be needed. -Property | Description | Default Value -------------------------------|---------------------------------------------------------------------------|------------------ -archiveAnalyzerEnabled | Sets whether the Archive Analyzer will be used. | true +Property | Description | Default Value +------------------------------|-----------------------------------------------------------------------------------|------------------ +archiveAnalyzerEnabled | Sets whether the Archive Analyzer will be used. | true zipExtensions | A comma-separated list of additional file extensions to be treated like a ZIP file, the contents will be extracted and analyzed. |   -jarAnalyzer | Sets whether the Jar Analyzer will be used. | true +jarAnalyzer | Sets whether the Jar Analyzer will be used. | true centralAnalyzerEnabled | Sets whether the Central Analyzer will be used. **Disabling this analyzer is not recommended as it could lead to false negatives (e.g. libraries that have vulnerabilities may not be reported correctly).** If this analyzer is being disabled there is a good chance you also want to disable the Nexus Analyzer (see below). | true nexusAnalyzerEnabled | Sets whether Nexus Analyzer will be used. This analyzer is superceded by the Central Analyzer; however, you can configure this to run against a Nexus Pro installation. | true nexusUrl | Defines the Nexus web service endpoint (example http://domain.enterprise/nexus/service/local/). If not set the Nexus Analyzer will be disabled. |   -nexusUsesProxy | Whether or not the defined proxy should be used when connecting to Nexus. | true -pyDistributionAnalyzerEnabled | Sets whether the Python Distribution Analyzer will be used. | true -pyPackageAnalyzerEnabled | Sets whether the Python Package Analyzer will be used. | true -rubygemsAnalyzerEnabled | Sets whether the Ruby Gemspec Analyzer will be used. | true -opensslAnalyzerEnabled | Sets whether or not the openssl Analyzer should be used. | true -cmakeAnalyzerEnabled | Sets whether or not the CMake Analyzer should be used. | true -autoconfAnalyzerEnabled | Sets whether or not the autoconf Analyzer should be used. | true -composerAnalyzerEnabled | Sets whether or not the PHP Composer Lock File Analyzer should be used. | true -nodeAnalyzerEnabled | Sets whether or not the Node.js Analyzer should be used. | true -nuspecAnalyzerEnabled | Sets whether or not the .NET Nuget Nuspec Analyzer will be used. | true -assemblyAnalyzerEnabled | Sets whether or not the .NET Assembly Analyzer should be used. | true -pathToMono | The path to Mono for .NET assembly analysis on non-windows systems. |   +nexusUsesProxy | Whether or not the defined proxy should be used when connecting to Nexus. | true +pyDistributionAnalyzerEnabled | Sets whether the *experimental* Python Distribution Analyzer will be used. | true +pyPackageAnalyzerEnabled | Sets whether the *experimental* Python Package Analyzer will be used. | true +rubygemsAnalyzerEnabled | Sets whether the *experimental* Ruby Gemspec Analyzer will be used. | true +opensslAnalyzerEnabled | Sets whether the openssl Analyzer should be used. | true +cmakeAnalyzerEnabled | Sets whether the *experimental* CMake Analyzer should be used. | true +autoconfAnalyzerEnabled | Sets whether the *experimental* autoconf Analyzer should be used. | true +composerAnalyzerEnabled | Sets whether the *experimental* PHP Composer Lock File Analyzer should be used. | true +nodeAnalyzerEnabled | Sets whether the *experimental* Node.js Analyzer should be used. | true +nuspecAnalyzerEnabled | Sets whether the .NET Nuget Nuspec Analyzer will be used. | true +assemblyAnalyzerEnabled | Sets whether the .NET Assembly Analyzer should be used. | true +pathToMono | The path to Mono for .NET assembly analysis on non-windows systems. |   Advanced Configuration ==================== diff --git a/dependency-check-cli/src/site/markdown/arguments.md b/dependency-check-cli/src/site/markdown/arguments.md index 876eee216..5cd86379c 100644 --- a/dependency-check-cli/src/site/markdown/arguments.md +++ b/dependency-check-cli/src/site/markdown/arguments.md @@ -18,7 +18,7 @@ Short | Argument Name   | Parameter | Description | Requir | \-\-advancedHelp | | Print the advanced help message. | Optional \-v | \-\-version | | Print the version information. | Optional | \-\-cveValidForHours | \ | The number of hours to wait before checking for new updates from the NVD. The default is 4 hours. | Optional - | \-\-experimental | | Enable the experimental analyzers. | Optional + | \-\-experimental | | Enable the experimental analyzers. If not set the analyzers marked as experimental below will not be loaded or used. | Optional Advanced Options ================ @@ -30,18 +30,18 @@ Short | Argument Name        | Paramete | \-\-cveUrl20Base | \ | Base URL for each year's CVE 2.0, the %d will be replaced with the year | https://nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-%d.xml.gz \-P | \-\-propertyfile | \ | Specifies a file that contains properties to use instead of applicaion defaults. |   | \-\-updateonly | | If set only the update phase of dependency-check will be executed; no scan will be executed and no report will be generated. |   - | \-\-disablePyDist | | Sets whether the Python Distribution Analyzer will be used. | false - | \-\-disablePyPkg | | Sets whether the Python Package Analyzer will be used. | false - | \-\-disableNodeJS | | Sets whether the Node.js Package Analyzer will be used. | false - | \-\-disableRubygems | | Sets whether the Ruby Gemspec Analyzer will be used. | false - | \-\-disableBundleAudit | | Sets whether the Ruby Bundler Audit Analyzer will be used. | false - | \-\-disableAutoconf | | Sets whether the Autoconf Analyzer will be used. | false + | \-\-disablePyDist | | Sets whether the *experimental* Python Distribution Analyzer will be used. | false + | \-\-disablePyPkg | | Sets whether the *experimental* Python Package Analyzer will be used. | false + | \-\-disableNodeJS | | Sets whether the *experimental* Node.js Package Analyzer will be used. | false + | \-\-disableRubygems | | Sets whether the *experimental* Ruby Gemspec Analyzer will be used. | false + | \-\-disableBundleAudit | | Sets whether the *experimental* Ruby Bundler Audit Analyzer will be used. | false + | \-\-disableAutoconf | | Sets whether the *experimental* Autoconf Analyzer will be used. | false | \-\-disableOpenSSL | | Sets whether the OpenSSL Analyzer will be used. | false - | \-\-disableCmake | | Sets whether the Cmake Analyzer will be disabled. | false + | \-\-disableCmake | | Sets whether the *experimental* Cmake Analyzer will be disabled. | false | \-\-disableArchive | | Sets whether the Archive Analyzer will be disabled. | false | \-\-zipExtensions | \ | A comma-separated list of additional file extensions to be treated like a ZIP file, the contents will be extracted and analyzed. |   | \-\-disableJar | | Sets whether the Jar Analyzer will be disabled. | false - | \-\-disableComposer | | Sets whether the PHP Composer Lock File Analyzer will be disabled. | false + | \-\-disableComposer | | Sets whether the *experimental* PHP Composer Lock File Analyzer will be disabled. | false | \-\-disableCentral | | Sets whether the Central Analyzer will be used. **Disabling this analyzer is not recommended as it could lead to false negatives (e.g. libraries that have vulnerabilities may not be reported correctly).** If this analyzer is being disabled there is a good chance you also want to disable the Nexus Analyzer. | false | \-\-disableNexus | | Sets whether the Nexus Analyzer will be used. Note, this has been superceded by the Central Analyzer. However, you can configure the Nexus URL to utilize an internally hosted Nexus Pro server. | false | \-\-nexus | \ | The url to the Nexus Server's web service end point (example: http://domain.enterprise/nexus/service/local/). If not set the Nexus Analyzer will be disabled. |   diff --git a/dependency-check-maven/src/site/markdown/configuration.md b/dependency-check-maven/src/site/markdown/configuration.md index e35574aff..efc44c27a 100644 --- a/dependency-check-maven/src/site/markdown/configuration.md +++ b/dependency-check-maven/src/site/markdown/configuration.md @@ -25,7 +25,7 @@ skipTestScope | Skip analysis for artifacts with Test Scope skipProvidedScope | Skip analysis for artifacts with Provided Scope | false skipRuntimeScope | Skip analysis for artifacts with Runtime Scope | false suppressionFile | The file path to the XML suppression file \- used to suppress [false positives](../general/suppression.html) |   -enableExperimental | Enable the experimental analyzers | false +enableExperimental | Enable the experimental analyzers. If not enabled the *experimental* analyzers (see below) will not be loaded or used. | false Analyzer Configuration ==================== @@ -44,16 +44,16 @@ centralAnalyzerEnabled | Sets whether Central Analyzer will be used. If t nexusAnalyzerEnabled | Sets whether Nexus Analyzer will be used. This analyzer is superceded by the Central Analyzer; however, you can configure this to run against a Nexus Pro installation. | true nexusUrl | Defines the Nexus Server's web service end point (example http://domain.enterprise/service/local/). If not set the Nexus Analyzer will be disabled. |   nexusUsesProxy | Whether or not the defined proxy should be used when connecting to Nexus. | true -pyDistributionAnalyzerEnabled | Sets whether the Python Distribution Analyzer will be used. | true -pyPackageAnalyzerEnabled | Sets whether the Python Package Analyzer will be used. | true -rubygemsAnalyzerEnabled | Sets whether the Ruby Gemspec Analyzer will be used. | true -opensslAnalyzerEnabled | Sets whether or not the openssl Analyzer should be used. | true -cmakeAnalyzerEnabled | Sets whether or not the CMake Analyzer should be used. | true -autoconfAnalyzerEnabled | Sets whether or not the autoconf Analyzer should be used. | true -composerAnalyzerEnabled | Sets whether or not the PHP Composer Lock File Analyzer should be used. | true -nodeAnalyzerEnabled | Sets whether or not the Node.js Analyzer should be used. | true -nuspecAnalyzerEnabled | Sets whether or not the .NET Nuget Nuspec Analyzer will be used. | true -assemblyAnalyzerEnabled | Sets whether or not the .NET Assembly Analyzer should be used. | true +pyDistributionAnalyzerEnabled | Sets whether the *experimental* Python Distribution Analyzer will be used. | true +pyPackageAnalyzerEnabled | Sets whether the *experimental* Python Package Analyzer will be used. | true +rubygemsAnalyzerEnabled | Sets whether the *experimental* Ruby Gemspec Analyzer will be used. | true +opensslAnalyzerEnabled | Sets whether the openssl Analyzer should be used. | true +cmakeAnalyzerEnabled | Sets whether the *experimental* CMake Analyzer should be used. | true +autoconfAnalyzerEnabled | Sets whether the *experimental* autoconf Analyzer should be used. | true +composerAnalyzerEnabled | Sets whether the *experimental* PHP Composer Lock File Analyzer should be used. | true +nodeAnalyzerEnabled | Sets whether the *experimental* Node.js Analyzer should be used. | true +nuspecAnalyzerEnabled | Sets whether the .NET Nuget Nuspec Analyzer will be used. | true +assemblyAnalyzerEnabled | Sets whether the .NET Assembly Analyzer should be used. | true pathToMono | The path to Mono for .NET assembly analysis on non-windows systems. |   Advanced Configuration diff --git a/src/site/markdown/dependency-check-gradle/configuration.md b/src/site/markdown/dependency-check-gradle/configuration.md index 7d2516118..06ecfb673 100644 --- a/src/site/markdown/dependency-check-gradle/configuration.md +++ b/src/site/markdown/dependency-check-gradle/configuration.md @@ -87,6 +87,7 @@ analyzers is likely not needed. Property | Description | Default Value ----------------------|---------------------------------------------------------------------------|------------------ +experimentalEnabled | Sets whether the experimental analyzers will be used. If not set to true the analyzers marked as experimental (see below) will not be used | false archiveEnabled | Sets whether the Archive Analyzer will be used. | true zipExtensions | A comma-separated list of additional file extensions to be treated like a ZIP file, the contents will be extracted and analyzed. |   jarEnabled | Sets whether Jar Analyzer will be used. | true @@ -94,14 +95,14 @@ centralEnabled | Sets whether Central Analyzer will be used. If this anal nexusEnabled | Sets whether Nexus Analyzer will be used. This analyzer is superceded by the Central Analyzer; however, you can configure this to run against a Nexus Pro installation. | true nexusUrl | Defines the Nexus Server's web service end point (example http://domain.enterprise/service/local/). If not set the Nexus Analyzer will be disabled. |   nexusUsesProxy | Whether or not the defined proxy should be used when connecting to Nexus. | true -pyDistributionEnabled | Sets whether the Python Distribution Analyzer will be used. | true -pyPackageEnabled | Sets whether the Python Package Analyzer will be used. | true -rubygemsEnabled | Sets whether the Ruby Gemspec Analyzer will be used. | true +pyDistributionEnabled | Sets whether the *experimental* Python Distribution Analyzer will be used. | true +pyPackageEnabled | Sets whether the *experimental* Python Package Analyzer will be used. | true +rubygemsEnabled | Sets whether the *experimental* Ruby Gemspec Analyzer will be used. | true opensslEnabled | Sets whether or not the openssl Analyzer should be used. | true -cmakeEnabled | Sets whether or not the CMake Analyzer should be used. | true -autoconfEnabled | Sets whether or not the autoconf Analyzer should be used. | true -composerEnabled | Sets whether or not the PHP Composer Lock File Analyzer should be used. | true -nodeEnabled | Sets whether or not the Node.js Analyzer should be used. | true +cmakeEnabled | Sets whether or not the *experimental* CMake Analyzer should be used. | true +autoconfEnabled | Sets whether or not the *experimental* autoconf Analyzer should be used. | true +composerEnabled | Sets whether or not the *experimental* PHP Composer Lock File Analyzer should be used. | true +nodeEnabled | Sets whether or not the *experimental* Node.js Analyzer should be used. | true nuspecEnabled | Sets whether or not the .NET Nuget Nuspec Analyzer will be used. | true assemblyEnabled | Sets whether or not the .NET Assembly Analyzer should be used. | true pathToMono | The path to Mono for .NET assembly analysis on non-windows systems. |