Set the value of suppressionFile.
Set the value of updateOnly
+Set the value of zipExtensions.
diff --git a/dependency-check-ant/apidocs/index.html b/dependency-check-ant/apidocs/index.html
index 4eb8a1cc1..37bd98fb3 100644
--- a/dependency-check-ant/apidocs/index.html
+++ b/dependency-check-ant/apidocs/index.html
@@ -2,9 +2,9 @@
-
+
-An Ant task definition to execute dependency-check during an Ant build.
- Author: -
- Jeremy Long
booleanisUpdateOnly()
+Get the value of updateOnly
+voidsetApplicationName(String applicationName)
Set the value of applicationName.
voidsetArchiveAnalyzerEnabled(boolean archiveAnalyzerEnabled)
Sets whether or not the analyzer is enabled.
voidsetAssemblyAnalyzerEnabled(boolean assemblyAnalyzerEnabled)
Sets whether or not the analyzer is enabled.
voidsetAutoUpdate(boolean autoUpdate)
Set the value of autoUpdate.
voidsetCentralAnalyzerEnabled(boolean centralAnalyzerEnabled)
Set the value of centralAnalyzerEnabled.
voidsetConnectionString(String connectionString)
Set the value of connectionString.
voidsetConnectionTimeout(String connectionTimeout)
Set the value of connectionTimeout.
voidsetCveUrl12Base(String cveUrl12Base)
Set the value of cveUrl12Base.
voidsetCveUrl12Modified(String cveUrl12Modified)
Set the value of cveUrl12Modified.
voidsetCveUrl20Base(String cveUrl20Base)
Set the value of cveUrl20Base.
voidsetCveUrl20Modified(String cveUrl20Modified)
Set the value of cveUrl20Modified.
voidsetDatabaseDriverName(String databaseDriverName)
Set the value of databaseDriverName.
voidsetDatabaseDriverPath(String databaseDriverPath)
Set the value of databaseDriverPath.
voidsetDatabasePassword(String databasePassword)
Set the value of databasePassword.
voidsetDatabaseUser(String databaseUser)
Set the value of databaseUser.
voidsetDataDirectory(String dataDirectory)
Set the value of dataDirectory.
voidsetFailBuildOnCVSS(float failBuildOnCVSS)
Set the value of failBuildOnCVSS.
voidsetJarAnalyzerEnabled(boolean jarAnalyzerEnabled)
Sets whether or not the analyzer is enabled.
voidsetLogFile(String logFile)
Set the value of logFile.
voidsetNexusAnalyzerEnabled(boolean nexusAnalyzerEnabled)
Set the value of nexusAnalyzerEnabled.
voidsetNexusUrl(String nexusUrl)
Set the value of nexusUrl.
voidsetNexusUsesProxy(boolean nexusUsesProxy)
Set the value of nexusUsesProxy.
voidsetNuspecAnalyzerEnabled(boolean nuspecAnalyzerEnabled)
Sets whether or not the analyzer is enabled.
voidsetPathToMono(String pathToMono)
Set the value of pathToMono.
voidsetProxyPassword(String proxyPassword)
Set the value of proxyPassword.
voidsetProxyPort(String proxyPort)
Set the value of proxyPort.
voidsetProxyServer(String server)
Set the value of proxyServer.
voidsetProxyUrl(String proxyUrl)
Deprecated.
@@ -587,42 +593,48 @@ extends org.apache.tools.ant.Task
voidsetProxyUsername(String proxyUsername)
Set the value of proxyUsername.
voidsetRefid(org.apache.tools.ant.types.Reference r)
Add a reference to a Path, FileSet, DirSet, or FileList defined elsewhere.
voidsetReportFormat(DependencyCheckTask.ReportFormats reportFormat)
Set the value of reportFormat.
voidsetReportOutputDirectory(String reportOutputDirectory)
Set the value of reportOutputDirectory.
voidsetShowSummary(boolean showSummary)
Set the value of showSummary.
voidsetSuppressionFile(String suppressionFile)
Set the value of suppressionFile.
voidsetUpdateOnly(boolean updateOnly)
+Set the value of updateOnly
+voidsetZipExtensions(String zipExtensions)
@@ -827,6 +839,28 @@ extends org.apache.tools.ant.Task
- Parameters:
autoUpdate- new value of autoUpdate
-
+
-
+
isUpdateOnly
+public boolean isUpdateOnly()
+Get the value of updateOnly+- Returns:
- the value of updateOnly
+
-
+
-
+
setUpdateOnly
+public void setUpdateOnly(boolean updateOnly)
+Set the value of updateOnly+- Parameters:
updateOnly- new value of updateOnly
+
Package org.owasp.dependencycheck.taskdefs
-
-
- org.owasp.dependencycheck.taskdefs
-
-
- This package includes the Ant task definitions.
+This package includes the Ant task definitions.
See: Description
Package org.owasp.dependencycheck.taskdefs Description
-
-
- org.owasp.dependencycheck.taskdefs
-
-
- This package includes the Ant task definitions.
-
-
+This package includes the Ant task definitions.
diff --git a/dependency-check-ant/apidocs/org/owasp/dependencycheck/taskdefs/package-tree.html b/dependency-check-ant/apidocs/org/owasp/dependencycheck/taskdefs/package-tree.html
index 24edb16b6..acfb4b815 100644
--- a/dependency-check-ant/apidocs/org/owasp/dependencycheck/taskdefs/package-tree.html
+++ b/dependency-check-ant/apidocs/org/owasp/dependencycheck/taskdefs/package-tree.html
@@ -2,16 +2,16 @@
-
+
-org.owasp.dependencycheck.taskdefs Class Hierarchy (Dependency-Check Ant Task 1.2.9 API)
-
+org.owasp.dependencycheck.taskdefs Class Hierarchy (Dependency-Check Ant Task 1.2.10 API)
+
diff --git a/dependency-check-ant/apidocs/org/owasp/dependencycheck/taskdefs/package-use.html b/dependency-check-ant/apidocs/org/owasp/dependencycheck/taskdefs/package-use.html
index 94e7eae3e..9092d260a 100644
--- a/dependency-check-ant/apidocs/org/owasp/dependencycheck/taskdefs/package-use.html
+++ b/dependency-check-ant/apidocs/org/owasp/dependencycheck/taskdefs/package-use.html
@@ -2,16 +2,16 @@
-
+
-Uses of Package org.owasp.dependencycheck.taskdefs (Dependency-Check Ant Task 1.2.9 API)
-
+Uses of Package org.owasp.dependencycheck.taskdefs (Dependency-Check Ant Task 1.2.10 API)
+
diff --git a/dependency-check-ant/apidocs/overview-tree.html b/dependency-check-ant/apidocs/overview-tree.html
index b5dde0c84..8f60254fa 100644
--- a/dependency-check-ant/apidocs/overview-tree.html
+++ b/dependency-check-ant/apidocs/overview-tree.html
@@ -2,16 +2,16 @@
-
+
-Class Hierarchy (Dependency-Check Ant Task 1.2.9 API)
-
+Class Hierarchy (Dependency-Check Ant Task 1.2.10 API)
+
diff --git a/dependency-check-ant/checkstyle.html b/dependency-check-ant/checkstyle.html
index eb52c097c..dae57feb8 100644
--- a/dependency-check-ant/checkstyle.html
+++ b/dependency-check-ant/checkstyle.html
@@ -1,13 +1,13 @@
-
+
dependency-check-ant - Checkstyle Results
@@ -19,7 +19,7 @@
-
+
@@ -42,7 +42,7 @@
@@ -54,7 +54,7 @@
-
+
/
@@ -67,9 +67,9 @@
- | Last Published: 2015-03-06
+ | Last Published: 2015-04-12
- Version: 1.2.9
+ Version: 1.2.10
@@ -260,7 +260,7 @@
18
0
0
-1
- 
dependency-check-ant
+
Details
@@ -272,8 +272,20 @@
Line
Total number of methods is 78 (max allowed is 40).
-51
| Package | # Classes | Line Coverage | Branch Coverage | Complexity | ||||
| org.owasp.dependencycheck.taskdefs | 2 |
|
| 2.0125;2.012 | ||||
| org.owasp.dependencycheck.taskdefs | 2 |
|
| 2.0;2 |
| Package | # Classes | Line Coverage | Branch Coverage | Complexity | ||||
| All Packages | 2 |
|
| 2.0125;2.012 | ||||
| org.owasp.dependencycheck.taskdefs | 2 |
|
| 2.0125;2.012 | ||||
| All Packages | 2 |
|
| 2.0;2 | ||||
| org.owasp.dependencycheck.taskdefs | 2 |
|
| 2.0;2 |
| Classes in this File | Line Coverage | Branch Coverage | Complexity | ||||
| DependencyCheckTask |
|
| 2.0125;2.012 | ||||
| DependencyCheckTask$ReportFormats |
|
| 2.0125;2.012 | ||||
| DependencyCheckTask |
|
| 2.0;2 | ||||
| DependencyCheckTask$ReportFormats |
|
| 2.0;2 |
* * @author Jeremy Long <jeremy.long@owasp.org> * @author Jeremy Long */ this.autoUpdate = autoUpdate;}
/** * The report format to be generated (HTML, XML, VULN, ALL). This configuration option has no affect if using this within theprivate boolean updateOnly = false;
* Site plugin unless the externalReport is set to true. Default is HTML. */private String reportFormat = "HTML";
/** * Get the value of updateOnly * /** * @return the value of updateOnly * Get the value of reportFormat. */ * * @return the value of reportFormatpublic boolean isUpdateOnly() {
return updateOnly; */}
public String getReportFormat() { return reportFormat; /**}
* Set the value of updateOnly * /** * @param updateOnly new value of updateOnly * Set the value of reportFormat. */ * * @param reportFormat new value of reportFormat */public void setUpdateOnly(boolean updateOnly) {
this.updateOnly = updateOnly; }public void setReportFormat(ReportFormats reportFormat) {
this.reportFormat = reportFormat.getValue();}
/** * The report format to be generated (HTML, XML, VULN, ALL). This configuration option has no affect if using this within the /** * Site plugin unless the externalReport is set to true. Default is HTML. * The Proxy Server. */private String reportFormat = "HTML";
private String proxyServer; /** /** * Get the value of reportFormat. * Get the value of proxyServer. * * * @return the value of reportFormat * @return the value of proxyServer */ */ public String getProxyServer() { return proxyServer; public String getReportFormat() { return reportFormat;}
}
/** /** * Set the value of reportFormat. * Set the value of proxyServer. * * * @param reportFormat new value of reportFormat * @param server new value of proxyServer */ */public void setProxyServer(String server) {
this.proxyServer = server; }public void setReportFormat(ReportFormats reportFormat) {
this.reportFormat = reportFormat.getValue();}
/** * The Proxy Server. /** * Get the value of proxyServer. * * @return the value of proxyServer * @deprecated use {@link org.owasp.dependencycheck.taskdefs.DependencyCheckTask#getProxyServer()} instead */@Deprecated
public String getProxyUrl() { return proxyServer;}
private String proxyServer; /** * Set the value of proxyServer. * Get the value of proxyServer. * * @return the value of proxyServer */ public String getProxyServer() { return proxyServer;}
/** * Set the value of proxyServer. * @param proxyUrl new value of proxyServer * * @deprecated use {@link org.owasp.dependencycheck.taskdefs.DependencyCheckTask#setProxyServer(java.lang.String)} instead * @param server new value of proxyServer */@Deprecated
public void setProxyUrl(String proxyUrl) {
LOGGER.warning("A deprecated configuration option 'proxyUrl' was detected; use 'proxyServer' instead."); this.proxyServer = proxyUrl; }public void setProxyServer(String server) {
this.proxyServer = server; } /** /** * Get the value of proxyServer. * The Proxy Port. * */ * @return the value of proxyServer private String proxyPort; * @deprecated use {@link org.owasp.dependencycheck.taskdefs.DependencyCheckTask#getProxyServer()} instead */ /**@Deprecated
* Get the value of proxyPort. * public String getProxyUrl() { return proxyServer; * @return the value of proxyPort}
*/ public String getProxyPort() { return proxyPort; /** * Set the value of proxyServer.}
* * @param proxyUrl new value of proxyServer /** * @deprecated use {@link org.owasp.dependencycheck.taskdefs.DependencyCheckTask#setProxyServer(java.lang.String)} instead * Set the value of proxyPort. */ *@Deprecated
* @param proxyPort new value of proxyPort */public void setProxyPort(String proxyPort) {
this.proxyPort = proxyPort; }public void setProxyUrl(String proxyUrl) {
LOGGER.warning("A deprecated configuration option 'proxyUrl' was detected; use 'proxyServer' instead."); this.proxyServer = proxyUrl; } /** /** * The Proxy Port. * The Proxy username. */ */ private String proxyPort; private String proxyUsername; /** /** * Get the value of proxyPort. * Get the value of proxyUsername. * * * @return the value of proxyPort * @return the value of proxyUsername */ */ public String getProxyUsername() { return proxyUsername; public String getProxyPort() { return proxyPort;}
}
/** /** * Set the value of proxyPort. * Set the value of proxyUsername. * * * @param proxyPort new value of proxyPort * @param proxyUsername new value of proxyUsername */ */public void setProxyUsername(String proxyUsername) {
this.proxyUsername = proxyUsername; }public void setProxyPort(String proxyPort) {
this.proxyPort = proxyPort; } /** /** * The Proxy username. * The Proxy password. */ */ private String proxyUsername; private String proxyPassword; /** /** * Get the value of proxyUsername. * Get the value of proxyPassword. * * * @return the value of proxyUsername * @return the value of proxyPassword */ */ public String getProxyPassword() { return proxyPassword; public String getProxyUsername() { return proxyUsername;}
}
/** /** * Set the value of proxyUsername. * Set the value of proxyPassword. * * * @param proxyUsername new value of proxyUsername * @param proxyPassword new value of proxyPassword */ */public void setProxyPassword(String proxyPassword) {
this.proxyPassword = proxyPassword; }public void setProxyUsername(String proxyUsername) {
this.proxyUsername = proxyUsername; } /** /** * The Proxy password. * The Connection Timeout. */ */ private String proxyPassword; private String connectionTimeout; /** /** * Get the value of proxyPassword. * Get the value of connectionTimeout. * * * @return the value of proxyPassword * @return the value of connectionTimeout */ */ public String getConnectionTimeout() { return connectionTimeout; public String getProxyPassword() { return proxyPassword;}
}
/** /** * Set the value of proxyPassword. * Set the value of connectionTimeout. * * * @param proxyPassword new value of proxyPassword * @param connectionTimeout new value of connectionTimeout */ */public void setConnectionTimeout(String connectionTimeout) {
this.connectionTimeout = connectionTimeout; }public void setProxyPassword(String proxyPassword) {
this.proxyPassword = proxyPassword; } /** /** * The Connection Timeout. * The file path used for verbose logging. */ */private String logFile = null;
private String connectionTimeout; /** /** * Get the value of connectionTimeout. * Get the value of logFile. * * * @return the value of connectionTimeout * @return the value of logFile */ */ public String getLogFile() { return logFile; public String getConnectionTimeout() { return connectionTimeout;}
}
/** /** * Set the value of connectionTimeout. * Set the value of logFile. * * * @param connectionTimeout new value of connectionTimeout * @param logFile new value of logFile */ */public void setLogFile(String logFile) {
this.logFile = logFile; }public void setConnectionTimeout(String connectionTimeout) {
this.connectionTimeout = connectionTimeout; } /** /** * The file path used for verbose logging. * The path to the suppression file. */private String logFile = null;
private String suppressionFile; /** /** * Get the value of logFile. * Get the value of suppressionFile. * * * @return the value of logFile * @return the value of suppressionFile */ */ public String getSuppressionFile() { return suppressionFile; public String getLogFile() { return logFile;}
}
/** /** * Set the value of logFile. * Set the value of suppressionFile. * * * @param logFile new value of logFile * @param suppressionFile new value of suppressionFile */ */public void setSuppressionFile(String suppressionFile) {
this.suppressionFile = suppressionFile; }public void setLogFile(String logFile) {
this.logFile = logFile; } /** /** * The path to the suppression file. * flag indicating whether or not to show a summary of findings. */ */private boolean showSummary = true;
private String suppressionFile; /** /** * Get the value of suppressionFile. * Get the value of showSummary. * * * @return the value of suppressionFile * @return the value of showSummary */ */public boolean isShowSummary() {
return showSummary; public String getSuppressionFile() { return suppressionFile;}
}
/** /** * Set the value of suppressionFile. * Set the value of showSummary. * * * @param suppressionFile new value of suppressionFile * @param showSummary new value of showSummary */ */public void setShowSummary(boolean showSummary) {
this.showSummary = showSummary; }public void setSuppressionFile(String suppressionFile) {
this.suppressionFile = suppressionFile; } /** * flag indicating whether or not to show a summary of findings. /** * Sets whether or not the analyzer is enabled. */private boolean showSummary = true;
* * @param jarAnalyzerEnabled the value of the new setting */public void setJarAnalyzerEnabled(boolean jarAnalyzerEnabled) {
this.jarAnalyzerEnabled = jarAnalyzerEnabled; } /** * Whether or not the Archive Analyzer is enabled. */private boolean archiveAnalyzerEnabled = true;
/** * Returns whether or not the analyzer is enabled. * Get the value of showSummary. * * @return true if the analyzer is enabled * @return the value of showSummary */public boolean isArchiveAnalyzerEnabled() {
return archiveAnalyzerEnabled;public boolean isShowSummary() {
return showSummary;}
/** * Set the value of showSummary. * * @param showSummary new value of showSummary */public void setShowSummary(boolean showSummary) {
this.showSummary = showSummary; } /** * Whether or not the .NET Assembly Analyzer is enabled. * Sets whether or not the analyzer is enabled. */private boolean assemblyAnalyzerEnabled = true;
* * @param jarAnalyzerEnabled the value of the new setting */ /** * Sets whether or not the analyzer is enabled. *public void setJarAnalyzerEnabled(boolean jarAnalyzerEnabled) {
this.jarAnalyzerEnabled = jarAnalyzerEnabled; } * @param archiveAnalyzerEnabled the value of the new setting /** */ * Whether or not the Archive Analyzer is enabled.public void setArchiveAnalyzerEnabled(boolean archiveAnalyzerEnabled) {
this.archiveAnalyzerEnabled = archiveAnalyzerEnabled; } */private boolean archiveAnalyzerEnabled = true;
/** /** * Returns whether or not the analyzer is enabled. * Returns whether or not the analyzer is enabled. * * * @return true if the analyzer is enabled * @return true if the analyzer is enabled */ */public boolean isAssemblyAnalyzerEnabled() {
return assemblyAnalyzerEnabled;public boolean isArchiveAnalyzerEnabled() {
return archiveAnalyzerEnabled;}
}
/** * Whether or not the .NET Assembly Analyzer is enabled. /** * Sets whether or not the analyzer is enabled. */private boolean assemblyAnalyzerEnabled = true;
* * @param assemblyAnalyzerEnabled the value of the new setting /** */public void setAssemblyAnalyzerEnabled(boolean assemblyAnalyzerEnabled) {
this.assemblyAnalyzerEnabled = assemblyAnalyzerEnabled; } /** * Whether or not the .NET Nuspec Analyzer is enabled. */private boolean nuspecAnalyzerEnabled = true;
/** * Returns whether or not the analyzer is enabled. * * @return true if the analyzer is enabled */public boolean isNuspecAnalyzerEnabled() {
return nuspecAnalyzerEnabled;}
/** * Sets whether or not the analyzer is enabled. * * @param archiveAnalyzerEnabled the value of the new setting */public void setArchiveAnalyzerEnabled(boolean archiveAnalyzerEnabled) {
this.archiveAnalyzerEnabled = archiveAnalyzerEnabled; } /** * Returns whether or not the analyzer is enabled. * * @return true if the analyzer is enabled */public boolean isAssemblyAnalyzerEnabled() {
return assemblyAnalyzerEnabled;}
/** * Sets whether or not the analyzer is enabled. * * * @param assemblyAnalyzerEnabled the value of the new setting * @param nuspecAnalyzerEnabled the value of the new setting */ */public void setNuspecAnalyzerEnabled(boolean nuspecAnalyzerEnabled) {
this.nuspecAnalyzerEnabled = nuspecAnalyzerEnabled; }public void setAssemblyAnalyzerEnabled(boolean assemblyAnalyzerEnabled) {
this.assemblyAnalyzerEnabled = assemblyAnalyzerEnabled; } /** /** * Whether or not the .NET Nuspec Analyzer is enabled. * Whether or not the central analyzer is enabled. */private boolean centralAnalyzerEnabled = false;
private boolean nuspecAnalyzerEnabled = true;
/** /** * Returns whether or not the analyzer is enabled. * Get the value of centralAnalyzerEnabled. * * * @return true if the analyzer is enabled * @return the value of centralAnalyzerEnabled */ */public boolean isCentralAnalyzerEnabled() {
return centralAnalyzerEnabled;public boolean isNuspecAnalyzerEnabled() {
return nuspecAnalyzerEnabled;}
}
/** /** * Sets whether or not the analyzer is enabled. * Set the value of centralAnalyzerEnabled. * * * @param nuspecAnalyzerEnabled the value of the new setting * @param centralAnalyzerEnabled new value of centralAnalyzerEnabled */ */public void setCentralAnalyzerEnabled(boolean centralAnalyzerEnabled) {
this.centralAnalyzerEnabled = centralAnalyzerEnabled; }public void setNuspecAnalyzerEnabled(boolean nuspecAnalyzerEnabled) {
this.nuspecAnalyzerEnabled = nuspecAnalyzerEnabled; } /** * Whether or not the central analyzer is enabled. /** * Whether or not the nexus analyzer is enabled. */private boolean centralAnalyzerEnabled = false;
*/private boolean nexusAnalyzerEnabled = true;
/** * Get the value of centralAnalyzerEnabled. /** * * Get the value of nexusAnalyzerEnabled. * @return the value of centralAnalyzerEnabled * */ * @return the value of nexusAnalyzerEnabled */public boolean isCentralAnalyzerEnabled() {
return centralAnalyzerEnabled;public boolean isNexusAnalyzerEnabled() {
return nexusAnalyzerEnabled;}
}
/** * Set the value of centralAnalyzerEnabled. /** * * Set the value of nexusAnalyzerEnabled. * @param centralAnalyzerEnabled new value of centralAnalyzerEnabled * */ * @param nexusAnalyzerEnabled new value of nexusAnalyzerEnabled */public void setNexusAnalyzerEnabled(boolean nexusAnalyzerEnabled) {
this.nexusAnalyzerEnabled = nexusAnalyzerEnabled; }public void setCentralAnalyzerEnabled(boolean centralAnalyzerEnabled) {
this.centralAnalyzerEnabled = centralAnalyzerEnabled; } /** * Whether or not the nexus analyzer is enabled. /** * The URL of the Nexus server. */private boolean nexusAnalyzerEnabled = true;
*/ private String nexusUrl; /** * Get the value of nexusAnalyzerEnabled. /** * * Get the value of nexusUrl. * @return the value of nexusAnalyzerEnabled * */ * @return the value of nexusUrl */public boolean isNexusAnalyzerEnabled() {
return nexusAnalyzerEnabled; public String getNexusUrl() { return nexusUrl;}
}
/** * Set the value of nexusAnalyzerEnabled. /** * * Set the value of nexusUrl. * @param nexusAnalyzerEnabled new value of nexusAnalyzerEnabled * */ * @param nexusUrl new value of nexusUrl */public void setNexusUrl(String nexusUrl) {
this.nexusUrl = nexusUrl; }public void setNexusAnalyzerEnabled(boolean nexusAnalyzerEnabled) {
this.nexusAnalyzerEnabled = nexusAnalyzerEnabled; } /** /** * The URL of the Nexus server. * Whether or not the defined proxy should be used when connecting to Nexus. */ */private boolean nexusUsesProxy = true;
private String nexusUrl; /** /** * Get the value of nexusUrl. * Get the value of nexusUsesProxy. * * * @return the value of nexusUrl * @return the value of nexusUsesProxy */ */public boolean isNexusUsesProxy() {
return nexusUsesProxy; public String getNexusUrl() { return nexusUrl;}
}
/** /** * Set the value of nexusUrl. * Set the value of nexusUsesProxy. * * * @param nexusUrl new value of nexusUrl * @param nexusUsesProxy new value of nexusUsesProxy */ */public void setNexusUsesProxy(boolean nexusUsesProxy) {
this.nexusUsesProxy = nexusUsesProxy; }public void setNexusUrl(String nexusUrl) {
this.nexusUrl = nexusUrl; } /** * Whether or not the defined proxy should be used when connecting to Nexus. /** * The database driver name; such as org.h2.Driver. */private boolean nexusUsesProxy = true;
*/ private String databaseDriverName; /** * Get the value of nexusUsesProxy. /** * * Get the value of databaseDriverName. * @return the value of nexusUsesProxy * */ * @return the value of databaseDriverName */public boolean isNexusUsesProxy() {
return nexusUsesProxy; public String getDatabaseDriverName() { return databaseDriverName;}
}
/** * Set the value of nexusUsesProxy. /** * * Set the value of databaseDriverName. * @param nexusUsesProxy new value of nexusUsesProxy * */ * @param databaseDriverName new value of databaseDriverName */public void setDatabaseDriverName(String databaseDriverName) {
this.databaseDriverName = databaseDriverName; }public void setNexusUsesProxy(boolean nexusUsesProxy) {
this.nexusUsesProxy = nexusUsesProxy; } /** * The database driver name; such as org.h2.Driver. /** */ * The path to the database driver JAR file if it is not on the class path. private String databaseDriverName; */ private String databaseDriverPath; /** * Get the value of databaseDriverName. /** * * Get the value of databaseDriverPath. * @return the value of databaseDriverName * */ * @return the value of databaseDriverPath */ public String getDatabaseDriverName() { return databaseDriverName; public String getDatabaseDriverPath() { return databaseDriverPath;}
}
/** * Set the value of databaseDriverName. /** * * Set the value of databaseDriverPath. * @param databaseDriverName new value of databaseDriverName * */ * @param databaseDriverPath new value of databaseDriverPath */public void setDatabaseDriverPath(String databaseDriverPath) {
this.databaseDriverPath = databaseDriverPath; }public void setDatabaseDriverName(String databaseDriverName) {
this.databaseDriverName = databaseDriverName; } /** /** * The path to the database driver JAR file if it is not on the class path. * The database connection string. */ */ private String databaseDriverPath; private String connectionString; /** /** * Get the value of databaseDriverPath. * Get the value of connectionString. * * * @return the value of databaseDriverPath * @return the value of connectionString */ */ public String getConnectionString() { return connectionString; public String getDatabaseDriverPath() { return databaseDriverPath;}
}
/** /** * Set the value of databaseDriverPath. * Set the value of connectionString. * * * @param databaseDriverPath new value of databaseDriverPath * @param connectionString new value of connectionString */ */public void setConnectionString(String connectionString) {
this.connectionString = connectionString; }public void setDatabaseDriverPath(String databaseDriverPath) {
this.databaseDriverPath = databaseDriverPath; } /** /** * The database connection string. * The user name for connecting to the database. */ */ private String connectionString; private String databaseUser; /** /** * Get the value of connectionString. * Get the value of databaseUser. * * * @return the value of connectionString * @return the value of databaseUser */ */ public String getDatabaseUser() { return databaseUser; public String getConnectionString() { return connectionString;}
}
/** /** * Set the value of connectionString. * Set the value of databaseUser. * * * @param connectionString new value of connectionString * @param databaseUser new value of databaseUser */ */public void setDatabaseUser(String databaseUser) {
this.databaseUser = databaseUser; }public void setConnectionString(String connectionString) {
this.connectionString = connectionString; } /** * The user name for connecting to the database. /** */ * The password to use when connecting to the database. private String databaseUser; */ private String databasePassword; /** * Get the value of databaseUser. /** * * Get the value of databasePassword. * @return the value of databaseUser * */ * @return the value of databasePassword */ public String getDatabaseUser() { return databaseUser; public String getDatabasePassword() { return databasePassword;}
}
/** * Set the value of databaseUser. /** * * Set the value of databasePassword. * @param databaseUser new value of databaseUser * */ * @param databasePassword new value of databasePassword */public void setDatabasePassword(String databasePassword) {
this.databasePassword = databasePassword; }public void setDatabaseUser(String databaseUser) {
this.databaseUser = databaseUser; } /** * The password to use when connecting to the database. /** */ * Additional ZIP File extensions to add analyze. This should be a comma-separated list of file extensions to treat like ZIP private String databasePassword; * files. */ /** private String zipExtensions; * Get the value of databasePassword. * /** * @return the value of databasePassword * Get the value of zipExtensions. */ * * @return the value of zipExtensions public String getDatabasePassword() { return databasePassword; */}
public String getZipExtensions() { return zipExtensions; /**}
* Set the value of databasePassword. * /** * @param databasePassword new value of databasePassword * Set the value of zipExtensions. */ * * @param zipExtensions new value of zipExtensions */public void setDatabasePassword(String databasePassword) {
this.databasePassword = databasePassword; }public void setZipExtensions(String zipExtensions) {
this.zipExtensions = zipExtensions; } /** * Additional ZIP File extensions to add analyze. This should be a comma-separated list of file extensions to treat like ZIP * files. /** */ * The url for the modified NVD CVE (1.2 schema). private String zipExtensions; */ private String cveUrl12Modified; /** * Get the value of zipExtensions. /** * * Get the value of cveUrl12Modified. * @return the value of zipExtensions * */ * @return the value of cveUrl12Modified */ public String getZipExtensions() { return zipExtensions; public String getCveUrl12Modified() { return cveUrl12Modified;}
}
/** * Set the value of zipExtensions. /** * * Set the value of cveUrl12Modified. * @param zipExtensions new value of zipExtensions * */ * @param cveUrl12Modified new value of cveUrl12Modified */public void setCveUrl12Modified(String cveUrl12Modified) {
this.cveUrl12Modified = cveUrl12Modified; }public void setZipExtensions(String zipExtensions) {
this.zipExtensions = zipExtensions; } /** * The url for the modified NVD CVE (1.2 schema). /** */ * The url for the modified NVD CVE (2.0 schema). private String cveUrl12Modified; */ private String cveUrl20Modified; /** * Get the value of cveUrl12Modified. /** * * Get the value of cveUrl20Modified. * @return the value of cveUrl12Modified * */ * @return the value of cveUrl20Modified */ public String getCveUrl12Modified() { return cveUrl12Modified; public String getCveUrl20Modified() { return cveUrl20Modified;}
}
/** * Set the value of cveUrl12Modified. /** * * Set the value of cveUrl20Modified. * @param cveUrl12Modified new value of cveUrl12Modified * */ * @param cveUrl20Modified new value of cveUrl20Modified */public void setCveUrl20Modified(String cveUrl20Modified) {
this.cveUrl20Modified = cveUrl20Modified; }public void setCveUrl12Modified(String cveUrl12Modified) {
this.cveUrl12Modified = cveUrl12Modified; } /** * The url for the modified NVD CVE (2.0 schema). /** */ * Base Data Mirror URL for CVE 1.2. private String cveUrl20Modified; */ private String cveUrl12Base; /** * Get the value of cveUrl20Modified. /** * * Get the value of cveUrl12Base. * @return the value of cveUrl20Modified * */ * @return the value of cveUrl12Base */ public String getCveUrl20Modified() { return cveUrl20Modified; public String getCveUrl12Base() { return cveUrl12Base;}
}
/** * Set the value of cveUrl20Modified. /** * * Set the value of cveUrl12Base. * @param cveUrl20Modified new value of cveUrl20Modified * */ * @param cveUrl12Base new value of cveUrl12Base */public void setCveUrl12Base(String cveUrl12Base) {
this.cveUrl12Base = cveUrl12Base; }public void setCveUrl20Modified(String cveUrl20Modified) {
this.cveUrl20Modified = cveUrl20Modified; } /** * Base Data Mirror URL for CVE 1.2. /** */ * Data Mirror URL for CVE 2.0. private String cveUrl12Base; */ private String cveUrl20Base; /** * Get the value of cveUrl12Base. /** * * Get the value of cveUrl20Base. * @return the value of cveUrl12Base * */ * @return the value of cveUrl20Base */ public String getCveUrl12Base() { return cveUrl12Base; public String getCveUrl20Base() { return cveUrl20Base;}
}
/** * Set the value of cveUrl12Base. /** * * Set the value of cveUrl20Base. * @param cveUrl12Base new value of cveUrl12Base * */ * @param cveUrl20Base new value of cveUrl20Base */public void setCveUrl20Base(String cveUrl20Base) {
this.cveUrl20Base = cveUrl20Base; }public void setCveUrl12Base(String cveUrl12Base) {
this.cveUrl12Base = cveUrl12Base; } /** /** * Data Mirror URL for CVE 2.0. * The path to Mono for .NET assembly analysis on non-windows systems. */ */ private String cveUrl20Base; private String pathToMono; /** /** * Get the value of cveUrl20Base. * Get the value of pathToMono. * * * @return the value of cveUrl20Base * @return the value of pathToMono */ */ public String getPathToMono() { return pathToMono; public String getCveUrl20Base() { return cveUrl20Base;}
/** /** * Set the value of cveUrl20Base. * Set the value of pathToMono. * * * @param cveUrl20Base new value of cveUrl20Base * @param pathToMono new value of pathToMono */ */public void setPathToMono(String pathToMono) {
this.pathToMono = pathToMono; }public void setCveUrl20Base(String cveUrl20Base) {
this.cveUrl20Base = cveUrl20Base; } /** * The path to Mono for .NET assembly analysis on non-windows systems.@Override
*/public void execute() throws BuildException {
final InputStream in = DependencyCheckTask.class.getClassLoader().getResourceAsStream(LOG_PROPERTIES_FILE);
LogUtils.prepareLogger(in, logFile);
private String pathToMono; /**dealWithReferences();
validateConfiguration();
populateSettings();
* Get the value of pathToMono. * * @return the value of pathToMono */ Engine engine = null; public String getPathToMono() { return pathToMono; try {engine = new Engine(DependencyCheckTask.class.getClassLoader());
}
for (Resource resource : path) {
final FileProvider provider = resource.as(FileProvider.class);
if (provider != null) { final File file = provider.getFile(); if (file != null && file.exists()) {engine.scan(file);
}
/** * Set the value of pathToMono. * * @param pathToMono new value of pathToMono */public void setPathToMono(String pathToMono) {
this.pathToMono = pathToMono; }}
}
@Override
try {engine.analyzeDependencies();
DatabaseProperties prop = null; CveDB cve = null; try { cve = new CveDB();cve.open();
prop = cve.getDatabaseProperties();
} catch (DatabaseException ex) { LOGGER.log(Level.FINE, "Unable to retrieve DB Properties", ex); } finally { if (cve != null) {cve.close();
}
}
final ReportGenerator reporter = new ReportGenerator(applicationName, engine.getDependencies(), engine.getAnalyzers(), prop);
reporter.generateReports(reportOutputDirectory, reportFormat);
public void execute() throws BuildException {
final InputStream in = DependencyCheckTask.class.getClassLoader().getResourceAsStream(LOG_PROPERTIES_FILE);
LogUtils.prepareLogger(in, logFile);
if (this.failBuildOnCVSS <= 10) { checkForFailure(engine.getDependencies());}
if (this.showSummary) {showSummary(engine.getDependencies());
}
} catch (IOException ex) { LOGGER.log(Level.FINE, "Unable to generate dependency-check report", ex); throw new BuildException("Unable to generate dependency-check report", ex); } catch (Exception ex) { LOGGER.log(Level.FINE, "An exception occurred; unable to continue task", ex); throw new BuildException("An exception occurred; unable to continue task", ex);}
} catch (DatabaseException ex) { LOGGER.log(Level.SEVERE, "Unable to connect to the dependency-check database; analysis has stopped"); LOGGER.log(Level.FINE, "", ex); } finally { Settings.cleanup(true); if (engine != null) {engine.cleanup();
}
}
}
dealWithReferences();
validateConfiguration();
populateSettings();
/** * Validate the configuration to ensure the parameters have been properly configured/initialized. * * @throws BuildException if the task was not configured correctly. */private void validateConfiguration() throws BuildException {
if (path == null) {
throw new BuildException("No project dependencies have been defined to analyze.");
}
if (failBuildOnCVSS < 0 || failBuildOnCVSS > 11) { throw new BuildException("Invalid configuration, failBuildOnCVSS must be between 0 and 11.");}
}
/** * Takes the properties supplied and updates the dependency-check settings. Additionally, this sets the system properties * required to change the proxy server, port, and connection timeout. */private void populateSettings() {
Settings.initialize();
InputStream taskProperties = null; Engine engine = null; try { taskProperties = this.getClass().getClassLoader().getResourceAsStream(PROPERTIES_FILE);Settings.mergeProperties(taskProperties);
} catch (IOException ex) { LOGGER.log(Level.WARNING, "Unable to load the dependency-check ant task.properties file."); LOGGER.log(Level.FINE, null, ex); } finally { if (taskProperties != null) {engine = new Engine(DependencyCheckTask.class.getClassLoader());
//todo - should this be its own task? if (updateOnly) { engine.doUpdates(); } else { try {taskProperties.close();
} catch (IOException ex) { LOGGER.log(Level.FINEST, null, ex);}
}
}
if (dataDirectory != null) { Settings.setString(Settings.KEYS.DATA_DIRECTORY, dataDirectory); } else {final File jarPath = new File(DependencyCheckTask.class.getProtectionDomain().getCodeSource().getLocation().getPath());
final File base = jarPath.getParentFile(); final String sub = Settings.getString(Settings.KEYS.DATA_DIRECTORY);final File dataDir = new File(base, sub);
Settings.setString(Settings.KEYS.DATA_DIRECTORY, dataDir.getAbsolutePath());
}
for (Resource resource : path) {
final FileProvider provider = resource.as(FileProvider.class);
if (provider != null) { final File file = provider.getFile(); if (file != null && file.exists()) {engine.scan(file);
}
}
}
Settings.setBoolean(Settings.KEYS.AUTO_UPDATE, autoUpdate);
if (proxyServer != null && !proxyServer.isEmpty()) { Settings.setString(Settings.KEYS.PROXY_SERVER, proxyServer);}
if (proxyPort != null && !proxyPort.isEmpty()) { Settings.setString(Settings.KEYS.PROXY_PORT, proxyPort);}
if (proxyUsername != null && !proxyUsername.isEmpty()) { Settings.setString(Settings.KEYS.PROXY_USERNAME, proxyUsername);}
if (proxyPassword != null && !proxyPassword.isEmpty()) { Settings.setString(Settings.KEYS.PROXY_PASSWORD, proxyPassword);}
if (connectionTimeout != null && !connectionTimeout.isEmpty()) { Settings.setString(Settings.KEYS.CONNECTION_TIMEOUT, connectionTimeout);}
if (suppressionFile != null && !suppressionFile.isEmpty()) { Settings.setString(Settings.KEYS.SUPPRESSION_FILE, suppressionFile);}
//File Type Analyzer Settings //JAR ANALYZERSettings.setBoolean(Settings.KEYS.ANALYZER_JAR_ENABLED, jarAnalyzerEnabled);
//NUSPEC ANALYZERSettings.setBoolean(Settings.KEYS.ANALYZER_NUSPEC_ENABLED, nuspecAnalyzerEnabled);
//CENTRAL ANALYZERSettings.setBoolean(Settings.KEYS.ANALYZER_CENTRAL_ENABLED, centralAnalyzerEnabled);
//NEXUS ANALYZERSettings.setBoolean(Settings.KEYS.ANALYZER_NEXUS_ENABLED, nexusAnalyzerEnabled);
if (nexusUrl != null && !nexusUrl.isEmpty()) { Settings.setString(Settings.KEYS.ANALYZER_NEXUS_URL, nexusUrl);}
Settings.setBoolean(Settings.KEYS.ANALYZER_NEXUS_PROXY, nexusUsesProxy);
//ARCHIVE ANALYZERSettings.setBoolean(Settings.KEYS.ANALYZER_ARCHIVE_ENABLED, archiveAnalyzerEnabled);
if (zipExtensions != null && !zipExtensions.isEmpty()) { Settings.setString(Settings.KEYS.ADDITIONAL_ZIP_EXTENSIONS, zipExtensions);}
//ASSEMBLY ANALYZERSettings.setBoolean(Settings.KEYS.ANALYZER_ASSEMBLY_ENABLED, assemblyAnalyzerEnabled);
if (pathToMono != null && !pathToMono.isEmpty()) { Settings.setString(Settings.KEYS.ANALYZER_ASSEMBLY_MONO_PATH, pathToMono);}
if (databaseDriverName != null && !databaseDriverName.isEmpty()) { Settings.setString(Settings.KEYS.DB_DRIVER_NAME, databaseDriverName);}
if (databaseDriverPath != null && !databaseDriverPath.isEmpty()) { Settings.setString(Settings.KEYS.DB_DRIVER_PATH, databaseDriverPath);}
if (connectionString != null && !connectionString.isEmpty()) { Settings.setString(Settings.KEYS.DB_CONNECTION_STRING, connectionString);}
if (databaseUser != null && !databaseUser.isEmpty()) { Settings.setString(Settings.KEYS.DB_USER, databaseUser);}
if (databasePassword != null && !databasePassword.isEmpty()) { Settings.setString(Settings.KEYS.DB_PASSWORD, databasePassword);}
if (cveUrl12Modified != null && !cveUrl12Modified.isEmpty()) { Settings.setString(Settings.KEYS.CVE_MODIFIED_12_URL, cveUrl12Modified);}
if (cveUrl20Modified != null && !cveUrl20Modified.isEmpty()) { Settings.setString(Settings.KEYS.CVE_MODIFIED_20_URL, cveUrl20Modified);}
if (cveUrl12Base != null && !cveUrl12Base.isEmpty()) { Settings.setString(Settings.KEYS.CVE_SCHEMA_1_2, cveUrl12Base);}
if (cveUrl20Base != null && !cveUrl20Base.isEmpty()) { Settings.setString(Settings.KEYS.CVE_SCHEMA_2_0, cveUrl20Base);}
}
/** * Checks to see if a vulnerability has been identified with a CVSS score that is above the threshold set in the * configuration. * * @param dependencies the list of dependency objects * @throws BuildException thrown if a CVSS score is found that is higher then the threshold set */private void checkForFailure(List<Dependency> dependencies) throws BuildException {
final StringBuilder ids = new StringBuilder(); for (Dependency d : dependencies) { for (Vulnerability v : d.getVulnerabilities()) { if (v.getCvssScore() >= failBuildOnCVSS) { if (ids.length() == 0) { ids.append(v.getName()); } else { ids.append(", ").append(v.getName());engine.analyzeDependencies();
DatabaseProperties prop = null; CveDB cve = null; try { cve = new CveDB();cve.open();
prop = cve.getDatabaseProperties();
} catch (DatabaseException ex) { LOGGER.log(Level.FINE, "Unable to retrieve DB Properties", ex); } finally { if (cve != null) {cve.close();
}
}
}
} } if (ids.length() > 0) { final String msg = String.format("%n%nDependency-Check Failure:%n" + "One or more dependencies were identified with vulnerabilities that have a CVSS score greater then '%.1f': %s%n" + "See the dependency-check report for more details.%n%n", failBuildOnCVSS, ids.toString()); throw new BuildException(msg);}
}final ReportGenerator reporter = new ReportGenerator(applicationName, engine.getDependencies(), engine.getAnalyzers(), prop);
reporter.generateReports(reportOutputDirectory, reportFormat);
if (this.failBuildOnCVSS <= 10) { checkForFailure(engine.getDependencies());}
if (this.showSummary) {showSummary(engine.getDependencies());
}
} catch (IOException ex) { LOGGER.log(Level.FINE, "Unable to generate dependency-check report", ex); throw new BuildException("Unable to generate dependency-check report", ex); } catch (Exception ex) { LOGGER.log(Level.FINE, "An exception occurred; unable to continue task", ex); throw new BuildException("An exception occurred; unable to continue task", ex);}
}
} catch (DatabaseException ex) { LOGGER.log(Level.SEVERE, "Unable to connect to the dependency-check database; analysis has stopped"); LOGGER.log(Level.FINE, "", ex); } finally { Settings.cleanup(true); if (engine != null) {engine.cleanup();
}
}
}
/** * Generates a warning message listing a summary of dependencies and their associated CPE and CVE entries. * Validate the configuration to ensure the parameters have been properly configured/initialized. * * @throws BuildException if the task was not configured correctly. */private void validateConfiguration() throws BuildException {
if (path == null) {
throw new BuildException("No project dependencies have been defined to analyze.");
}
if (failBuildOnCVSS < 0 || failBuildOnCVSS > 11) { throw new BuildException("Invalid configuration, failBuildOnCVSS must be between 0 and 11.");}
}
/** * Takes the properties supplied and updates the dependency-check settings. Additionally, this sets the system properties * required to change the proxy server, port, and connection timeout. */private void populateSettings() {
Settings.initialize();
InputStream taskProperties = null; try { taskProperties = this.getClass().getClassLoader().getResourceAsStream(PROPERTIES_FILE);Settings.mergeProperties(taskProperties);
} catch (IOException ex) { LOGGER.log(Level.WARNING, "Unable to load the dependency-check ant task.properties file."); LOGGER.log(Level.FINE, null, ex); } finally { if (taskProperties != null) { try {taskProperties.close();
} catch (IOException ex) { LOGGER.log(Level.FINEST, null, ex);}
}
}
if (dataDirectory != null) { Settings.setString(Settings.KEYS.DATA_DIRECTORY, dataDirectory); } else {final File jarPath = new File(DependencyCheckTask.class.getProtectionDomain().getCodeSource().getLocation().getPath());
final File base = jarPath.getParentFile(); final String sub = Settings.getString(Settings.KEYS.DATA_DIRECTORY);final File dataDir = new File(base, sub);
Settings.setString(Settings.KEYS.DATA_DIRECTORY, dataDir.getAbsolutePath());
}
Settings.setBoolean(Settings.KEYS.AUTO_UPDATE, autoUpdate);
if (proxyServer != null && !proxyServer.isEmpty()) { Settings.setString(Settings.KEYS.PROXY_SERVER, proxyServer);}
if (proxyPort != null && !proxyPort.isEmpty()) { Settings.setString(Settings.KEYS.PROXY_PORT, proxyPort);}
if (proxyUsername != null && !proxyUsername.isEmpty()) { Settings.setString(Settings.KEYS.PROXY_USERNAME, proxyUsername);}
if (proxyPassword != null && !proxyPassword.isEmpty()) { Settings.setString(Settings.KEYS.PROXY_PASSWORD, proxyPassword);}
if (connectionTimeout != null && !connectionTimeout.isEmpty()) { Settings.setString(Settings.KEYS.CONNECTION_TIMEOUT, connectionTimeout);}
if (suppressionFile != null && !suppressionFile.isEmpty()) { Settings.setString(Settings.KEYS.SUPPRESSION_FILE, suppressionFile);}
//File Type Analyzer Settings //JAR ANALYZERSettings.setBoolean(Settings.KEYS.ANALYZER_JAR_ENABLED, jarAnalyzerEnabled);
//NUSPEC ANALYZERSettings.setBoolean(Settings.KEYS.ANALYZER_NUSPEC_ENABLED, nuspecAnalyzerEnabled);
//CENTRAL ANALYZERSettings.setBoolean(Settings.KEYS.ANALYZER_CENTRAL_ENABLED, centralAnalyzerEnabled);
//NEXUS ANALYZERSettings.setBoolean(Settings.KEYS.ANALYZER_NEXUS_ENABLED, nexusAnalyzerEnabled);
if (nexusUrl != null && !nexusUrl.isEmpty()) { Settings.setString(Settings.KEYS.ANALYZER_NEXUS_URL, nexusUrl);}
Settings.setBoolean(Settings.KEYS.ANALYZER_NEXUS_PROXY, nexusUsesProxy);
//ARCHIVE ANALYZERSettings.setBoolean(Settings.KEYS.ANALYZER_ARCHIVE_ENABLED, archiveAnalyzerEnabled);
if (zipExtensions != null && !zipExtensions.isEmpty()) { Settings.setString(Settings.KEYS.ADDITIONAL_ZIP_EXTENSIONS, zipExtensions);}
//ASSEMBLY ANALYZERSettings.setBoolean(Settings.KEYS.ANALYZER_ASSEMBLY_ENABLED, assemblyAnalyzerEnabled);
if (pathToMono != null && !pathToMono.isEmpty()) { Settings.setString(Settings.KEYS.ANALYZER_ASSEMBLY_MONO_PATH, pathToMono);}
if (databaseDriverName != null && !databaseDriverName.isEmpty()) { Settings.setString(Settings.KEYS.DB_DRIVER_NAME, databaseDriverName);}
if (databaseDriverPath != null && !databaseDriverPath.isEmpty()) { Settings.setString(Settings.KEYS.DB_DRIVER_PATH, databaseDriverPath);}
if (connectionString != null && !connectionString.isEmpty()) { Settings.setString(Settings.KEYS.DB_CONNECTION_STRING, connectionString);}
if (databaseUser != null && !databaseUser.isEmpty()) { Settings.setString(Settings.KEYS.DB_USER, databaseUser);}
if (databasePassword != null && !databasePassword.isEmpty()) { Settings.setString(Settings.KEYS.DB_PASSWORD, databasePassword);}
if (cveUrl12Modified != null && !cveUrl12Modified.isEmpty()) { Settings.setString(Settings.KEYS.CVE_MODIFIED_12_URL, cveUrl12Modified);}
if (cveUrl20Modified != null && !cveUrl20Modified.isEmpty()) { Settings.setString(Settings.KEYS.CVE_MODIFIED_20_URL, cveUrl20Modified);}
if (cveUrl12Base != null && !cveUrl12Base.isEmpty()) { Settings.setString(Settings.KEYS.CVE_SCHEMA_1_2, cveUrl12Base);}
if (cveUrl20Base != null && !cveUrl20Base.isEmpty()) { Settings.setString(Settings.KEYS.CVE_SCHEMA_2_0, cveUrl20Base);}
}
/** * Checks to see if a vulnerability has been identified with a CVSS score that is above the threshold set in the * configuration. * * @param dependencies the list of dependency objects * @param dependencies a list of dependency objects * @throws BuildException thrown if a CVSS score is found that is higher then the threshold set */private void showSummary(List<Dependency> dependencies) {
final StringBuilder summary = new StringBuilder();
for (Dependency d : dependencies) {
boolean firstEntry = true;
final StringBuilder ids = new StringBuilder();
for (Vulnerability v : d.getVulnerabilities()) {
if (firstEntry) {
firstEntry = false; } else { ids.append(", ");private void checkForFailure(List<Dependency> dependencies) throws BuildException {
final StringBuilder ids = new StringBuilder(); for (Dependency d : dependencies) { for (Vulnerability v : d.getVulnerabilities()) { if (v.getCvssScore() >= failBuildOnCVSS) { if (ids.length() == 0) { ids.append(v.getName()); } else { ids.append(", ").append(v.getName());}
}
ids.append(v.getName());
}
if (ids.length() > 0) {
summary.append(d.getFileName()).append(" ("); firstEntry = true;for (Identifier id : d.getIdentifiers()) {
if (firstEntry) {
firstEntry = false; } else { summary.append(", "); } } if (ids.length() > 0) { final String msg = String.format("%n%nDependency-Check Failure:%n" + "One or more dependencies were identified with vulnerabilities that have a CVSS score greater then '%.1f': %s%n" + "See the dependency-check report for more details.%n%n", failBuildOnCVSS, ids.toString()); throw new BuildException(msg);}
}}
summary.append(id.getValue());
}
summary.append(") : ").append(ids).append(NEW_LINE);}
}
if (summary.length() > 0) {final String msg = String.format("%n%n"
+ "One or more dependencies were identified with known vulnerabilities:%n%n%s" + "%n%nSee the dependency-check report for more details.%n%n", summary.toString());LOGGER.log(Level.WARNING, msg);
}
}
/** * An enumeration of supported report formats: "ALL", "HTML", "XML", "VULN", etc.. */public static class ReportFormats extends EnumeratedAttribute {
/** * Returns the list of values for the report format. * * @return the list of values for the report format */@Override
public String[] getValues() { int i = 0; final Format[] formats = Format.values();final String[] values = new String[formats.length];
for (Format format : formats) {
values[i++] = format.name();
}
return values;}
}
/** * Whether or not the Jar Analyzer is enabled. */private boolean jarAnalyzerEnabled = true;
/** * Returns whether or not the analyzer is enabled. * Generates a warning message listing a summary of dependencies and their associated CPE and CVE entries. * * @return true if the analyzer is enabled * @param dependencies a list of dependency objects */private void showSummary(List<Dependency> dependencies) {
final StringBuilder summary = new StringBuilder();
for (Dependency d : dependencies) {
boolean firstEntry = true;
final StringBuilder ids = new StringBuilder();
for (Vulnerability v : d.getVulnerabilities()) {
if (firstEntry) {
firstEntry = false; } else { ids.append(", ");}
ids.append(v.getName());
}
if (ids.length() > 0) {
summary.append(d.getFileName()).append(" ("); firstEntry = true;for (Identifier id : d.getIdentifiers()) {
if (firstEntry) {
firstEntry = false; } else { summary.append(", ");}
summary.append(id.getValue());
}
summary.append(") : ").append(ids).append(NEW_LINE);}
}
if (summary.length() > 0) {final String msg = String.format("%n%n"
+ "One or more dependencies were identified with known vulnerabilities:%n%n%s" + "%n%nSee the dependency-check report for more details.%n%n", summary.toString());LOGGER.log(Level.WARNING, msg);
}
}
/** * An enumeration of supported report formats: "ALL", "HTML", "XML", "VULN", etc.. */public static class ReportFormats extends EnumeratedAttribute {
/**public boolean isJarAnalyzerEnabled() {
return jarAnalyzerEnabled; * Returns the list of values for the report format. *}
* @return the list of values for the report format */@Override
public String[] getValues() { int i = 0; final Format[] formats = Format.values();final String[] values = new String[formats.length];
for (Format format : formats) {
values[i++] = format.name();
}
return values;}
}
/** * Whether or not the Jar Analyzer is enabled. */private boolean jarAnalyzerEnabled = true;
/** * Returns whether or not the analyzer is enabled. * * @return true if the analyzer is enabled */public boolean isJarAnalyzerEnabled() {
return jarAnalyzerEnabled;}
}
-
dependency-check-ant
+
-
dependency-check-ant
+
-
dependency-check-ant
+
1.16-beta2 Latest Incremental
org.owasp:dependency-check-core
| dependency-check-core | |
| Current Version | -1.2.9 | 1.2.10 |
|---|---|
| Scope | compile | dependency-check-utils |
| Current Version | -1.2.9 | 1.2.10 |
| Scope | compile | dependency-check-ant |
| Version | -1.2.9 | 1.2.10 |
| Type | jar | 0 | 0 | 100% | -19.106 |
+
Note: failures are anticipated and checked for with assertions while errors are unanticipated.
Package List
@@ -302,7 +302,7 @@ function toggleDisplay(elementId) {+
Note: package statistics are not computed recursively, they only sum up all of its testsuites numbers.
org.owasp.dependencycheck.taskdefs
@@ -324,7 +324,7 @@ function toggleDisplay(elementId) {Test Cases
[Summary] [Package List] [Test Cases]
@@ -334,19 +334,19 @@ function toggleDisplay(elementId) {+
diff --git a/dependency-check-ant/taglist.html b/dependency-check-ant/taglist.html index fa2ddb0e6..586690c48 100644 --- a/dependency-check-ant/taglist.html +++ b/dependency-check-ant/taglist.html @@ -1,13 +1,13 @@ - +
-
dependency-check-ant
+
Each tag is detailed below:
Todo Work
-Number of occurrences found in the code: 1
+Number of occurrences found in the code: 2
| org.owasp.dependencycheck.taskdefs.DependencyCheckTask | +Line | ||||||
|---|---|---|---|---|---|---|---|
| - should this be its own task? | +936 | ||||||
| org.owasp.dependencycheck.taskdefs.DependencyCheckTaskTest | Line | ||||||
| Organization | Organization URL | -Roles | -Properties | Roles | |||
 |
+ |
Jeremy Long | jeremy.long@owasp.org | OWASP | -https://www.owasp.org/index.php/OWASP_Dependency_Check | -architect, developer | -picUrl=https://plus.google.com/s2/photos/profile/108968019311857145023, twitter=@ctxt | https://www.owasp.org/ | +architect, developer |
 |
Steve Springett | Steve.Springett@owasp.org | OWASP | -https://www.owasp.org/index.php/OWASP_Dependency_Check | -developer | -- | https://www.owasp.org/ | +developer |
 |
Will Stranathan | Will.Stranathan@owasp.org | OWASP | -https://www.owasp.org/index.php/OWASP_Dependency_Check | -developer | -twitter=@willathome |
Contributors
The following additional people have contributed to this project through the way of suggestions, patches or documentation.
"suppression"public static final StringUPDATE_ONLY"updateonly"public static final StringVERBOSE_LOG"log"public static final StringVERBOSE_LOG_SHORT"l"public static final StringVERSION"version"public static final StringA C D E G H I M N O P R S V
+
A C D E G H I M N O P R S U V
+isUpdateOnly() - Method in class org.owasp.dependencycheck.CliParser
+
+
@@ -381,12 +385,7 @@
+A C D E G H I M N O P R S U V A
@@ -349,6 +349,10 @@Determines if the 'scan' command line argument was passed in.
Checks if the update only flag has been set.
+- org.owasp.dependencycheck - package org.owasp.dependencycheck
-
-- -+
org.owasp.dependencycheck - - - Includes the main entry point for the DependencyChecker.Includes the main entry point for the DependencyChecker. - OUT - Static variable in class org.owasp.dependencycheck.CliParser.ARGUMENT
-
@@ -486,6 +485,16 @@
The CLI argument name for setting the location of the suppression file.
U
+-
+
- UPDATE_ONLY - Static variable in class org.owasp.dependencycheck.CliParser.ARGUMENT +
-
+The long CLI argument name specifying that only the update phase should be executed; no scan should be run.+
+
The long CLI argument name asking for the version.
-A C D E G H I M N O P R S V
diff --git a/dependency-check-cli/apidocs/index.html b/dependency-check-cli/apidocs/index.html
index cbd6cb660..d34d393a6 100644
--- a/dependency-check-cli/apidocs/index.html
+++ b/dependency-check-cli/apidocs/index.html
@@ -2,9 +2,9 @@
-
+
-Dependency-Check Command Line 1.2.9 API
+Dependency-Check Command Line 1.2.10 API
@@ -100,7 +100,7 @@
extends Object
Jeremy Long
diff --git a/dependency-check-cli/apidocs/org/owasp/dependencycheck/CliParser.ARGUMENT.html b/dependency-check-cli/apidocs/org/owasp/dependencycheck/CliParser.ARGUMENT.html
index bbfe54026..f6e799c68 100644
--- a/dependency-check-cli/apidocs/org/owasp/dependencycheck/CliParser.ARGUMENT.html
+++ b/dependency-check-cli/apidocs/org/owasp/dependencycheck/CliParser.ARGUMENT.html
@@ -2,16 +2,16 @@
-
+
-The command line interface for the DependencyCheck application.
- Author: -
- Jeremy Long
static StringUPDATE_ONLY
+The long CLI argument name specifying that only the update phase should be executed; no scan should be run.
+static StringVERBOSE_LOG
The CLI argument name for setting the location of the data directory.
static StringVERBOSE_LOG_SHORT
The short CLI argument name for setting the location of the data directory.
static StringVERSION
The short CLI argument name asking for the version.
static StringVERSION_SHORT
The long CLI argument name asking for the version.
@@ -484,6 +490,17 @@ extends See Also:-
+
-
+
UPDATE_ONLY
+public static final String UPDATE_ONLY
+The long CLI argument name specifying that only the update phase should be executed; no scan should be run.+- See Also:
- Constant Field Values
+
A utility to parse command line arguments for the DependencyCheck.
- Author: -
- Jeremy Long
booleanisUpdateOnly()
+Checks if the update only flag has been set.
+voidparse(String[] args)
Parses the arguments passed in and captures the results for later use.
voidprintHelp()
Displays the command line help message to the standard output.
voidprintVersionInfo()
@@ -746,7 +752,18 @@ extends Checks if the auto update feature has been disabled. If it has been disabled via the command line this will return false.
-- Returns:
- if auto-update is allowed.
- Returns:
trueif auto-update is allowed; otherwisefalse
-
+
-
+
isUpdateOnly
+public boolean isUpdateOnly()
+Checks if the update only flag has been set.+- Returns:
trueif the update only flag has been set; otherwisefalse.
Package org.owasp.dependencycheck
-
-
- org.owasp.dependencycheck
-
-
- Includes the main entry point for the DependencyChecker.
+Includes the main entry point for the DependencyChecker.
See: Description
Package org.owasp.dependencycheck Description
-
-
- org.owasp.dependencycheck
-
-
- Includes the main entry point for the DependencyChecker.
-
-
+Includes the main entry point for the DependencyChecker.
diff --git a/dependency-check-cli/apidocs/org/owasp/dependencycheck/package-tree.html b/dependency-check-cli/apidocs/org/owasp/dependencycheck/package-tree.html
index 2e018f269..ec99e6fa6 100644
--- a/dependency-check-cli/apidocs/org/owasp/dependencycheck/package-tree.html
+++ b/dependency-check-cli/apidocs/org/owasp/dependencycheck/package-tree.html
@@ -2,16 +2,16 @@
-
+
-org.owasp.dependencycheck Class Hierarchy (Dependency-Check Command Line 1.2.9 API)
-
+org.owasp.dependencycheck Class Hierarchy (Dependency-Check Command Line 1.2.10 API)
+
diff --git a/dependency-check-cli/apidocs/org/owasp/dependencycheck/package-use.html b/dependency-check-cli/apidocs/org/owasp/dependencycheck/package-use.html
index 34db8096f..2be050932 100644
--- a/dependency-check-cli/apidocs/org/owasp/dependencycheck/package-use.html
+++ b/dependency-check-cli/apidocs/org/owasp/dependencycheck/package-use.html
@@ -2,16 +2,16 @@
-
+
-Uses of Package org.owasp.dependencycheck (Dependency-Check Command Line 1.2.9 API)
-
+Uses of Package org.owasp.dependencycheck (Dependency-Check Command Line 1.2.10 API)
+
diff --git a/dependency-check-cli/apidocs/overview-tree.html b/dependency-check-cli/apidocs/overview-tree.html
index 43ae5b91b..f4de5bac4 100644
--- a/dependency-check-cli/apidocs/overview-tree.html
+++ b/dependency-check-cli/apidocs/overview-tree.html
@@ -2,16 +2,16 @@
-
+
-Class Hierarchy (Dependency-Check Command Line 1.2.9 API)
-
+Class Hierarchy (Dependency-Check Command Line 1.2.10 API)
+
diff --git a/dependency-check-cli/arguments.html b/dependency-check-cli/arguments.html
index 6211b51a1..ad504360d 100644
--- a/dependency-check-cli/arguments.html
+++ b/dependency-check-cli/arguments.html
@@ -1,13 +1,13 @@
-
+
dependency-check-cli - Command Line Arguments
@@ -19,7 +19,7 @@
-
+
@@ -42,7 +42,7 @@
@@ -54,7 +54,7 @@
-
+
/
@@ -67,9 +67,9 @@
- | Last Published: 2015-03-06
+ | Last Published: 2015-04-12
- Version: 1.2.9
+ Version: 1.2.10
@@ -354,6 +354,19 @@
+--updateonly
+
+
+
+If set only the update phase of dependency-check will be executed; no scan will be executed and no report will be generated.
+
+
+
- 
dependency-check-cli
+
-
dependency-check-cli
+
| Package | # Classes | Line Coverage | Branch Coverage | Complexity | ||||
| org.owasp.dependencycheck | 4 |
|
| 3.1923076923076925;3.192 | ||||
| org.owasp.dependencycheck | 4 |
|
| 3.185185185185185;3.185 |
| Package | # Classes | Line Coverage | Branch Coverage | Complexity | ||||
| All Packages | 4 |
|
| 3.1923076923076925;3.192 | ||||
| org.owasp.dependencycheck | 4 |
|
| 3.1923076923076925;3.192 | ||||
| All Packages | 4 |
|
| 3.185185185185185;3.185 | ||||
| org.owasp.dependencycheck | 4 |
|
| 3.185185185185185;3.185 |
| Classes in this File | Line Coverage | Branch Coverage | Complexity | ||||
| App |
|
| 16.75;16.75 | ||||
| App |
|
| 14.2;14.2 |
* * @author Jeremy Long <jeremy.long@owasp.org> * @author Jeremy Long */ public class App { if (cli.isGetVersion()) { cli.printVersionInfo(); } else if (cli.isRunScan()) { } else if (cli.isUpdateOnly()) { populateSettings(cli); runUpdateOnly(); } else if (cli.isRunScan()) { populateSettings(cli); try { runScan(cli.getReportDirectory(), cli.getReportFormat(), cli.getApplicationName(), cli.getScanFiles(), cli.getExcludeList()); } catch (InvalidScanPathException ex) { Logger.getLogger(App.class.getName()).log(Level.SEVERE, "An invalid scan path was detected; unable to scan '//*' paths"); } runScan(cli.getReportDirectory(), cli.getReportFormat(), cli.getApplicationName(), cli.getScanFiles(), cli.getExcludeList()); } catch (InvalidScanPathException ex) { Logger.getLogger(App.class.getName()).log(Level.SEVERE, "An invalid scan path was detected; unable to scan '//*' paths"); } } else { cli.printHelp();}
} cli.printHelp(); /** * Scans the specified directories and writes the dependency reports to the reportDirectory. * * @param reportDirectory the path to the directory where the reports will be written * @param outputFormat the output format of the report * @param applicationName the application name for the report * @param files the files/directories to scan * @param excludes the patterns for files/directories to exclude * * @throws InvalidScanPathException thrown if the path to scan starts with "//" */private void runScan(String reportDirectory, String outputFormat, String applicationName, String[] files,
String[] excludes) throws InvalidScanPathException { Engine engine = null; try { engine = new Engine(); List<String> antStylePaths = new ArrayList<String>(); if (excludes == null || excludes.length == 0) { for (String file : files) { if (file.contains("*") || file.contains("?")) { antStylePaths.add(file); } else { engine.scan(file);}
}
} else { antStylePaths = Arrays.asList(files);}
final Set<File> paths = new HashSet<File>(); for (String file : antStylePaths) { final DirectoryScanner scanner = new DirectoryScanner(); String include = file.replace('\\', '/');File baseDir;
if (include.startsWith("//")) { throw new InvalidScanPathException("Unable to scan paths specified by //"); } else if (include.startsWith("./")) { baseDir = new File("."); include = include.substring(2); } else if (include.startsWith("/")) { baseDir = new File("/"); include = include.substring(1); } else if (include.contains("/")) { final int pos = include.indexOf('/'); final String tmp = include.substring(0, pos); if (tmp.contains("*") || tmp.contains("?")) { baseDir = new File("."); } else { baseDir = new File(tmp); include = include.substring(pos + 1);}
} else { //no path info - must just be a file in the working directory baseDir = new File(".");}
scanner.setBasedir(baseDir); scanner.setIncludes(include); if (excludes != null && excludes.length > 0) { scanner.addExcludes(excludes);}
scanner.scan(); if (scanner.getIncludedFilesCount() > 0) { for (String s : scanner.getIncludedFiles()) { final File f = new File(baseDir, s); paths.add(f);}
}
} engine.scan(paths); engine.analyzeDependencies(); final List<Dependency> dependencies = engine.getDependencies(); DatabaseProperties prop = null; CveDB cve = null; try { cve = new CveDB(); cve.open(); prop = cve.getDatabaseProperties(); } catch (DatabaseException ex) { LOGGER.log(Level.FINE, "Unable to retrieve DB Properties", ex); } finally { if (cve != null) { cve.close();}
}
final ReportGenerator report = new ReportGenerator(applicationName, dependencies, engine.getAnalyzers(), prop); try { report.generateReports(reportDirectory, outputFormat); } catch (IOException ex) { LOGGER.log(Level.SEVERE, "There was an IO error while attempting to generate the report."); LOGGER.log(Level.FINE, null, ex); } catch (Throwable ex) { LOGGER.log(Level.SEVERE, "There was an error while attempting to generate the report."); LOGGER.log(Level.FINE, null, ex); } } catch (DatabaseException ex) { LOGGER.log(Level.SEVERE, "Unable to connect to the dependency-check database; analysis has stopped"); LOGGER.log(Level.FINE, "", ex); } finally { if (engine != null) { engine.cleanup();}
}
} } /** * Updates the global Settings. * Scans the specified directories and writes the dependency reports to the reportDirectory. * * @param reportDirectory the path to the directory where the reports will be written * @param outputFormat the output format of the report * @param applicationName the application name for the report * @param files the files/directories to scan * @param excludes the patterns for files/directories to exclude * * @throws InvalidScanPathException thrown if the path to scan starts with "//" */private void runScan(String reportDirectory, String outputFormat, String applicationName, String[] files,
String[] excludes) throws InvalidScanPathException { Engine engine = null; try { engine = new Engine(); List<String> antStylePaths = new ArrayList<String>(); if (excludes == null || excludes.length == 0) { for (String file : files) { if (file.contains("*") || file.contains("?")) { antStylePaths.add(file); } else { engine.scan(file);}
}
} else { antStylePaths = Arrays.asList(files);}
final Set<File> paths = new HashSet<File>(); for (String file : antStylePaths) { final DirectoryScanner scanner = new DirectoryScanner(); String include = file.replace('\\', '/');File baseDir;
if (include.startsWith("//")) { throw new InvalidScanPathException("Unable to scan paths specified by //"); } else if (include.startsWith("./")) { baseDir = new File("."); include = include.substring(2); } else if (include.startsWith("/")) { baseDir = new File("/"); include = include.substring(1); } else if (include.contains("/")) { final int pos = include.indexOf('/'); final String tmp = include.substring(0, pos); if (tmp.contains("*") || tmp.contains("?")) { baseDir = new File("."); } else { baseDir = new File(tmp); include = include.substring(pos + 1);}
} else { //no path info - must just be a file in the working directory baseDir = new File(".");}
scanner.setBasedir(baseDir); scanner.setIncludes(include); if (excludes != null && excludes.length > 0) { scanner.addExcludes(excludes);}
scanner.scan(); if (scanner.getIncludedFilesCount() > 0) { for (String s : scanner.getIncludedFiles()) { final File f = new File(baseDir, s); paths.add(f);}
}
} engine.scan(paths); engine.analyzeDependencies(); final List<Dependency> dependencies = engine.getDependencies(); DatabaseProperties prop = null; CveDB cve = null; try { cve = new CveDB(); cve.open(); prop = cve.getDatabaseProperties(); } catch (DatabaseException ex) { LOGGER.log(Level.FINE, "Unable to retrieve DB Properties", ex); } finally { if (cve != null) { cve.close();}
}
final ReportGenerator report = new ReportGenerator(applicationName, dependencies, engine.getAnalyzers(), prop); try { report.generateReports(reportDirectory, outputFormat); } catch (IOException ex) { LOGGER.log(Level.SEVERE, "There was an IO error while attempting to generate the report."); LOGGER.log(Level.FINE, null, ex); } catch (Throwable ex) { LOGGER.log(Level.SEVERE, "There was an error while attempting to generate the report."); LOGGER.log(Level.FINE, null, ex); } } catch (DatabaseException ex) { LOGGER.log(Level.SEVERE, "Unable to connect to the dependency-check database; analysis has stopped"); LOGGER.log(Level.FINE, "", ex); } finally { if (engine != null) { engine.cleanup();}
}
} * @param cli a reference to the CLI Parser that contains the command line arguments used to set the corresponding /** * settings in the core engine. * Only executes the update phase of dependency-check. */private void runUpdateOnly() {
Engine engine = null; try { engine = new Engine(); engine.doUpdates(); } catch (DatabaseException ex) { LOGGER.log(Level.SEVERE, "Unable to connect to the dependency-check database; analysis has stopped"); LOGGER.log(Level.FINE, "", ex); } finally { if (engine != null) { engine.cleanup();}
}
} /** * Updates the global Settings. * * @param cli a reference to the CLI Parser that contains the command line arguments used to set the corresponding settings in * the core engine. */private void populateSettings(CliParser cli) {
final boolean autoUpdate = cli.isAutoUpdate(); final String connectionTimeout = cli.getConnectionTimeout(); final String proxyServer = cli.getProxyServer(); final String proxyPort = cli.getProxyPort(); final String proxyUser = cli.getProxyUsername(); final String proxyPass = cli.getProxyPassword(); final String dataDirectory = cli.getDataDirectory(); final File propertiesFile = cli.getPropertiesFile(); final String suppressionFile = cli.getSuppressionFile(); final boolean jarDisabled = cli.isJarDisabled(); final boolean archiveDisabled = cli.isArchiveDisabled(); final boolean assemblyDisabled = cli.isAssemblyDisabled(); final boolean nuspecDisabled = cli.isNuspecDisabled(); final boolean centralDisabled = cli.isCentralDisabled(); final boolean nexusDisabled = cli.isNexusDisabled(); final String nexusUrl = cli.getNexusUrl(); final String databaseDriverName = cli.getDatabaseDriverName(); final String databaseDriverPath = cli.getDatabaseDriverPath(); final String connectionString = cli.getConnectionString(); final String databaseUser = cli.getDatabaseUser(); final String databasePassword = cli.getDatabasePassword(); final String additionalZipExtensions = cli.getAdditionalZipExtensions(); final String pathToMono = cli.getPathToMono(); final boolean autoUpdate = cli.isAutoUpdate(); final String connectionTimeout = cli.getConnectionTimeout(); final String proxyServer = cli.getProxyServer(); final String proxyPort = cli.getProxyPort(); final String proxyUser = cli.getProxyUsername(); final String proxyPass = cli.getProxyPassword(); final String dataDirectory = cli.getDataDirectory(); final File propertiesFile = cli.getPropertiesFile(); final String suppressionFile = cli.getSuppressionFile(); final boolean jarDisabled = cli.isJarDisabled(); final boolean archiveDisabled = cli.isArchiveDisabled(); final boolean assemblyDisabled = cli.isAssemblyDisabled(); final boolean nuspecDisabled = cli.isNuspecDisabled(); final boolean centralDisabled = cli.isCentralDisabled(); final boolean nexusDisabled = cli.isNexusDisabled(); final String nexusUrl = cli.getNexusUrl(); final String databaseDriverName = cli.getDatabaseDriverName(); final String databaseDriverPath = cli.getDatabaseDriverPath(); final String connectionString = cli.getConnectionString(); final String databaseUser = cli.getDatabaseUser(); final String databasePassword = cli.getDatabasePassword(); final String additionalZipExtensions = cli.getAdditionalZipExtensions(); final String pathToMono = cli.getPathToMono(); if (propertiesFile != null) { if (propertiesFile != null) { try { Settings.mergeProperties(propertiesFile); } catch (FileNotFoundException ex) { final String msg = String.format("Unable to load properties file '%s'", propertiesFile.getPath()); LOGGER.log(Level.SEVERE, msg); LOGGER.log(Level.FINE, null, ex); } catch (IOException ex) { final String msg = String.format("Unable to find properties file '%s'", propertiesFile.getPath()); LOGGER.log(Level.SEVERE, msg); LOGGER.log(Level.FINE, null, ex); } Settings.mergeProperties(propertiesFile); } catch (FileNotFoundException ex) { final String msg = String.format("Unable to load properties file '%s'", propertiesFile.getPath()); LOGGER.log(Level.SEVERE, msg); LOGGER.log(Level.FINE, null, ex); } catch (IOException ex) { final String msg = String.format("Unable to find properties file '%s'", propertiesFile.getPath()); LOGGER.log(Level.SEVERE, msg); LOGGER.log(Level.FINE, null, ex); }}
// We have to wait until we've merged the properties before attempting to set whether we use // the proxy for Nexus since it could be disabled in the properties, but not explicitly stated // on the command line final boolean nexusUsesProxy = cli.isNexusUsesProxy(); if (dataDirectory != null) { Settings.setString(Settings.KEYS.DATA_DIRECTORY, dataDirectory); } else if (System.getProperty("basedir") != null) { final File dataDir = new File(System.getProperty("basedir"), "data"); Settings.setString(Settings.KEYS.DATA_DIRECTORY, dataDir.getAbsolutePath()); } else { final File jarPath = new File(App.class.getProtectionDomain().getCodeSource().getLocation().getPath()); final File base = jarPath.getParentFile(); final String sub = Settings.getString(Settings.KEYS.DATA_DIRECTORY); final File dataDir = new File(base, sub); Settings.setString(Settings.KEYS.DATA_DIRECTORY, dataDir.getAbsolutePath());}
Settings.setBoolean(Settings.KEYS.AUTO_UPDATE, autoUpdate); if (proxyServer != null && !proxyServer.isEmpty()) { Settings.setString(Settings.KEYS.PROXY_SERVER, proxyServer);}
if (proxyPort != null && !proxyPort.isEmpty()) { Settings.setString(Settings.KEYS.PROXY_PORT, proxyPort);}
if (proxyUser != null && !proxyUser.isEmpty()) { Settings.setString(Settings.KEYS.PROXY_USERNAME, proxyUser);}
if (proxyPass != null && !proxyPass.isEmpty()) { Settings.setString(Settings.KEYS.PROXY_PASSWORD, proxyPass);}
if (connectionTimeout != null && !connectionTimeout.isEmpty()) { Settings.setString(Settings.KEYS.CONNECTION_TIMEOUT, connectionTimeout);}
if (suppressionFile != null && !suppressionFile.isEmpty()) { Settings.setString(Settings.KEYS.SUPPRESSION_FILE, suppressionFile);}
// the proxy for Nexus since it could be disabled in the properties, but not explicitly stated // on the command line final boolean nexusUsesProxy = cli.isNexusUsesProxy(); if (dataDirectory != null) { Settings.setString(Settings.KEYS.DATA_DIRECTORY, dataDirectory); } else if (System.getProperty("basedir") != null) { final File dataDir = new File(System.getProperty("basedir"), "data"); Settings.setString(Settings.KEYS.DATA_DIRECTORY, dataDir.getAbsolutePath()); } else { final File jarPath = new File(App.class.getProtectionDomain().getCodeSource().getLocation().getPath()); final File base = jarPath.getParentFile(); final String sub = Settings.getString(Settings.KEYS.DATA_DIRECTORY); final File dataDir = new File(base, sub); Settings.setString(Settings.KEYS.DATA_DIRECTORY, dataDir.getAbsolutePath()); //File Type Analyzer Settings Settings.setBoolean(Settings.KEYS.ANALYZER_JAR_ENABLED, !jarDisabled); Settings.setBoolean(Settings.KEYS.ANALYZER_ARCHIVE_ENABLED, !archiveDisabled); Settings.setBoolean(Settings.KEYS.ANALYZER_NUSPEC_ENABLED, !nuspecDisabled); Settings.setBoolean(Settings.KEYS.ANALYZER_ASSEMBLY_ENABLED, !assemblyDisabled); Settings.setBoolean(Settings.KEYS.ANALYZER_CENTRAL_ENABLED, !centralDisabled); Settings.setBoolean(Settings.KEYS.ANALYZER_NEXUS_ENABLED, !nexusDisabled); if (nexusUrl != null && !nexusUrl.isEmpty()) { Settings.setString(Settings.KEYS.ANALYZER_NEXUS_URL, nexusUrl);}
Settings.setBoolean(Settings.KEYS.AUTO_UPDATE, autoUpdate); if (proxyServer != null && !proxyServer.isEmpty()) { Settings.setString(Settings.KEYS.PROXY_SERVER, proxyServer);}
if (proxyPort != null && !proxyPort.isEmpty()) { Settings.setString(Settings.KEYS.PROXY_PORT, proxyPort);}
if (proxyUser != null && !proxyUser.isEmpty()) { Settings.setString(Settings.KEYS.PROXY_USERNAME, proxyUser);}
Settings.setBoolean(Settings.KEYS.ANALYZER_NEXUS_PROXY, nexusUsesProxy); if (databaseDriverName != null && !databaseDriverName.isEmpty()) { Settings.setString(Settings.KEYS.DB_DRIVER_NAME, databaseDriverName); if (proxyPass != null && !proxyPass.isEmpty()) { Settings.setString(Settings.KEYS.PROXY_PASSWORD, proxyPass);}
if (databaseDriverPath != null && !databaseDriverPath.isEmpty()) { Settings.setString(Settings.KEYS.DB_DRIVER_PATH, databaseDriverPath); if (connectionTimeout != null && !connectionTimeout.isEmpty()) { Settings.setString(Settings.KEYS.CONNECTION_TIMEOUT, connectionTimeout);}
if (suppressionFile != null && !suppressionFile.isEmpty()) { Settings.setString(Settings.KEYS.SUPPRESSION_FILE, suppressionFile);}
if (connectionString != null && !connectionString.isEmpty()) { Settings.setString(Settings.KEYS.DB_CONNECTION_STRING, connectionString);}
if (databaseUser != null && !databaseUser.isEmpty()) { Settings.setString(Settings.KEYS.DB_USER, databaseUser);}
if (databasePassword != null && !databasePassword.isEmpty()) { Settings.setString(Settings.KEYS.DB_PASSWORD, databasePassword); //File Type Analyzer Settings Settings.setBoolean(Settings.KEYS.ANALYZER_JAR_ENABLED, !jarDisabled); Settings.setBoolean(Settings.KEYS.ANALYZER_ARCHIVE_ENABLED, !archiveDisabled); Settings.setBoolean(Settings.KEYS.ANALYZER_NUSPEC_ENABLED, !nuspecDisabled); Settings.setBoolean(Settings.KEYS.ANALYZER_ASSEMBLY_ENABLED, !assemblyDisabled); Settings.setBoolean(Settings.KEYS.ANALYZER_CENTRAL_ENABLED, !centralDisabled); Settings.setBoolean(Settings.KEYS.ANALYZER_NEXUS_ENABLED, !nexusDisabled); if (nexusUrl != null && !nexusUrl.isEmpty()) { Settings.setString(Settings.KEYS.ANALYZER_NEXUS_URL, nexusUrl);}
if (additionalZipExtensions != null && !additionalZipExtensions.isEmpty()) { Settings.setString(Settings.KEYS.ADDITIONAL_ZIP_EXTENSIONS, additionalZipExtensions); Settings.setBoolean(Settings.KEYS.ANALYZER_NEXUS_PROXY, nexusUsesProxy); if (databaseDriverName != null && !databaseDriverName.isEmpty()) { Settings.setString(Settings.KEYS.DB_DRIVER_NAME, databaseDriverName);}
if (pathToMono != null && !pathToMono.isEmpty()) { Settings.setString(Settings.KEYS.ANALYZER_ASSEMBLY_MONO_PATH, pathToMono); if (databaseDriverPath != null && !databaseDriverPath.isEmpty()) { Settings.setString(Settings.KEYS.DB_DRIVER_PATH, databaseDriverPath);}
} if (connectionString != null && !connectionString.isEmpty()) { Settings.setString(Settings.KEYS.DB_CONNECTION_STRING, connectionString);}
if (databaseUser != null && !databaseUser.isEmpty()) { Settings.setString(Settings.KEYS.DB_USER, databaseUser);}
if (databasePassword != null && !databasePassword.isEmpty()) { Settings.setString(Settings.KEYS.DB_PASSWORD, databasePassword);}
if (additionalZipExtensions != null && !additionalZipExtensions.isEmpty()) { Settings.setString(Settings.KEYS.ADDITIONAL_ZIP_EXTENSIONS, additionalZipExtensions);}
if (pathToMono != null && !pathToMono.isEmpty()) { Settings.setString(Settings.KEYS.ANALYZER_ASSEMBLY_MONO_PATH, pathToMono);}
}}
| Classes in this File | Line Coverage | Branch Coverage | Complexity | ||||
| CliParser |
|
| 2.159090909090909;2.159 | ||||
| CliParser$ARGUMENT |
|
| 2.159090909090909;2.159 | ||||
| CliParser |
|
| 2.1555555555555554;2.156 | ||||
| CliParser$ARGUMENT |
|
| 2.1555555555555554;2.156 |
* * @author Jeremy Long <jeremy.long@owasp.org> * @author Jeremy Long */public final class CliParser {
private void addAdvancedOptions(final Options options) throws IllegalArgumentException {
final Option data = OptionBuilder.withArgName("path").hasArg().withLongOpt(ARGUMENT.DATA_DIRECTORY)
final Option updateOnly = OptionBuilder.withLongOpt(ARGUMENT.UPDATE_ONLY) .withDescription("The location of the H2 Database file. This option should generally not be set.") .withDescription("Only update the local NVD data cache; no scan will be executed.").create();.create(ARGUMENT.DATA_DIRECTORY_SHORT);
final Option connectionTimeout = OptionBuilder.withArgName("timeout").hasArg().withLongOpt(ARGUMENT.CONNECTION_TIMEOUT)
final Option data = OptionBuilder.withArgName("path").hasArg().withLongOpt(ARGUMENT.DATA_DIRECTORY)
.withDescription("The location of the H2 Database file. This option should generally not be set.") .withDescription("The connection timeout (in milliseconds) to use when downloading resources.").create(ARGUMENT.DATA_DIRECTORY_SHORT);
.create(ARGUMENT.CONNECTION_TIMEOUT_SHORT);
final Option proxyServer = OptionBuilder.withArgName("server").hasArg().withLongOpt(ARGUMENT.PROXY_SERVER)
final Option connectionTimeout = OptionBuilder.withArgName("timeout").hasArg().withLongOpt(ARGUMENT.CONNECTION_TIMEOUT)
.withDescription("The connection timeout (in milliseconds) to use when downloading resources.") .withDescription("The proxy server to use when downloading resources.").create(ARGUMENT.CONNECTION_TIMEOUT_SHORT);
.create();
final Option proxyPort = OptionBuilder.withArgName("port").hasArg().withLongOpt(ARGUMENT.PROXY_PORT)
final Option proxyServer = OptionBuilder.withArgName("server").hasArg().withLongOpt(ARGUMENT.PROXY_SERVER)
.withDescription("The proxy server to use when downloading resources.") .withDescription("The proxy port to use when downloading resources.").create();
.create();
final Option proxyUsername = OptionBuilder.withArgName("user").hasArg().withLongOpt(ARGUMENT.PROXY_USERNAME)
final Option proxyPort = OptionBuilder.withArgName("port").hasArg().withLongOpt(ARGUMENT.PROXY_PORT)
.withDescription("The proxy port to use when downloading resources.") .withDescription("The proxy username to use when downloading resources.").create();
.create();
final Option proxyPassword = OptionBuilder.withArgName("pass").hasArg().withLongOpt(ARGUMENT.PROXY_PASSWORD)
final Option proxyUsername = OptionBuilder.withArgName("user").hasArg().withLongOpt(ARGUMENT.PROXY_USERNAME)
.withDescription("The proxy username to use when downloading resources.") .withDescription("The proxy password to use when downloading resources.").create();
.create();
final Option connectionString = OptionBuilder.withArgName("connStr").hasArg().withLongOpt(ARGUMENT.CONNECTION_STRING)
final Option proxyPassword = OptionBuilder.withArgName("pass").hasArg().withLongOpt(ARGUMENT.PROXY_PASSWORD)
.withDescription("The proxy password to use when downloading resources.") .withDescription("The connection string to the database.").create();
.create();
final Option dbUser = OptionBuilder.withArgName("user").hasArg().withLongOpt(ARGUMENT.DB_NAME)
final Option connectionString = OptionBuilder.withArgName("connStr").hasArg().withLongOpt(ARGUMENT.CONNECTION_STRING)
.withDescription("The connection string to the database.") .withDescription("The username used to connect to the database.").create();
.create();
final Option dbPassword = OptionBuilder.withArgName("password").hasArg().withLongOpt(ARGUMENT.DB_PASSWORD)
final Option dbUser = OptionBuilder.withArgName("user").hasArg().withLongOpt(ARGUMENT.DB_NAME)
.withDescription("The username used to connect to the database.") .withDescription("The password for connecting to the database.").create();
.create();
final Option dbDriver = OptionBuilder.withArgName("driver").hasArg().withLongOpt(ARGUMENT.DB_DRIVER)
final Option dbPassword = OptionBuilder.withArgName("password").hasArg().withLongOpt(ARGUMENT.DB_PASSWORD)
.withDescription("The password for connecting to the database.") .withDescription("The database driver name.").create();
.create();
final Option dbDriverPath = OptionBuilder.withArgName("path").hasArg().withLongOpt(ARGUMENT.DB_DRIVER_PATH)
final Option dbDriver = OptionBuilder.withArgName("driver").hasArg().withLongOpt(ARGUMENT.DB_DRIVER)
.withDescription("The database driver name.") .withDescription("The path to the database driver; note, this does not need to be set unless the JAR is outside of the classpath.").create();
.create();
final Option disableJarAnalyzer = OptionBuilder.withLongOpt(ARGUMENT.DISABLE_JAR)final Option dbDriverPath = OptionBuilder.withArgName("path").hasArg().withLongOpt(ARGUMENT.DB_DRIVER_PATH)
.withDescription("The path to the database driver; note, this does not need to be set unless the JAR is outside of the classpath.") .withDescription("Disable the Jar Analyzer.").create();
final Option disableArchiveAnalyzer = OptionBuilder.withLongOpt(ARGUMENT.DISABLE_ARCHIVE) final Option disableJarAnalyzer = OptionBuilder.withLongOpt(ARGUMENT.DISABLE_JAR) .withDescription("Disable the Archive Analyzer.") .withDescription("Disable the Jar Analyzer.").create();
final Option disableNuspecAnalyzer = OptionBuilder.withLongOpt(ARGUMENT.DISABLE_NUSPEC) final Option disableArchiveAnalyzer = OptionBuilder.withLongOpt(ARGUMENT.DISABLE_ARCHIVE) .withDescription("Disable the Nuspec Analyzer.") .withDescription("Disable the Archive Analyzer.").create();
final Option disableAssemblyAnalyzer = OptionBuilder.withLongOpt(ARGUMENT.DISABLE_ASSEMBLY) final Option disableNuspecAnalyzer = OptionBuilder.withLongOpt(ARGUMENT.DISABLE_NUSPEC) .withDescription("Disable the .NET Assembly Analyzer.") .withDescription("Disable the Nuspec Analyzer.").create();
final Option disableCentralAnalyzer = OptionBuilder.withLongOpt(ARGUMENT.DISABLE_CENTRAL) final Option disableAssemblyAnalyzer = OptionBuilder.withLongOpt(ARGUMENT.DISABLE_ASSEMBLY) .withDescription("Disable the Central Analyzer. If this analyzer is disabled it is likely you also want to disable " .withDescription("Disable the .NET Assembly Analyzer.") + "the Nexus Analyzer.").create();
final Option disableNexusAnalyzer = OptionBuilder.withLongOpt(ARGUMENT.DISABLE_NEXUS) final Option disableCentralAnalyzer = OptionBuilder.withLongOpt(ARGUMENT.DISABLE_CENTRAL) .withDescription("Disable the Central Analyzer. If this analyzer is disabled it is likely you also want to disable " .withDescription("Disable the Nexus Analyzer.") + "the Nexus Analyzer.").create();
final Option nexusUrl = OptionBuilder.withArgName("url").hasArg().withLongOpt(ARGUMENT.NEXUS_URL)
final Option disableNexusAnalyzer = OptionBuilder.withLongOpt(ARGUMENT.DISABLE_NEXUS) .withDescription("The url to the Nexus Pro Server. If not set the Nexus Analyzer will be disabled.") .withDescription("Disable the Nexus Analyzer.").create();
final Option nexusUsesProxy = OptionBuilder.withArgName("true/false").hasArg().withLongOpt(ARGUMENT.NEXUS_USES_PROXY)
final Option nexusUrl = OptionBuilder.withArgName("url").hasArg().withLongOpt(ARGUMENT.NEXUS_URL)
.withDescription("Whether or not the configured proxy should be used when connecting to Nexus.") .withDescription("The url to the Nexus Pro Server. If not set the Nexus Analyzer will be disabled.").create();
final Option additionalZipExtensions = OptionBuilder.withArgName("extensions").hasArg()
final Option nexusUsesProxy = OptionBuilder.withArgName("true/false").hasArg().withLongOpt(ARGUMENT.NEXUS_USES_PROXY)
.withLongOpt(ARGUMENT.ADDITIONAL_ZIP_EXTENSIONS)
.withDescription("Whether or not the configured proxy should be used when connecting to Nexus.") .withDescription("A comma separated list of additional extensions to be scanned as ZIP files " + "(ZIP, EAR, WAR are already treated as zip files)").create();
final Option pathToMono = OptionBuilder.withArgName("path").hasArg().withLongOpt(ARGUMENT.PATH_TO_MONO)
final Option additionalZipExtensions = OptionBuilder.withArgName("extensions").hasArg()
.withLongOpt(ARGUMENT.ADDITIONAL_ZIP_EXTENSIONS)
.withDescription("A comma separated list of additional extensions to be scanned as ZIP files " .withDescription("The path to Mono for .NET Assembly analysis on non-windows systems.") + "(ZIP, EAR, WAR are already treated as zip files)").create();
options.addOption(proxyPort)
final Option pathToMono = OptionBuilder.withArgName("path").hasArg().withLongOpt(ARGUMENT.PATH_TO_MONO)
.addOption(proxyServer)
.withDescription("The path to Mono for .NET Assembly analysis on non-windows systems.").addOption(proxyUsername)
.addOption(proxyPassword)
.addOption(connectionTimeout)
.addOption(connectionString)
.addOption(dbUser)
.addOption(data)
.addOption(dbPassword)
.addOption(dbDriver)
.addOption(dbDriverPath)
.addOption(disableJarAnalyzer)
.addOption(disableArchiveAnalyzer)
.addOption(disableAssemblyAnalyzer)
.addOption(disableNuspecAnalyzer)
.addOption(disableCentralAnalyzer)
.addOption(disableNexusAnalyzer)
.addOption(nexusUrl)
.addOption(nexusUsesProxy)
.addOption(additionalZipExtensions)
.addOption(pathToMono);
}
/** * Adds the deprecated command line options to the given options collection. These are split out for purposes of not including * them in the help message. We need to add the deprecated options so as not to break existing scripts. * * @param options a collection of command line arguments * @throws IllegalArgumentException thrown if there is an exception */ @SuppressWarnings("static-access")private void addDeprecatedOptions(final Options options) throws IllegalArgumentException {
final Option proxyServer = OptionBuilder.withArgName("url").hasArg().withLongOpt(ARGUMENT.PROXY_URL)
.withDescription("The proxy url argument is deprecated, use proxyserver instead.").create();
options.addOption(updateOnly)
.addOption(proxyPort)
.addOption(proxyServer)
.addOption(proxyUsername)
.addOption(proxyPassword)
.addOption(connectionTimeout)
.addOption(connectionString)
.addOption(dbUser)
.addOption(data)
.addOption(dbPassword)
.addOption(dbDriver)
.addOption(dbDriverPath)
.addOption(disableJarAnalyzer)
.addOption(disableArchiveAnalyzer)
.addOption(disableAssemblyAnalyzer)
.addOption(disableNuspecAnalyzer)
.addOption(disableCentralAnalyzer)
.addOption(disableNexusAnalyzer)
.addOption(nexusUrl)
.addOption(nexusUsesProxy)
.addOption(additionalZipExtensions)
.addOption(pathToMono);
}
/** * Adds the deprecated command line options to the given options collection. These are split out for purposes of not including * them in the help message. We need to add the deprecated options so as not to break existing scripts. * * @param options a collection of command line arguments * @throws IllegalArgumentException thrown if there is an exception */ @SuppressWarnings("static-access")private void addDeprecatedOptions(final Options options) throws IllegalArgumentException {
options.addOption(proxyServer);
}
final Option proxyServer = OptionBuilder.withArgName("url").hasArg().withLongOpt(ARGUMENT.PROXY_URL)
.withDescription("The proxy url argument is deprecated, use proxyserver instead.") /**.create();
* Determines if the 'version' command line argument was passed in. * * @return whether or not the 'version' command line argument was passed inoptions.addOption(proxyServer);
}
*/public boolean isGetVersion() {
return (line != null) && line.hasOption(ARGUMENT.VERSION);
/** * Determines if the 'version' command line argument was passed in.}
* * @return whether or not the 'version' command line argument was passed in /** */ * Determines if the 'help' command line argument was passed in. *public boolean isGetVersion() {
return (line != null) && line.hasOption(ARGUMENT.VERSION);
* @return whether or not the 'help' command line argument was passed in}
*/public boolean isGetHelp() {
return (line != null) && line.hasOption(ARGUMENT.HELP);
/** * Determines if the 'help' command line argument was passed in.}
* * @return whether or not the 'help' command line argument was passed in /** */ * Determines if the 'scan' command line argument was passed in. *public boolean isGetHelp() {
return (line != null) && line.hasOption(ARGUMENT.HELP);
* @return whether or not the 'scan' command line argument was passed in}
*/public boolean isRunScan() {
return (line != null) && isValid && line.hasOption(ARGUMENT.SCAN);
/** * Determines if the 'scan' command line argument was passed in.}
* * @return whether or not the 'scan' command line argument was passed in /** */ * Returns true if the disableJar command line argument was specified. *public boolean isRunScan() {
return (line != null) && isValid && line.hasOption(ARGUMENT.SCAN);
* @return true if the disableJar command line argument was specified; otherwise false}
*/public boolean isJarDisabled() {
return (line != null) && line.hasOption(ARGUMENT.DISABLE_JAR); /** * Returns true if the disableJar command line argument was specified.}
* * @return true if the disableJar command line argument was specified; otherwise false /** */ * Returns true if the disableArchive command line argument was specified. *public boolean isJarDisabled() {
return (line != null) && line.hasOption(ARGUMENT.DISABLE_JAR); * @return true if the disableArchive command line argument was specified; otherwise false}
*/public boolean isArchiveDisabled() {
return (line != null) && line.hasOption(ARGUMENT.DISABLE_ARCHIVE); /** * Returns true if the disableArchive command line argument was specified.}
* * @return true if the disableArchive command line argument was specified; otherwise false /** */ * Returns true if the disableNuspec command line argument was specified. *public boolean isArchiveDisabled() {
return (line != null) && line.hasOption(ARGUMENT.DISABLE_ARCHIVE); * @return true if the disableNuspec command line argument was specified; otherwise false}
*/public boolean isNuspecDisabled() {
return (line != null) && line.hasOption(ARGUMENT.DISABLE_NUSPEC); /** * Returns true if the disableNuspec command line argument was specified.}
* * @return true if the disableNuspec command line argument was specified; otherwise false /** */ * Returns true if the disableAssembly command line argument was specified. *public boolean isNuspecDisabled() {
return (line != null) && line.hasOption(ARGUMENT.DISABLE_NUSPEC); * @return true if the disableAssembly command line argument was specified; otherwise false}
*/public boolean isAssemblyDisabled() {
return (line != null) && line.hasOption(ARGUMENT.DISABLE_ASSEMBLY); /** * Returns true if the disableAssembly command line argument was specified.}
* * @return true if the disableAssembly command line argument was specified; otherwise false /** */ * Returns true if the disableNexus command line argument was specified. *public boolean isAssemblyDisabled() {
return (line != null) && line.hasOption(ARGUMENT.DISABLE_ASSEMBLY); * @return true if the disableNexus command line argument was specified; otherwise false}
*/public boolean isNexusDisabled() {
return (line != null) && line.hasOption(ARGUMENT.DISABLE_NEXUS); /** * Returns true if the disableNexus command line argument was specified.}
* * @return true if the disableNexus command line argument was specified; otherwise false /** */ * Returns true if the disableCentral command line argument was specified. *public boolean isNexusDisabled() {
return (line != null) && line.hasOption(ARGUMENT.DISABLE_NEXUS); * @return true if the disableCentral command line argument was specified; otherwise false}
*/public boolean isCentralDisabled() {
return (line != null) && line.hasOption(ARGUMENT.DISABLE_CENTRAL); /** * Returns true if the disableCentral command line argument was specified.}
* * @return true if the disableCentral command line argument was specified; otherwise false /** */ * Returns the url to the nexus server if one was specified. *public boolean isCentralDisabled() {
return (line != null) && line.hasOption(ARGUMENT.DISABLE_CENTRAL); * @return the url to the nexus server; if none was specified this will return null;}
*/ public String getNexusUrl() { if (line == null || !line.hasOption(ARGUMENT.NEXUS_URL)) { return null; /** * Returns the url to the nexus server if one was specified. * } else { return line.getOptionValue(ARGUMENT.NEXUS_URL); * @return the url to the nexus server; if none was specified this will return null; */}
}
public String getNexusUrl() { if (line == null || !line.hasOption(ARGUMENT.NEXUS_URL)) { return null; /** * Returns true if the Nexus Analyzer should use the configured proxy to connect to Nexus; otherwise false is returned. * * @return true if the Nexus Analyzer should use the configured proxy to connect to Nexus; otherwise false */public boolean isNexusUsesProxy() {
// If they didn't specify whether Nexus needs to use the proxy, we should // still honor the property if it's set. if (line == null || !line.hasOption(ARGUMENT.NEXUS_USES_PROXY)) { try { return Settings.getBoolean(Settings.KEYS.ANALYZER_NEXUS_PROXY); } catch (InvalidSettingException ise) { return true;}
} else { return Boolean.parseBoolean(line.getOptionValue(ARGUMENT.NEXUS_USES_PROXY)); return line.getOptionValue(ARGUMENT.NEXUS_URL);}
}
/** * Returns true if the Nexus Analyzer should use the configured proxy to connect to Nexus; otherwise false is returned. * * @return true if the Nexus Analyzer should use the configured proxy to connect to Nexus; otherwise false */public boolean isNexusUsesProxy() {
// If they didn't specify whether Nexus needs to use the proxy, we should // still honor the property if it's set. if (line == null || !line.hasOption(ARGUMENT.NEXUS_USES_PROXY)) { try { return Settings.getBoolean(Settings.KEYS.ANALYZER_NEXUS_PROXY); } catch (InvalidSettingException ise) { return true; /** * Displays the command line help message to the standard output. */public void printHelp() {
final HelpFormatter formatter = new HelpFormatter();
final Options options = new Options();
addStandardOptions(options);
if (line != null && line.hasOption(ARGUMENT.ADVANCED_HELP)) { addAdvancedOptions(options);}
final String helpMsg = String.format("%n%s"
+ " can be used to identify if there are any known CVE vulnerabilities in libraries utilized by an application. " + "%s will automatically update required data from the Internet, such as the CVE and CPE data files from nvd.nist.gov.%n%n",Settings.getString("application.name", "DependencyCheck"),
Settings.getString("application.name", "DependencyCheck"));
formatter.printHelp(Settings.getString("application.name", "DependencyCheck"),
helpMsg,
options,
"", true);}
/** * Retrieves the file command line parameter(s) specified for the 'scan' argument. * * @return the file paths specified on the command line for scan */ public String[] getScanFiles() { return line.getOptionValues(ARGUMENT.SCAN);}
/** * Retrieves the list of excluded file patterns specified by the 'exclude' argument. * * @return the excluded file patterns */ public String[] getExcludeList() { return line.getOptionValues(ARGUMENT.EXCLUDE);}
/** * Returns the directory to write the reports to specified on the command line. * * @return the path to the reports directory. */ public String getReportDirectory() {return line.getOptionValue(ARGUMENT.OUT, ".");
}
/** * Returns the path to Mono for .NET Assembly analysis on non-windows systems. * * @return the path to Mono */ public String getPathToMono() { return line.getOptionValue(ARGUMENT.PATH_TO_MONO);}
/** * Returns the output format specified on the command line. Defaults to HTML if no format was specified. * * @return the output format name. */ public String getReportFormat() {return line.getOptionValue(ARGUMENT.OUTPUT_FORMAT, "HTML");
}
/** * Returns the application name specified on the command line. * * @return the application name. */ public String getApplicationName() { return line.getOptionValue(ARGUMENT.APP_NAME);}
/** * Returns the connection timeout. * * @return the connection timeout */ public String getConnectionTimeout() { return line.getOptionValue(ARGUMENT.CONNECTION_TIMEOUT);}
/** * Returns the proxy server. * * @return the proxy server */ public String getProxyServer() { String server = line.getOptionValue(ARGUMENT.PROXY_SERVER); if (server == null) { server = line.getOptionValue(ARGUMENT.PROXY_URL); if (server != null) { LOGGER.warning("An old command line argument 'proxyurl' was detected; use proxyserver instead");}
} else { return Boolean.parseBoolean(line.getOptionValue(ARGUMENT.NEXUS_USES_PROXY));}
return server;}
/** * Displays the command line help message to the standard output. */public void printHelp() {
final HelpFormatter formatter = new HelpFormatter();
final Options options = new Options();
addStandardOptions(options);
if (line != null && line.hasOption(ARGUMENT.ADVANCED_HELP)) { addAdvancedOptions(options);}
final String helpMsg = String.format("%n%s"
+ " can be used to identify if there are any known CVE vulnerabilities in libraries utilized by an application. " + "%s will automatically update required data from the Internet, such as the CVE and CPE data files from nvd.nist.gov.%n%n",Settings.getString("application.name", "DependencyCheck"),
Settings.getString("application.name", "DependencyCheck"));
formatter.printHelp(Settings.getString("application.name", "DependencyCheck"),
helpMsg,
options,
"", true);}
/** * Retrieves the file command line parameter(s) specified for the 'scan' argument. * * @return the file paths specified on the command line for scan */ public String[] getScanFiles() { return line.getOptionValues(ARGUMENT.SCAN);}
/** * Retrieves the list of excluded file patterns specified by the 'exclude' argument. * * @return the excluded file patterns */ public String[] getExcludeList() { return line.getOptionValues(ARGUMENT.EXCLUDE);}
/** * Returns the directory to write the reports to specified on the command line. * * @return the path to the reports directory. */ public String getReportDirectory() {return line.getOptionValue(ARGUMENT.OUT, ".");
}
/** * Returns the path to Mono for .NET Assembly analysis on non-windows systems. * * @return the path to Mono */ public String getPathToMono() { return line.getOptionValue(ARGUMENT.PATH_TO_MONO);}
/** * Returns the output format specified on the command line. Defaults to HTML if no format was specified. * * @return the output format name. */ public String getReportFormat() {return line.getOptionValue(ARGUMENT.OUTPUT_FORMAT, "HTML");
}
/** * Returns the application name specified on the command line. * * @return the application name. */ public String getApplicationName() { return line.getOptionValue(ARGUMENT.APP_NAME);}
/** * Returns the connection timeout. * * @return the connection timeout */ public String getConnectionTimeout() { return line.getOptionValue(ARGUMENT.CONNECTION_TIMEOUT);}
/** * Returns the proxy server. * * @return the proxy server */ public String getProxyServer() { String server = line.getOptionValue(ARGUMENT.PROXY_SERVER); if (server == null) { server = line.getOptionValue(ARGUMENT.PROXY_URL); if (server != null) { LOGGER.warning("An old command line argument 'proxyurl' was detected; use proxyserver instead"); /**}
* Returns the proxy port. * * @return the proxy port */ public String getProxyPort() { return line.getOptionValue(ARGUMENT.PROXY_PORT);}
/** * Returns the proxy username. * * @return the proxy username */ public String getProxyUsername() { return line.getOptionValue(ARGUMENT.PROXY_USERNAME);}
/** * Returns the proxy password. * * @return the proxy password */ public String getProxyPassword() { return line.getOptionValue(ARGUMENT.PROXY_PASSWORD);}
/** * Get the value of dataDirectory. * * @return the value of dataDirectory */ public String getDataDirectory() { return line.getOptionValue(ARGUMENT.DATA_DIRECTORY);}
/** * Returns the properties file specified on the command line. * * @return the properties file specified on the command line */ public File getPropertiesFile() { final String path = line.getOptionValue(ARGUMENT.PROP); if (path != null) { return new File(path);}
return null; return server;}
/** * Returns the proxy port. * * @return the proxy port */ public String getProxyPort() { return line.getOptionValue(ARGUMENT.PROXY_PORT);}
/** * Returns the proxy username. * * @return the proxy username */ public String getProxyUsername() { return line.getOptionValue(ARGUMENT.PROXY_USERNAME);}
/** * Returns the proxy password. * * @return the proxy password */ public String getProxyPassword() { return line.getOptionValue(ARGUMENT.PROXY_PASSWORD);}
/** * Get the value of dataDirectory. * * @return the value of dataDirectory */ public String getDataDirectory() { return line.getOptionValue(ARGUMENT.DATA_DIRECTORY);}
/** * Returns the properties file specified on the command line. * * @return the properties file specified on the command line */ public File getPropertiesFile() { final String path = line.getOptionValue(ARGUMENT.PROP); if (path != null) { return new File(path); * Returns the path to the verbose log file. *}
return null; * @return the path to the verbose log file}
*/ public String getVerboseLog() { return line.getOptionValue(ARGUMENT.VERBOSE_LOG); /** * Returns the path to the verbose log file.}
* * @return the path to the verbose log file /** */ * Returns the path to the suppression file. * public String getVerboseLog() { return line.getOptionValue(ARGUMENT.VERBOSE_LOG); * @return the path to the suppression file}
*/ public String getSuppressionFile() { return line.getOptionValue(ARGUMENT.SUPPRESSION_FILE); /** * Returns the path to the suppression file.}
* * @return the path to the suppression file /** */ * <p> * Prints the manifest information to standard output.</p> public String getSuppressionFile() { return line.getOptionValue(ARGUMENT.SUPPRESSION_FILE); * <ul><li>Implementation-Title: ${pom.name}</li>}
* <li>Implementation-Version: ${pom.version}</li></ul> */ /**public void printVersionInfo() {
final String version = String.format("%s version %s",
* <p> * Prints the manifest information to standard output.</p> Settings.getString(Settings.KEYS.APPLICATION_VAME, "dependency-check"), * <ul><li>Implementation-Title: ${pom.name}</li> Settings.getString(Settings.KEYS.APPLICATION_VERSION, "Unknown"));System.out.println(version);
}
* <li>Implementation-Version: ${pom.version}</li></ul> */public void printVersionInfo() {
final String version = String.format("%s version %s",
/** Settings.getString(Settings.KEYS.APPLICATION_VAME, "dependency-check"), * Checks if the auto update feature has been disabled. If it has been disabled via the command line this will return false. * * @return if auto-update is allowed. Settings.getString(Settings.KEYS.APPLICATION_VERSION, "Unknown"));System.out.println(version);
}
*/public boolean isAutoUpdate() {
return (line == null) || !line.hasOption(ARGUMENT.DISABLE_AUTO_UPDATE); /** * Checks if the auto update feature has been disabled. If it has been disabled via the command line this will return false.}
* * @return <code>true</code> if auto-update is allowed; otherwise <code>false</code> /** */ * Returns the database driver name if specified; otherwise null is returned. *public boolean isAutoUpdate() {
return (line == null) || !line.hasOption(ARGUMENT.DISABLE_AUTO_UPDATE); * @return the database driver name if specified; otherwise null is returned}
*/ public String getDatabaseDriverName() { return line.getOptionValue(ARGUMENT.DB_DRIVER); /** * Checks if the update only flag has been set.}
* * @return <code>true</code> if the update only flag has been set; otherwise <code>false</code>. /** */ * Returns the database driver path if specified; otherwise null is returned. *public boolean isUpdateOnly() {
return (line == null) || line.hasOption(ARGUMENT.UPDATE_ONLY); * @return the database driver name if specified; otherwise null is returned}
*/ public String getDatabaseDriverPath() { return line.getOptionValue(ARGUMENT.DB_DRIVER_PATH); /** * Returns the database driver name if specified; otherwise null is returned.}
* * @return the database driver name if specified; otherwise null is returned /** */ * Returns the database connection string if specified; otherwise null is returned. * public String getDatabaseDriverName() { return line.getOptionValue(ARGUMENT.DB_DRIVER); * @return the database connection string if specified; otherwise null is returned}
*/ public String getConnectionString() { return line.getOptionValue(ARGUMENT.CONNECTION_STRING); /** * Returns the database driver path if specified; otherwise null is returned.}
* * @return the database driver name if specified; otherwise null is returned /** */ * Returns the database database user name if specified; otherwise null is returned. * public String getDatabaseDriverPath() { return line.getOptionValue(ARGUMENT.DB_DRIVER_PATH); * @return the database database user name if specified; otherwise null is returned}
*/ public String getDatabaseUser() { return line.getOptionValue(ARGUMENT.DB_NAME); /** * Returns the database connection string if specified; otherwise null is returned.}
* * @return the database connection string if specified; otherwise null is returned /** */ * Returns the database database password if specified; otherwise null is returned. * public String getConnectionString() { return line.getOptionValue(ARGUMENT.CONNECTION_STRING); * @return the database database password if specified; otherwise null is returned}
*/ public String getDatabasePassword() { return line.getOptionValue(ARGUMENT.DB_PASSWORD); /** * Returns the database database user name if specified; otherwise null is returned.}
/** * Returns the additional Extensions if specified; otherwise null is returned. * * @return the database database user name if specified; otherwise null is returned */ public String getDatabaseUser() { return line.getOptionValue(ARGUMENT.DB_NAME); * @return the additional Extensions; otherwise null is returned */ public String getAdditionalZipExtensions() { return line.getOptionValue(ARGUMENT.ADDITIONAL_ZIP_EXTENSIONS);}
/** * A collection of static final strings that represent the possible command line arguments. * Returns the database database password if specified; otherwise null is returned. * * @return the database database password if specified; otherwise null is returned */public static class ARGUMENT {
public String getDatabasePassword() { return line.getOptionValue(ARGUMENT.DB_PASSWORD);}
/** /** * The long CLI argument name specifying the directory/file to scan. * Returns the additional Extensions if specified; otherwise null is returned. */ *public static final String SCAN = "scan";
* @return the additional Extensions; otherwise null is returned /** */ * The short CLI argument name specifying the directory/file to scan. */ public String getAdditionalZipExtensions() { return line.getOptionValue(ARGUMENT.ADDITIONAL_ZIP_EXTENSIONS);public static final String SCAN_SHORT = "s";
}
/** * The long CLI argument name specifying that the CPE/CVE/etc. data should not be automatically updated. /** */ * A collection of static final strings that represent the possible command line arguments.public static final String DISABLE_AUTO_UPDATE = "noupdate";
/** */public static class ARGUMENT {
* The short CLI argument name specifying that the CPE/CVE/etc. data should not be automatically updated. */ /**public static final String DISABLE_AUTO_UPDATE_SHORT = "n";
* The long CLI argument name specifying the directory/file to scan. /** */ * The long CLI argument name specifying the directory to write the reports to.public static final String SCAN = "scan";
*/ /**public static final String OUT = "out";
* The short CLI argument name specifying the directory/file to scan. /** */ * The short CLI argument name specifying the directory to write the reports to.public static final String SCAN_SHORT = "s";
*/ /**public static final String OUT_SHORT = "o";
* The long CLI argument name specifying that the CPE/CVE/etc. data should not be automatically updated. /** */ * The long CLI argument name specifying the output format to write the reports to.public static final String DISABLE_AUTO_UPDATE = "noupdate";
*/ /**public static final String OUTPUT_FORMAT = "format";
* The short CLI argument name specifying that the CPE/CVE/etc. data should not be automatically updated. /** */ * The short CLI argument name specifying the output format to write the reports to.public static final String DISABLE_AUTO_UPDATE_SHORT = "n";
*/ /**public static final String OUTPUT_FORMAT_SHORT = "f";
* The long CLI argument name specifying that only the update phase should be executed; no scan should be run. /** */ * The long CLI argument name specifying the name of the application to be scanned.public static final String UPDATE_ONLY = "updateonly";
*/ /**public static final String APP_NAME = "app";
* The long CLI argument name specifying the directory to write the reports to. /** */ * The short CLI argument name specifying the name of the application to be scanned.public static final String OUT = "out";
*/ /**public static final String APP_NAME_SHORT = "a";
* The short CLI argument name specifying the directory to write the reports to. /** */ * The long CLI argument name asking for help.public static final String OUT_SHORT = "o";
*/ /**public static final String HELP = "help";
* The long CLI argument name specifying the output format to write the reports to. /** */ * The long CLI argument name asking for advanced help.public static final String OUTPUT_FORMAT = "format";
*/ /**public static final String ADVANCED_HELP = "advancedHelp";
* The short CLI argument name specifying the output format to write the reports to. /** */ * The short CLI argument name asking for help.public static final String OUTPUT_FORMAT_SHORT = "f";
*/ /**public static final String HELP_SHORT = "h";
* The long CLI argument name specifying the name of the application to be scanned. /** */ * The long CLI argument name asking for the version.public static final String APP_NAME = "app";
*/ /**public static final String VERSION_SHORT = "v";
* The short CLI argument name specifying the name of the application to be scanned. /** */ * The short CLI argument name asking for the version.public static final String APP_NAME_SHORT = "a";
*/ /**public static final String VERSION = "version";
* The long CLI argument name asking for help. /** */ * The CLI argument name indicating the proxy port.public static final String HELP = "help";
*/ /**public static final String PROXY_PORT = "proxyport";
* The long CLI argument name asking for advanced help. /** * The CLI argument name indicating the proxy server. */public static final String PROXY_SERVER = "proxyserver";
public static final String ADVANCED_HELP = "advancedHelp";
/** * The short CLI argument name asking for help. */ * The CLI argument name indicating the proxy url.public static final String HELP_SHORT = "h";
* /** * @deprecated use {@link org.owasp.dependencycheck.cli.CliParser.ArgumentName#PROXY_SERVER} instead * The long CLI argument name asking for the version. */@Deprecated
public static final String VERSION_SHORT = "v";
public static final String PROXY_URL = "proxyurl";
/** /** * The short CLI argument name asking for the version. * The CLI argument name indicating the proxy username. */ */public static final String VERSION = "version";
public static final String PROXY_USERNAME = "proxyuser";
/** /** * The CLI argument name indicating the proxy port. * The CLI argument name indicating the proxy password. */ */public static final String PROXY_PORT = "proxyport";
public static final String PROXY_PASSWORD = "proxypass";
/** /** * The CLI argument name indicating the proxy server. * The short CLI argument name indicating the connection timeout. */ */public static final String PROXY_SERVER = "proxyserver";
public static final String CONNECTION_TIMEOUT_SHORT = "c";
/** /** * The CLI argument name indicating the proxy url. * The CLI argument name indicating the connection timeout. * */ * @deprecated use {@link org.owasp.dependencycheck.cli.CliParser.ArgumentName#PROXY_SERVER} insteadpublic static final String CONNECTION_TIMEOUT = "connectiontimeout";
*/ /**@Deprecated
* The short CLI argument name for setting the location of an additional properties file.public static final String PROXY_URL = "proxyurl";
*/ /**public static final String PROP_SHORT = "P";
* The CLI argument name indicating the proxy username. /** */ * The CLI argument name for setting the location of an additional properties file.public static final String PROXY_USERNAME = "proxyuser";
*/ /**public static final String PROP = "propertyfile";
* The CLI argument name indicating the proxy password. /** */ * The CLI argument name for setting the location of the data directory.public static final String PROXY_PASSWORD = "proxypass";
*/ /**public static final String DATA_DIRECTORY = "data";
* The short CLI argument name indicating the connection timeout. /** */ * The short CLI argument name for setting the location of the data directory.public static final String CONNECTION_TIMEOUT_SHORT = "c";
*/ /**public static final String DATA_DIRECTORY_SHORT = "d";
* The CLI argument name indicating the connection timeout. /** */ * The CLI argument name for setting the location of the data directory.public static final String CONNECTION_TIMEOUT = "connectiontimeout";
*/ /**public static final String VERBOSE_LOG = "log";
* The short CLI argument name for setting the location of an additional properties file. /** */ * The short CLI argument name for setting the location of the data directory.public static final String PROP_SHORT = "P";
*/ /**public static final String VERBOSE_LOG_SHORT = "l";
* The CLI argument name for setting the location of an additional properties file. /** */ * The CLI argument name for setting the location of the suppression file.public static final String PROP = "propertyfile";
*/ /**public static final String SUPPRESSION_FILE = "suppression";
* The CLI argument name for setting the location of the data directory. /** */ * Disables the Jar Analyzer.public static final String DATA_DIRECTORY = "data";
*/ /**public static final String DISABLE_JAR = "disableJar";
* The short CLI argument name for setting the location of the data directory. /** */ * Disables the Archive Analyzer.public static final String DATA_DIRECTORY_SHORT = "d";
*/ /**public static final String DISABLE_ARCHIVE = "disableArchive";
* The CLI argument name for setting the location of the data directory. /** */ * Disables the Assembly Analyzer.public static final String VERBOSE_LOG = "log";
*/ /**public static final String DISABLE_ASSEMBLY = "disableAssembly";
* The short CLI argument name for setting the location of the data directory. /** */ * Disables the Nuspec Analyzer.public static final String VERBOSE_LOG_SHORT = "l";
*/ /**public static final String DISABLE_NUSPEC = "disableNuspec";
* The CLI argument name for setting the location of the suppression file. /** */ * Disables the Central Analyzer.public static final String SUPPRESSION_FILE = "suppression";
*/ /**public static final String DISABLE_CENTRAL = "disableCentral";
* Disables the Jar Analyzer. /** */ * Disables the Nexus Analyzer.public static final String DISABLE_JAR = "disableJar";
*/ /**public static final String DISABLE_NEXUS = "disableNexus";
* Disables the Archive Analyzer. /** */ * The URL of the nexus server.public static final String DISABLE_ARCHIVE = "disableArchive";
*/ /**public static final String NEXUS_URL = "nexus";
* Disables the Assembly Analyzer. /** */ * Whether or not the defined proxy should be used when connecting to Nexus.public static final String DISABLE_ASSEMBLY = "disableAssembly";
*/ /**public static final String NEXUS_USES_PROXY = "nexusUsesProxy";
* Disables the Nuspec Analyzer. /** */ * The CLI argument name for setting the connection string.public static final String DISABLE_NUSPEC = "disableNuspec";
*/ /**public static final String CONNECTION_STRING = "connectionString";
* Disables the Central Analyzer. /** */ * The CLI argument name for setting the database user name.public static final String DISABLE_CENTRAL = "disableCentral";
*/ /**public static final String DB_NAME = "dbUser";
* Disables the Nexus Analyzer. /** */ * The CLI argument name for setting the database password.public static final String DISABLE_NEXUS = "disableNexus";
*/ /**public static final String DB_PASSWORD = "dbPassword";
* The URL of the nexus server. /** */ * The CLI argument name for setting the database driver name.public static final String NEXUS_URL = "nexus";
*/ /**public static final String DB_DRIVER = "dbDriverName";
* Whether or not the defined proxy should be used when connecting to Nexus. /** */ * The CLI argument name for setting the path to the database driver; in case it is not on the class path.public static final String NEXUS_USES_PROXY = "nexusUsesProxy";
*/ /**public static final String DB_DRIVER_PATH = "dbDriverPath";
* The CLI argument name for setting the connection string. /** */ * The CLI argument name for setting the path to mono for .NET Assembly analysis on non-windows systems.public static final String CONNECTION_STRING = "connectionString";
*/ /**public static final String PATH_TO_MONO = "mono";
* The CLI argument name for setting the database user name. /** */ * The CLI argument name for setting extra extensions.public static final String DB_NAME = "dbUser";
*/public static final String ADDITIONAL_ZIP_EXTENSIONS = "zipExtensions";
/** * Exclude path argument. * The CLI argument name for setting the database password. */public static final String DB_PASSWORD = "dbPassword";
/**public static final String EXCLUDE = "exclude";
* The CLI argument name for setting the database driver name.}
*/public static final String DB_DRIVER = "dbDriverName";
/** * The CLI argument name for setting the path to the database driver; in case it is not on the class path. */public static final String DB_DRIVER_PATH = "dbDriverPath";
/** * The CLI argument name for setting the path to mono for .NET Assembly analysis on non-windows systems. */public static final String PATH_TO_MONO = "mono";
/** * The CLI argument name for setting extra extensions. */public static final String ADDITIONAL_ZIP_EXTENSIONS = "zipExtensions";
/** * Exclude path argument. */public static final String EXCLUDE = "exclude";
}
}
* * @author Jeremy Long <jeremy.long@owasp.org> * @author Jeremy Long */}
-
dependency-check-cli
+
1.16-beta2 Latest Incremental
org.owasp:dependency-check-core
| dependency-check-core | |
| Current Version | -1.2.9 | 1.2.10 |
|---|---|
| Scope | compile | dependency-check-utils |
| Current Version | -1.2.9 | 1.2.10 |
| Scope | compile | Hard coded reference to an absolute pathname in org.owasp.dependencycheck.App.runScan(String, String, String, String[], String[]) | STYLE | DMI_HARDCODED_ABSOLUTE_FILENAME | -151 | +154 | Medium |
-
dependency-check-cli
+
-
dependency-check-cli
+
Installation & Usage
-Download the dependency-check command line tool here. Extract the zip file to a location on your computer and put the ‘bin’ directory into the path environment variable. On *nix systems you will likely need to make the shell script executable:
+Download the dependency-check command line tool here. Extract the zip file to a location on your computer and put the ‘bin’ directory into the path environment variable. On *nix systems you will likely need to make the shell script executable:
$ chmod +777 dependency-check.sh
diff --git a/dependency-check-cli/issue-tracking.html b/dependency-check-cli/issue-tracking.html
index 0601454c7..2e42bb6c5 100644
--- a/dependency-check-cli/issue-tracking.html
+++ b/dependency-check-cli/issue-tracking.html
@@ -1,13 +1,13 @@
-
+
dependency-check-cli - Issue Tracking
@@ -19,7 +19,7 @@
-
+
@@ -42,7 +42,7 @@
- dependency-check-cli
+
@@ -54,7 +54,7 @@
-
+
/
@@ -67,9 +67,9 @@
- | Last Published: 2015-03-06
+ | Last Published: 2015-04-12
- Version: 1.2.9
+ Version: 1.2.10
diff --git a/dependency-check-cli/license.html b/dependency-check-cli/license.html
index fd95c03d0..0f80a0a31 100644
--- a/dependency-check-cli/license.html
+++ b/dependency-check-cli/license.html
@@ -1,13 +1,13 @@
-
+
dependency-check-cli - Project License
@@ -19,7 +19,7 @@
-
+
@@ -42,7 +42,7 @@
- dependency-check-cli
+
@@ -54,7 +54,7 @@
-
+
/
@@ -67,9 +67,9 @@
- | Last Published: 2015-03-06
+ | Last Published: 2015-04-12
- Version: 1.2.9
+ Version: 1.2.10
diff --git a/dependency-check-cli/mail-lists.html b/dependency-check-cli/mail-lists.html
index 472c4c95b..f80e9f269 100644
--- a/dependency-check-cli/mail-lists.html
+++ b/dependency-check-cli/mail-lists.html
@@ -1,13 +1,13 @@
-
+
dependency-check-cli - Project Mailing Lists
@@ -19,7 +19,7 @@
-
+
@@ -42,7 +42,7 @@
- dependency-check-cli
+
@@ -54,7 +54,7 @@
-
+
/
@@ -67,9 +67,9 @@
- | Last Published: 2015-03-06
+ | Last Published: 2015-04-12
- Version: 1.2.9
+ Version: 1.2.10
diff --git a/dependency-check-cli/plugin-updates-report.html b/dependency-check-cli/plugin-updates-report.html
index b507ed52d..a4df7c44d 100644
--- a/dependency-check-cli/plugin-updates-report.html
+++ b/dependency-check-cli/plugin-updates-report.html
@@ -1,13 +1,13 @@
-
+
dependency-check-cli - Plugin Updates Report
@@ -19,7 +19,7 @@
-
+
@@ -42,7 +42,7 @@
- dependency-check-cli
+
@@ -54,7 +54,7 @@
-
+
/
@@ -67,9 +67,9 @@
- | Last Published: 2015-03-06
+ | Last Published: 2015-04-12
- Version: 1.2.9
+ Version: 1.2.10
diff --git a/dependency-check-cli/pmd.html b/dependency-check-cli/pmd.html
index 8501461f7..96984d61d 100644
--- a/dependency-check-cli/pmd.html
+++ b/dependency-check-cli/pmd.html
@@ -1,13 +1,13 @@
-
+
dependency-check-cli - PMD Results
@@ -19,7 +19,7 @@
-
+
@@ -42,7 +42,7 @@
- dependency-check-cli
+
@@ -54,7 +54,7 @@
-
+
/
@@ -67,9 +67,9 @@
- | Last Published: 2015-03-06
+ | Last Published: 2015-04-12
- Version: 1.2.9
+ Version: 1.2.10
@@ -244,7 +244,7 @@
Line
Logger should be a field, dont chain it
-103
+106
org/owasp/dependencycheck/CliParser.java
@@ -253,34 +253,37 @@
Line
Useless parentheses.
-399
+404
Useless parentheses.
-408
+413
Useless parentheses.
-417
+422
Useless parentheses.
-426
+431
Useless parentheses.
-435
+440
Useless parentheses.
-444
+449
Useless parentheses.
-453
+458
Useless parentheses.
-462
+467
Useless parentheses.
-471
+476
Useless parentheses.
-695
+700
+
+Useless parentheses.
+709
-
dependency-check-cli
+
-
dependency-check-cli
+
-
dependency-check-cli
+
-
dependency-check-cli
+
-
dependency-check-cli
+
+
Note: failures are anticipated and checked for with assertions while errors are unanticipated.
Package List
@@ -288,7 +288,7 @@ function toggleDisplay(elementId) {+
Note: package statistics are not computed recursively, they only sum up all of its testsuites numbers.
Test Cases
[Summary] [Package List] [Test Cases]
@@ -320,7 +320,7 @@ function toggleDisplay(elementId) {
-
dependency-check-cli
+
-
dependency-check-cli
+
Contributors
The following additional people have contributed to this project through the way of suggestions, patches or documentation.
-
+
-
+
+
+org.owasp.dependencycheck.xml.pom.PomHandler ++ + +Modifier and Type +Constant Field +Value ++ ++ + +public static final StringARTIFACTID"artifactId"+ ++ + +public static final StringDESCRIPTION"description"+ ++ + +public static final StringGROUPID"groupId"+ ++ + +public static final StringLICENSE"license"+ ++ + +public static final StringLICENSES"licenses"+ ++ + +public static final StringNAME"name"+ ++ + +public static final StringORGANIZATION"organization"+ ++ + +public static final StringPARENT"parent"+ ++ + +public static final StringPROJECT"project"+ ++ + +public static final StringURL"url"+ + ++ + +public static final StringVERSION"version"
+
diff --git a/dependency-check-core/apidocs/deprecated-list.html b/dependency-check-core/apidocs/deprecated-list.html
index b20fa2de9..079a509c0 100644
--- a/dependency-check-core/apidocs/deprecated-list.html
+++ b/dependency-check-core/apidocs/deprecated-list.html
@@ -2,16 +2,16 @@
-
+
-Deprecated List (Dependency-Check Core 1.2.9 API)
-
+Deprecated List (Dependency-Check Core 1.2.10 API)
+
diff --git a/dependency-check-core/apidocs/help-doc.html b/dependency-check-core/apidocs/help-doc.html
index 9f09bc3ba..fb75f0429 100644
--- a/dependency-check-core/apidocs/help-doc.html
+++ b/dependency-check-core/apidocs/help-doc.html
@@ -2,16 +2,16 @@
-
+
-API Help (Dependency-Check Core 1.2.9 API)
-
+API Help (Dependency-Check Core 1.2.10 API)
+
diff --git a/dependency-check-core/apidocs/index-all.html b/dependency-check-core/apidocs/index-all.html
index c2b89a08a..cdafe95a6 100644
--- a/dependency-check-core/apidocs/index-all.html
+++ b/dependency-check-core/apidocs/index-all.html
@@ -2,16 +2,16 @@
-
+
-Index (Dependency-Check Core 1.2.9 API)
-
+Index (Dependency-Check Core 1.2.10 API)
+
@@ -94,36 +94,6 @@
-Activation - Class in org.owasp.dependencycheck.jaxb.pom.generated
-
-
-Activation() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Activation
-
-activation - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-
-ActivationFile - Class in org.owasp.dependencycheck.jaxb.pom.generated
-
-
-ActivationFile() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.ActivationFile
-
-ActivationOS - Class in org.owasp.dependencycheck.jaxb.pom.generated
-
-
-ActivationOS() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.ActivationOS
-
-ActivationProperty - Class in org.owasp.dependencycheck.jaxb.pom.generated
-
-
-ActivationProperty() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.ActivationProperty
-
-activeByDefault - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Activation
-
add(String, String, String) - Method in class org.owasp.dependencycheck.data.update.UpdateableNvdCve
+ addLicense(License) - Method in class org.owasp.dependencycheck.xml.pom.Model
+
+
addProjectReference(String) - Method in class org.owasp.dependencycheck.dependency.Dependency
- address - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Notifier
-
addSuppressedIdentifier(Identifier) - Method in class org.owasp.dependencycheck.dependency.Dependency
- analyzePOM(Dependency, File) - Method in class org.owasp.dependencycheck.jaxb.pom.PomUtils
+analyzePOM(Dependency, File) - Static method in class org.owasp.dependencycheck.xml.pom.PomUtils
@@ -365,38 +337,10 @@
-any - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Contributor.Properties
-
-any - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Developer.Properties
-
-any - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model.Properties
-
-any - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model.Reports
-
-any - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Notifier.Configuration
-
-any - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin.Configuration
-
-any - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin.Goals
-
-any - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.PluginExecution.Configuration
-
-any - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Profile.Properties
-
-any - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Profile.Reports
-
-any - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.ReportPlugin.Configuration
-
-any - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.ReportSet.Configuration
-
appendEscapedLuceneQuery(StringBuilder, CharSequence) - Static method in class org.owasp.dependencycheck.data.lucene.LuceneUtils
-arch - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.ActivationOS
-
-archive - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.MailingList
-
ArchiveAnalyzer - Class in org.owasp.dependencycheck.analyzer
@@ -1111,7 +1123,7 @@
+1.9 Next Minor
1.9.1
1.9.2
1.9.4 Latest Minor
Constructs a new AbstractTokenizingFilter.
The conditions within the build runtime environment which will trigger
- the automatic inclusion of the build profile.
-This is the file specification used to activate the profile.
-This is an activator which will detect an operating system's attributes in order to activate
- its profile.
-This is the property specification used to activate a profile.
-Adds a new entry of updateable information to the contained collection.
@@ -184,6 +154,10 @@
Adds an entry to the list of detected Identifiers for the dependency file.
Adds a new license to the list of licenses.
+Adds a project reference.
@@ -200,8 +174,6 @@
Adds a related dependency.
Adds an identifier to the list of suppressed identifiers.
@@ -349,7 +321,7 @@
Attempts to find a pom.xml within the JAR file.
Reads in the pom file and adds elements as evidence to the given dependency.
Creates a new instance of AnalyzerService.
Appends the text to the supplied StringBuilder escaping Lucene control characters in the process.
@@ -425,22 +369,10 @@
-artifactId - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Dependency
-
-artifactId - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Exclusion
-
-artifactId - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Extension
-
-artifactId - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-
-artifactId - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Parent
-
-artifactId - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin
-
-artifactId - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Relocation
-
-artifactId - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.ReportPlugin
-
+ARTIFACTID - Static variable in class org.owasp.dependencycheck.xml.pom.PomHandler
+
+
AssemblyAnalyzer - Class in org.owasp.dependencycheck.analyzer
Creates a new ArchiveExtractionException.
The artifactId element.
+Analyzer for getting company, product, and version information from a .NET assembly.
@@ -453,76 +385,6 @@
B
-
-
- Build - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-3.0.0+-
-
- Build() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Build -
- -
- build - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model -
- -
- build - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Profile -
- -
- Build.Extensions - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-Java class for anonymous complex type.-
-
- Build.Extensions() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Build.Extensions -
- -
- Build.Filters - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-Java class for anonymous complex type.-
-
- Build.Filters() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Build.Filters -
- -
- Build.Plugins - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-Java class for anonymous complex type.-
-
- Build.Plugins() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Build.Plugins -
- -
- Build.Resources - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-Java class for anonymous complex type.-
-
- Build.Resources() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Build.Resources -
- -
- Build.TestResources - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-Java class for anonymous complex type.-
-
- Build.TestResources() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Build.TestResources -
- -
- BuildBase - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-3.0.0+-
-
- BuildBase() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase -
- -
- BuildBase.Filters - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-Java class for anonymous complex type.-
-
- BuildBase.Filters() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase.Filters -
- -
- BuildBase.Plugins - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-Java class for anonymous complex type.-
-
- BuildBase.Plugins() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase.Plugins -
- -
- BuildBase.Resources - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-Java class for anonymous complex type.-
-
- BuildBase.Resources() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase.Resources -
- -
- BuildBase.TestResources - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-Java class for anonymous complex type.-
-
- BuildBase.TestResources() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase.TestResources -
- buildSearch(String, String, Set<String>, Set<String>) - Method in class org.owasp.dependencycheck.analyzer.CPEAnalyzer
-
@@ -565,24 +427,10 @@
- checksumPolicy - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.RepositoryPolicy
-- CiManagement - Class in org.owasp.dependencycheck.jaxb.pom.generated
+- characters(char[], int, int) - Method in class org.owasp.dependencycheck.xml.pom.PomHandler
- -
-4.0.0+Collects the body text of the node being processed.- CiManagement() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.CiManagement
-- ciManagement - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- CiManagement.Notifiers - Class in org.owasp.dependencycheck.jaxb.pom.generated
-- -
-Java class for anonymous complex type.-- CiManagement.Notifiers() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.CiManagement.Notifiers
-- classifier - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Dependency
-- cleanup() - Static method in class org.owasp.dependencycheck.data.nvdcve.ConnectionFactory
Cleans up resources and unloads any registered database drivers.@@ -672,8 +520,6 @@- comments - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.License
-- commit() - Method in class org.owasp.dependencycheck.data.nvdcve.CveDB
Commits all completed transactions.@@ -712,18 +558,6 @@- configuration - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Notifier
-- configuration - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin
-- configuration - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.PluginExecution
-- configuration - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.ReportPlugin
-- configuration - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.ReportSet
-- connection - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Scm
-- ConnectionFactory - Class in org.owasp.dependencycheck.data.nvdcve
Loads the configured database driver and returns the database connection.@@ -744,29 +578,6 @@- Contributor - Class in org.owasp.dependencycheck.jaxb.pom.generated
-- -
-Description of a person who has contributed to the project, but who does - not have commit privileges.-- Contributor() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Contributor
-- contributor - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model.Contributors
-- Contributor.Properties - Class in org.owasp.dependencycheck.jaxb.pom.generated
-- -
-Java class for anonymous complex type.-- Contributor.Properties() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Contributor.Properties
-- Contributor.Roles - Class in org.owasp.dependencycheck.jaxb.pom.generated
-- -
-Java class for anonymous complex type.-- Contributor.Roles() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Contributor.Roles
-- contributors - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- CORE_FILES - Static variable in class org.owasp.dependencycheck.analyzer.FalsePositiveAnalyzer
Regex to identify core java library files.@@ -804,74 +615,6 @@- CpeSuppressionAnalyzer() - Constructor for class org.owasp.dependencycheck.analyzer.CpeSuppressionAnalyzer
- createActivation() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Activation- createActivationFile() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-ActivationFile- createActivationOS() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-ActivationOS- createActivationProperty() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-ActivationProperty- createBuild() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Build- createBuildBase() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-BuildBase- createBuildBaseFilters() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-BuildBase.Filters- createBuildBasePlugins() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-BuildBase.Plugins- createBuildBaseResources() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-BuildBase.Resources- createBuildBaseTestResources() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-BuildBase.TestResources- createBuildExtensions() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Build.Extensions- createBuildFilters() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Build.Filters- createBuildPlugins() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Build.Plugins- createBuildResources() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Build.Resources- createBuildTestResources() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Build.TestResources- createCiManagement() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-CiManagement- createCiManagementNotifiers() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
Create an instance of-CiManagement.Notifiers- createComponents(String, Reader) - Method in class org.owasp.dependencycheck.data.lucene.FieldAnalyzer
Creates the TokenStreamComponents@@ -880,282 +623,6 @@- createContributor() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Contributor- createContributorProperties() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Contributor.Properties- createContributorRoles() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Contributor.Roles- createDependency() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Dependency- createDependencyExclusions() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Dependency.Exclusions- createDependencyManagement() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-DependencyManagement- createDependencyManagementDependencies() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-DependencyManagement.Dependencies- createDeploymentRepository() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-DeploymentRepository- createDeveloper() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Developer- createDeveloperProperties() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Developer.Properties- createDeveloperRoles() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Developer.Roles- createDistributionManagement() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-DistributionManagement- createExclusion() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Exclusion- createExtension() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Extension- createIssueManagement() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-IssueManagement- createLicense() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-License- createMailingList() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-MailingList- createMailingListOtherArchives() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-MailingList.OtherArchives- createModel() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Model- createModelContributors() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Model.Contributors- createModelDependencies() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Model.Dependencies- createModelDevelopers() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Model.Developers- createModelLicenses() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Model.Licenses- createModelMailingLists() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Model.MailingLists- createModelModules() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Model.Modules- createModelPluginRepositories() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Model.PluginRepositories- createModelProfiles() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Model.Profiles- createModelProperties() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Model.Properties- createModelReports() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Model.Reports- createModelRepositories() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Model.Repositories- createNotifier() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Notifier- createNotifierConfiguration() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Notifier.Configuration- createOrganization() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Organization- createParent() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Parent- createPlugin() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Plugin- createPluginConfiguration() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Plugin.Configuration- createPluginDependencies() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Plugin.Dependencies- createPluginExecution() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-PluginExecution- createPluginExecutionConfiguration() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-PluginExecution.Configuration- createPluginExecutionGoals() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-PluginExecution.Goals- createPluginExecutions() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Plugin.Executions- createPluginGoals() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Plugin.Goals- createPluginManagement() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-PluginManagement- createPluginManagementPlugins() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-PluginManagement.Plugins- createPrerequisites() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Prerequisites- createProfile() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Profile- createProfileDependencies() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Profile.Dependencies- createProfileModules() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Profile.Modules- createProfilePluginRepositories() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Profile.PluginRepositories- createProfileProperties() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Profile.Properties- createProfileReports() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Profile.Reports- createProfileRepositories() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Profile.Repositories- createProject(Model) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- - -
-- createRelocation() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Relocation- createReporting() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Reporting- createReportingPlugins() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Reporting.Plugins- createReportPlugin() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-ReportPlugin- createReportPluginConfiguration() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-ReportPlugin.Configuration- createReportPluginReportSets() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-ReportPlugin.ReportSets- createReportSet() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-ReportSet- createReportSetConfiguration() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-ReportSet.Configuration- createReportSetReports() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-ReportSet.Reports- createRepository() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Repository- createRepositoryPolicy() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-RepositoryPolicy- createResource() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Resource- createResourceExcludes() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Resource.Excludes- createResourceIncludes() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Resource.Includes- createScm() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
-Create an instance of-Scm- createSite() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory
-- -
Create an instance of-Site- CURRENT_ENGINE_RELEASE - Static variable in class org.owasp.dependencycheck.data.update.EngineVersionCheck
The property key indicating when the last version check occurred.@@ -1266,18 +733,6 @@- defaultGoal - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- defaultGoal - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase
-- dependencies - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.DependencyManagement
-- dependencies - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- dependencies - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin
-- dependencies - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- Dependency - Class in org.owasp.dependencycheck.dependency
A program dependency.@@ -1290,26 +745,6 @@- Dependency - Class in org.owasp.dependencycheck.jaxb.pom.generated
-- -
-3.0.0+-- Dependency() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Dependency
-- dependency - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.DependencyManagement.Dependencies
-- dependency - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model.Dependencies
-- dependency - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin.Dependencies
-- dependency - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Profile.Dependencies
-- Dependency.Exclusions - Class in org.owasp.dependencycheck.jaxb.pom.generated
-- -
-Java class for anonymous complex type.-- Dependency.Exclusions() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Dependency.Exclusions
-- DependencyBundlingAnalyzer - Class in org.owasp.dependencycheck.analyzer
@@ -1324,22 +759,6 @@diff --git a/dependency-check-core/checkstyle.rss b/dependency-check-core/checkstyle.rss index ef3021819..b31c62c1f 100644 --- a/dependency-check-core/checkstyle.rss +++ b/dependency-check-core/checkstyle.rss @@ -25,8 +25,8 @@ under the License.- DependencyCheckScanAgent() - Constructor for class org.owasp.dependencycheck.agent.DependencyCheckScanAgent
- DependencyManagement - Class in org.owasp.dependencycheck.jaxb.pom.generated
-- -
-Section for management of default dependency information for use in a group of POMs.-- DependencyManagement() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.DependencyManagement
-- dependencyManagement - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- dependencyManagement - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- DependencyManagement.Dependencies - Class in org.owasp.dependencycheck.jaxb.pom.generated
-- -
-Java class for anonymous complex type.-- DependencyManagement.Dependencies() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.DependencyManagement.Dependencies
-- DependencySimilarity - Class in org.owasp.dependencycheck.data.lucene
- DependencySimilarity() - Constructor for class org.owasp.dependencycheck.data.lucene.DependencySimilarity
@@ -1362,14 +781,10 @@A utility class to extract version numbers from file names (or other strings containing version numbers.-- DeploymentRepository - Class in org.owasp.dependencycheck.jaxb.pom.generated
+- DESCRIPTION - Static variable in class org.owasp.dependencycheck.xml.pom.PomHandler
- -
-Repository contains the information needed for deploying to the remote repository.+The description element.- DeploymentRepository() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.DeploymentRepository
-- description - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- determineCPE(Dependency) - Method in class org.owasp.dependencycheck.analyzer.CPEAnalyzer
Searches the data store of CPE entries, trying to identify the CPE for the given dependency based on the evidence contained @@ -1379,52 +794,14 @@- Developer - Class in org.owasp.dependencycheck.jaxb.pom.generated
-- -
-Information about one of the committers on this project.-- Developer() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Developer
-- developer - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model.Developers
-- Developer.Properties - Class in org.owasp.dependencycheck.jaxb.pom.generated
-- -
-Java class for anonymous complex type.-- Developer.Properties() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Developer.Properties
-- Developer.Roles - Class in org.owasp.dependencycheck.jaxb.pom.generated
-- -
-Java class for anonymous complex type.-- Developer.Roles() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Developer.Roles
-- developerConnection - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Scm
-- developers - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- directory - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- directory - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase
-- directory - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Resource
-- distribution - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.License
-- DistributionManagement - Class in org.owasp.dependencycheck.jaxb.pom.generated
-- -
-This elements describes all that pertains to distribution for a project.-- DistributionManagement() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.DistributionManagement
-- distributionManagement - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- distributionManagement - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- DOCUMENT_KEY - Static variable in class org.owasp.dependencycheck.data.cpe.Fields
- doUpdates() - Method in class org.owasp.dependencycheck.Engine
+- +
Cycles through the cached web data sources and calls update on all of them.+- DownloadTask - Class in org.owasp.dependencycheck.data.update.task
A callable object to download two files.@@ -1433,8 +810,6 @@- downloadUrl - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.DistributionManagement
-- DriverLoader - Class in org.owasp.dependencycheck.data.nvdcve
DriverLoader is a utility class that is used to load database drivers.@@ -1461,24 +836,18 @@E
-
-
- email - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Contributor -
- -
- email - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Developer -
- -
- enabled - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.RepositoryPolicy -
- endElement(String, String, String) - Method in class org.owasp.dependencycheck.data.update.xml.NvdCve12Handler
- endElement(String, String, String) - Method in class org.owasp.dependencycheck.data.update.xml.NvdCve20Handler
- -
- endElement(String, String, String) - Method in class org.owasp.dependencycheck.jaxb.pom.MavenNamespaceFilter -
-
-Indicates the start of the document.-
- endElement(String, String, String) - Method in class org.owasp.dependencycheck.suppression.SuppressionHandler
-
Handles the end element event.
+
- endElement(String, String, String) - Method in class org.owasp.dependencycheck.xml.pom.PomHandler +
-
+Handles the end element event.+
- Engine - Class in org.owasp.dependencycheck
-
Scans files, directories, etc.@@ -1575,44 +944,10 @@
- exclude - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Resource.Excludes -
- -
- excludeDefaults - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Reporting -
- -
- excludes - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Resource -
- -
- exclusion - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Dependency.Exclusions -
- -
- Exclusion - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-4.0.0-
-
- Exclusion() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Exclusion -
- -
- exclusions - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Dependency -
- execute() - Method in class org.owasp.dependencycheck.agent.DependencyCheckScanAgent
-
Executes the dependency-check and generates the report.
-
- execution - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin.Executions -
- -
- executions - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin -
- -
- exists - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.ActivationFile -
- -
- extension - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Build.Extensions -
- -
- Extension - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-Describes a build extension to utilise.-
-
- Extension() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Extension -
- -
- extensions - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Build -
- -
- extensions - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin -
- extractFiles(File, File) - Static method in class org.owasp.dependencycheck.utils.ExtractionUtil
-
Extracts the contents of an archive into the specified directory.@@ -1628,7 +963,7 @@
- ExtractionUtil - Class in org.owasp.dependencycheck.utils
- -
- extractLicense(Model, Properties, Dependency) - Static method in class org.owasp.dependencycheck.analyzer.JarAnalyzer +
- extractLicense(Model, Properties, Dependency) - Static method in class org.owasp.dependencycheck.analyzer.JarAnalyzer
-
Extracts the license information from the pom and adds it to the dependency.
@@ -1644,8 +979,6 @@
- FalsePositiveAnalyzer() - Constructor for class org.owasp.dependencycheck.analyzer.FalsePositiveAnalyzer
- family - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.ActivationOS
-- fatalError(SAXParseException) - Method in class org.owasp.dependencycheck.suppression.SuppressionErrorHandler
Handles fatal exceptions.@@ -1663,8 +996,6 @@- file - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Activation
-- FILE_PATH - Static variable in class org.owasp.dependencycheck.suppression.SuppressionHandler
The file path element name.@@ -1679,10 +1010,6 @@- filter - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Build.Filters
-- filter - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase.Filters
-- Filter<T> - Class in org.owasp.dependencycheck.utils
- Filter() - Constructor for class org.owasp.dependencycheck.utils.Filter
@@ -1691,12 +1018,6 @@- filter(Iterable<T>) - Method in class org.owasp.dependencycheck.utils.Filter
- filtering - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Resource
-- filters - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- filters - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase
-- finalize() - Method in class org.owasp.dependencycheck.analyzer.NvdCveAnalyzer
Ensures that the CVE Database is closed.@@ -1705,10 +1026,6 @@- finalName - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- finalName - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase
-- firstPathIsShortest(String, String) - Method in class org.owasp.dependencycheck.analyzer.DependencyBundlingAnalyzer
Determines which path is shortest; if path lengths are equal then we use compareTo of the string method to determine if the @@ -1744,10 +1061,6 @@- getActivation() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- -
Gets the value of the activation property.-- getActualFile() - Method in class org.owasp.dependencycheck.dependency.Dependency
Gets a reference to the File object.@@ -1756,10 +1069,6 @@- getAddress() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Notifier
-- -
Gets the value of the address property.-- getAnalysisPhase() - Method in interface org.owasp.dependencycheck.analyzer.Analyzer
Returns the phase that the analyzer is intended to run in.@@ -1869,101 +1178,17 @@- getAny() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Contributor.Properties
-- -
-Gets the value of the any property.-- getAny() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Developer.Properties
-- -
-Gets the value of the any property.-- getAny() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model.Properties
-- -
-Gets the value of the any property.-- getAny() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model.Reports
-- -
-Gets the value of the any property.-- getAny() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Notifier.Configuration
-- -
-Gets the value of the any property.-- getAny() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin.Configuration
-- -
-Gets the value of the any property.-- getAny() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin.Goals
-- -
-Gets the value of the any property.-- getAny() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.PluginExecution.Configuration
-- -
-Gets the value of the any property.-- getAny() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile.Properties
-- -
-Gets the value of the any property.-- getAny() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile.Reports
-- -
-Gets the value of the any property.-- getAny() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ReportPlugin.Configuration
-- -
-Gets the value of the any property.-- getAny() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ReportSet.Configuration
-- -
Gets the value of the any property.-- getApplicationName() - Method in class org.owasp.dependencycheck.agent.DependencyCheckScanAgent
- getArch() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ActivationOS
-- -
-Gets the value of the arch property.-- getArchive() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.MailingList
-- -
Gets the value of the archive property.-- getArtifactId() - Method in class org.owasp.dependencycheck.data.nexus.MavenArtifact
- getArtifactId() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Dependency
+- getArtifactId() - Method in class org.owasp.dependencycheck.xml.pom.Model
- -
-Gets the value of the artifactId property.-- getArtifactId() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Exclusion
-- -
-Gets the value of the artifactId property.-- getArtifactId() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Extension
-- -
-Gets the value of the artifactId property.-- getArtifactId() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Gets the value of the artifactId property.-- getArtifactId() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Parent
-- -
-Gets the value of the artifactId property.-- getArtifactId() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin
-- -
-Gets the value of the artifactId property.-- getArtifactId() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Relocation
-- -
-Gets the value of the artifactId property.-- getArtifactId() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ReportPlugin
-- -
Gets the value of the artifactId property.+Get the value of artifactId.- getArtifactUrl() - Method in class org.owasp.dependencycheck.data.nexus.MavenArtifact
- @@ -1977,38 +1202,14 @@
- getBuild() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Gets the value of the build property.-- getBuild() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- -
Gets the value of the build property.-- getCentralUrl() - Method in class org.owasp.dependencycheck.agent.DependencyCheckScanAgent
- getChecksumPolicy() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.RepositoryPolicy
-- -
-Gets the value of the checksumPolicy property.-- getCiManagement() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Gets the value of the ciManagement property.-- getClassifier() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Dependency
-- -
Gets the value of the classifier property.-- getCollection() - Method in class org.owasp.dependencycheck.data.update.UpdateableNvdCve
- getComments() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.License
-- -
Gets the value of the comments property.-- getConfidence() - Method in class org.owasp.dependencycheck.dependency.Evidence
Get the value of confidence.@@ -2017,26 +1218,6 @@- getConfiguration() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Notifier
-- -
-Gets the value of the configuration property.-- getConfiguration() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin
-- -
-Gets the value of the configuration property.-- getConfiguration() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.PluginExecution
-- -
-Gets the value of the configuration property.-- getConfiguration() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ReportPlugin
-- -
-Gets the value of the configuration property.-- getConfiguration() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ReportSet
-- -
Gets the value of the configuration property.-- getConnection() - Static method in class org.owasp.dependencycheck.data.nvdcve.ConnectionFactory
Constructs a new database connection object per the database configuration.@@ -2045,10 +1226,6 @@- getConnection() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Scm
-- -
Gets the value of the connection property.-- getConnectionString() - Method in class org.owasp.dependencycheck.agent.DependencyCheckScanAgent
Get the value of connectionString.@@ -2057,14 +1234,6 @@- getContributor() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model.Contributors
-- -
-Gets the value of the contributor property.-- getContributors() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
Gets the value of the contributors property.-- getCpe() - Method in class org.owasp.dependencycheck.suppression.SuppressionRule
Get the value of cpe.@@ -2174,14 +1343,6 @@- getDefaultGoal() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- -
-Gets the value of the defaultGoal property.-- getDefaultGoal() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase
-- -
Gets the value of the defaultGoal property.-- getDependencies() - Method in class org.owasp.dependencycheck.agent.DependencyCheckScanAgent
Returns a list of pre-determined dependencies.@@ -2190,46 +1351,6 @@- getDependencies() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.DependencyManagement
-- -
-Gets the value of the dependencies property.-- getDependencies() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Gets the value of the dependencies property.-- getDependencies() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin
-- -
-Gets the value of the dependencies property.-- getDependencies() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- -
-Gets the value of the dependencies property.-- getDependency() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.DependencyManagement.Dependencies
-- -
-Gets the value of the dependency property.-- getDependency() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model.Dependencies
-- -
-Gets the value of the dependency property.-- getDependency() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin.Dependencies
-- -
-Gets the value of the dependency property.-- getDependency() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile.Dependencies
-- -
-Gets the value of the dependency property.-- getDependencyManagement() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Gets the value of the dependencyManagement property.-- getDependencyManagement() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- -
Gets the value of the dependencyManagement property.-- getDescription() - Method in class org.owasp.dependencycheck.dependency.Dependency
Get the value of description.@@ -2242,50 +1363,14 @@- getDescription() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
+- getDescription() - Method in class org.owasp.dependencycheck.xml.pom.Model
- -
-Gets the value of the description property.-- getDeveloper() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model.Developers
-- -
-Gets the value of the developer property.-- getDeveloperConnection() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Scm
-- -
-Gets the value of the developerConnection property.-- getDevelopers() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Gets the value of the developers property.-- getDirectory() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- -
-Gets the value of the directory property.-- getDirectory() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase
-- -
-Gets the value of the directory property.-- getDirectory() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Resource
-- -
Gets the value of the directory property.+Get the value of description.- getDisplayFileName() - Method in class org.owasp.dependencycheck.dependency.Dependency
- getDistribution() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.License
-- -
-Gets the value of the distribution property.-- getDistributionManagement() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Gets the value of the distributionManagement property.-- getDistributionManagement() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- -
Gets the value of the distributionManagement property.-- getDocument(int) - Method in class org.owasp.dependencycheck.data.cpe.CpeMemoryIndex
Retrieves a document from the Index.@@ -2294,22 +1379,10 @@- getDownloadUrl() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.DistributionManagement
-- -
Gets the value of the downloadUrl property.-- getEdition() - Method in class org.owasp.dependencycheck.dependency.VulnerableSoftware
- getEmail() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Contributor
-- -
-Gets the value of the email property.-- getEmail() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Developer
-- -
Gets the value of the email property.-- getEvidence() - Method in class org.owasp.dependencycheck.dependency.Dependency
Returns the evidence used to identify this dependency.@@ -2342,54 +1415,10 @@- getExclude() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Resource.Excludes
-- -
-Gets the value of the exclude property.-- getExcludes() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Resource
-- -
-Gets the value of the excludes property.-- getExclusion() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Dependency.Exclusions
-- -
-Gets the value of the exclusion property.-- getExclusions() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Dependency
-- -
-Gets the value of the exclusions property.-- getExecution() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin.Executions
-- -
-Gets the value of the execution property.-- getExecutions() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin
-- -
-Gets the value of the executions property.-- getExists() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ActivationFile
-- -
-Gets the value of the exists property.-- getExtension() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build.Extensions
-- -
-Gets the value of the extension property.-- getExtensions() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- -
Gets the value of the extensions property.-- getFailBuildOnCVSS() - Method in class org.owasp.dependencycheck.agent.DependencyCheckScanAgent
- getFamily() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ActivationOS
-- -
-Gets the value of the family property.-- getFile() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Activation
-- -
Gets the value of the file property.-- getFileExtension() - Method in class org.owasp.dependencycheck.dependency.Dependency
Gets the file extension of the dependency.@@ -2415,30 +1444,6 @@- getFilter() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build.Filters
-- -
-Gets the value of the filter property.-- getFilter() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase.Filters
-- -
-Gets the value of the filter property.-- getFilters() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- -
-Gets the value of the filters property.-- getFilters() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase
-- -
-Gets the value of the filters property.-- getFinalName() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- -
-Gets the value of the finalName property.-- getFinalName() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase
-- -
Gets the value of the finalName property.-- getFirst() - Method in class org.owasp.dependencycheck.data.update.task.DownloadTask
Get the value of first.@@ -2451,53 +1456,13 @@- getGoal() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.PluginExecution.Goals
-- -
-Gets the value of the goal property.-- getGoals() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin
-- -
-Gets the value of the goals property.-- getGoals() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.PluginExecution
-- -
Gets the value of the goals property.-- getGroupId() - Method in class org.owasp.dependencycheck.data.nexus.MavenArtifact
- getGroupId() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Dependency
+- getGroupId() - Method in class org.owasp.dependencycheck.xml.pom.Model
- -
-Gets the value of the groupId property.-- getGroupId() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Exclusion
-- -
-Gets the value of the groupId property.-- getGroupId() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Extension
-- -
-Gets the value of the groupId property.-- getGroupId() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Gets the value of the groupId property.-- getGroupId() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Parent
-- -
-Gets the value of the groupId property.-- getGroupId() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin
-- -
-Gets the value of the groupId property.-- getGroupId() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Relocation
-- -
-Gets the value of the groupId property.-- getGroupId() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ReportPlugin
-- -
Gets the value of the groupId property.+Get the value of groupId.- getId() - Method in class org.owasp.dependencycheck.data.nuget.NugetPackage
- @@ -2507,86 +1472,14 @@
- getId() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.DeploymentRepository
-- -
-Gets the value of the id property.-- getId() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Developer
-- -
-Gets the value of the id property.-- getId() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.PluginExecution
-- -
-Gets the value of the id property.-- getId() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- -
-Gets the value of the id property.-- getId() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ReportSet
-- -
-Gets the value of the id property.-- getId() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Repository
-- -
-Gets the value of the id property.-- getId() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Site
-- -
Gets the value of the id property.-- getIdentifiers() - Method in class org.owasp.dependencycheck.dependency.Dependency
- getInceptionYear() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Gets the value of the inceptionYear property.-- getInclude() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Resource.Includes
-- -
-Gets the value of the include property.-- getIncludes() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Resource
-- -
-Gets the value of the includes property.-- getInherited() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin
-- -
-Gets the value of the inherited property.-- getInherited() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.PluginExecution
-- -
-Gets the value of the inherited property.-- getInherited() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ReportPlugin
-- -
-Gets the value of the inherited property.-- getInherited() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ReportSet
-- -
Gets the value of the inherited property.-- getInstance() - Static method in class org.owasp.dependencycheck.data.cpe.CpeMemoryIndex
- getIssueManagement() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Gets the value of the issueManagement property.-- getJdk() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Activation
-- -
-Gets the value of the jdk property.-- getLayout() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.DeploymentRepository
-- -
-Gets the value of the layout property.-- getLayout() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Repository
-- -
Gets the value of the layout property.-- getLeft() - Method in class org.owasp.dependencycheck.utils.Pair
Get the value of left.@@ -2595,13 +1488,9 @@- getLicense() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model.Licenses
+- getLicenses() - Method in class org.owasp.dependencycheck.xml.pom.Model
- -
-Gets the value of the license property.-- getLicenses() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
Gets the value of the licenses property.+Returns the list of licenses.- getLicenseUrl() - Method in class org.owasp.dependencycheck.data.nuget.NugetPackage
- @@ -2611,14 +1500,6 @@
- getMailingList() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model.MailingLists
-- -
-Gets the value of the mailingList property.-- getMailingLists() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
Gets the value of the mailingLists property.-- getMatchedAllPreviousCPE() - Method in class org.owasp.dependencycheck.dependency.Vulnerability
Get the value of matchedAllPreviousCPE.@@ -2627,45 +1508,17 @@- getMaven() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Prerequisites
-- -
Gets the value of the maven property.-- getMd5sum() - Method in class org.owasp.dependencycheck.dependency.Dependency
- getMessage() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Relocation
-- -
Gets the value of the message property.-- getMetaData() - Method in class org.owasp.dependencycheck.data.nvdcve.DatabaseProperties
- getMissing() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ActivationFile
+- getModel() - Method in class org.owasp.dependencycheck.xml.pom.PomHandler
- -
-Gets the value of the missing property.-- getModelVersion() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Gets the value of the modelVersion property.-- getModule() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model.Modules
-- -
-Gets the value of the module property.-- getModule() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile.Modules
-- -
-Gets the value of the module property.-- getModules() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Gets the value of the modules property.-- getModules() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- -
Gets the value of the modules property.+Returns the model obtained from the pom.xml.- getName() - Method in interface org.owasp.dependencycheck.analyzer.Analyzer
- @@ -2751,49 +1604,13 @@
- getName() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ActivationOS
+- getName() - Method in class org.owasp.dependencycheck.xml.pom.License
- -
-Gets the value of the name property.+Get the value of name.- getName() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ActivationProperty
+- getName() - Method in class org.owasp.dependencycheck.xml.pom.Model
- -
-Gets the value of the name property.-- getName() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Contributor
-- -
-Gets the value of the name property.-- getName() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.DeploymentRepository
-- -
-Gets the value of the name property.-- getName() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Developer
-- -
-Gets the value of the name property.-- getName() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.License
-- -
-Gets the value of the name property.-- getName() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.MailingList
-- -
-Gets the value of the name property.-- getName() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Gets the value of the name property.-- getName() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Organization
-- -
-Gets the value of the name property.-- getName() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Repository
-- -
-Gets the value of the name property.-- getName() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Site
-- -
Gets the value of the name property.+Get the value of name.- getNeedsUpdate() - Method in class org.owasp.dependencycheck.data.update.NvdCveInfo
- @@ -2811,14 +1628,6 @@
- getNotifier() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.CiManagement.Notifiers
-- -
-Gets the value of the notifier property.-- getNotifiers() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.CiManagement
-- -
Gets the value of the notifiers property.-- getNvdCveInfo() - Method in class org.owasp.dependencycheck.data.update.task.DownloadTask
Get the value of nvdCveInfo.@@ -2827,45 +1636,9 @@- getOrganization() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Contributor
+- getOrganization() - Method in class org.owasp.dependencycheck.xml.pom.Model
- -
-Gets the value of the organization property.-- getOrganization() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Developer
-- -
-Gets the value of the organization property.-- getOrganization() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Gets the value of the organization property.-- getOrganizationUrl() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Contributor
-- -
-Gets the value of the organizationUrl property.-- getOrganizationUrl() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Developer
-- -
-Gets the value of the organizationUrl property.-- getOs() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Activation
-- -
-Gets the value of the os property.-- getOtherArchive() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.MailingList.OtherArchives
-- -
-Gets the value of the otherArchive property.-- getOtherArchives() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.MailingList
-- -
-Gets the value of the otherArchives property.-- getOutputDirectory() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- -
-Gets the value of the outputDirectory property.-- getOutputDirectory() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Reporting
-- -
Gets the value of the outputDirectory property.+Get the value of organization.- getOwners() - Method in class org.owasp.dependencycheck.data.nuget.NugetPackage
- @@ -2875,90 +1648,26 @@
- getPackaging() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
+- getParentArtifactId() - Method in class org.owasp.dependencycheck.xml.pom.Model
- -
-Gets the value of the packaging property.+Get the value of parentArtifactId.- getParent() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
+- getParentGroupId() - Method in class org.owasp.dependencycheck.xml.pom.Model
- -
+Gets the value of the parent property.+Get the value of parentGroupId.+- getParentVersion() - Method in class org.owasp.dependencycheck.xml.pom.Model
+- +
Get the value of parentVersion.- getPathToMono() - Method in class org.owasp.dependencycheck.agent.DependencyCheckScanAgent
- getPhase() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.PluginExecution
-- -
-Gets the value of the phase property.-- getPlugin() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build.Plugins
-- -
-Gets the value of the plugin property.-- getPlugin() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase.Plugins
-- -
-Gets the value of the plugin property.-- getPlugin() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.PluginManagement.Plugins
-- -
-Gets the value of the plugin property.-- getPlugin() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Reporting.Plugins
-- -
-Gets the value of the plugin property.-- getPluginManagement() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- -
-Gets the value of the pluginManagement property.-- getPluginManagement() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase
-- -
-Gets the value of the pluginManagement property.-- getPluginRepositories() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Gets the value of the pluginRepositories property.-- getPluginRepositories() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- -
-Gets the value of the pluginRepositories property.-- getPluginRepository() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model.PluginRepositories
-- -
-Gets the value of the pluginRepository property.-- getPluginRepository() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile.PluginRepositories
-- -
-Gets the value of the pluginRepository property.-- getPlugins() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- -
-Gets the value of the plugins property.-- getPlugins() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase
-- -
-Gets the value of the plugins property.-- getPlugins() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.PluginManagement
-- -
-Gets the value of the plugins property.-- getPlugins() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Reporting
-- -
Gets the value of the plugins property.-- getPomUrl() - Method in class org.owasp.dependencycheck.data.nexus.MavenArtifact
- getPost() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.MailingList
-- -
-Gets the value of the post property.-- getPrerequisites() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
Gets the value of the prerequisites property.-- getPreviousVersion() - Method in class org.owasp.dependencycheck.dependency.VulnerableSoftware
Get the value of previousVersion.@@ -2975,14 +1684,6 @@- getProfile() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model.Profiles
-- -
-Gets the value of the profile property.-- getProfiles() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
Gets the value of the profiles property.-- getProjectReferences() - Method in class org.owasp.dependencycheck.dependency.Dependency
Get the value of projectReferences.@@ -2991,22 +1692,6 @@- getProperties() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Contributor
-- -
-Gets the value of the properties property.-- getProperties() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Developer
-- -
-Gets the value of the properties property.-- getProperties() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Gets the value of the properties property.-- getProperties() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- -
Gets the value of the properties property.-- getProperty(String) - Method in class org.owasp.dependencycheck.data.nvdcve.DatabaseProperties
Returns the property value for the given key.@@ -3015,10 +1700,6 @@- getProperty() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Activation
-- -
Gets the value of the property property.-- getProxyPassword() - Method in class org.owasp.dependencycheck.agent.DependencyCheckScanAgent
Get the value of proxyPassword.@@ -3049,94 +1730,14 @@- getRelativePath() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Parent
-- -
-Gets the value of the relativePath property.-- getReleases() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Repository
-- -
-Gets the value of the releases property.-- getRelocation() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.DistributionManagement
-- -
-Gets the value of the relocation property.-- getReport() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ReportSet.Reports
-- -
Gets the value of the report property.-- getReportFormat() - Method in class org.owasp.dependencycheck.agent.DependencyCheckScanAgent
- getReporting() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Gets the value of the reporting property.-- getReporting() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- -
Gets the value of the reporting property.-- getReportOutputDirectory() - Method in class org.owasp.dependencycheck.agent.DependencyCheckScanAgent
- getReports() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Gets the value of the reports property.-- getReports() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- -
-Gets the value of the reports property.-- getReports() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ReportSet
-- -
-Gets the value of the reports property.-- getReportSet() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ReportPlugin.ReportSets
-- -
-Gets the value of the reportSet property.-- getReportSets() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ReportPlugin
-- -
-Gets the value of the reportSets property.-- getRepositories() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Gets the value of the repositories property.-- getRepositories() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- -
-Gets the value of the repositories property.-- getRepository() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.DistributionManagement
-- -
-Gets the value of the repository property.-- getRepository() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model.Repositories
-- -
-Gets the value of the repository property.-- getRepository() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile.Repositories
-- -
-Gets the value of the repository property.-- getResource() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build.Resources
-- -
-Gets the value of the resource property.-- getResource() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase.Resources
-- -
-Gets the value of the resource property.-- getResources() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- -
-Gets the value of the resources property.-- getResources() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase
-- -
Gets the value of the resources property.-- getRevision() - Method in class org.owasp.dependencycheck.dependency.VulnerableSoftware
Get the value of revision.@@ -3145,38 +1746,10 @@- getRole() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Contributor.Roles
-- -
-Gets the value of the role property.-- getRole() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Developer.Roles
-- -
-Gets the value of the role property.-- getRoles() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Contributor
-- -
-Gets the value of the roles property.-- getRoles() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Developer
-- -
Gets the value of the roles property.-- getRules() - Method in class org.owasp.dependencycheck.analyzer.AbstractSuppressionAnalyzer
- getScm() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Gets the value of the scm property.-- getScope() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Dependency
-- -
-Gets the value of the scope property.-- getScriptSourceDirectory() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- -
Gets the value of the scriptSourceDirectory property.-- getSearchScore() - Method in class org.owasp.dependencycheck.data.cpe.IndexEntry
Get the value of searchScore.@@ -3193,18 +1766,6 @@- getSite() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.DistributionManagement
-- -
-Gets the value of the site property.-- getSnapshotRepository() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.DistributionManagement
-- -
-Gets the value of the snapshotRepository property.-- getSnapshots() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Repository
-- -
Gets the value of the snapshots property.-- getSource() - Method in class org.owasp.dependencycheck.dependency.Evidence
Get the value of source.@@ -3213,18 +1774,6 @@- getSourceDirectory() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- -
-Gets the value of the sourceDirectory property.-- getStatus() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.DistributionManagement
-- -
-Gets the value of the status property.-- getSubscribe() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.MailingList
-- -
Gets the value of the subscribe property.-- getSupportedExtensions() - Method in class org.owasp.dependencycheck.analyzer.AbstractFileTypeAnalyzer
@@ -3278,54 +1827,10 @@- getSystem() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.CiManagement
-- -
-Gets the value of the system property.-- getSystem() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.IssueManagement
-- -
-Gets the value of the system property.-- getSystemPath() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Dependency
-- -
-Gets the value of the systemPath property.-- getTag() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Scm
-- -
-Gets the value of the tag property.-- getTargetPath() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Resource
-- -
Gets the value of the targetPath property.-- getTermAtt() - Method in class org.owasp.dependencycheck.data.lucene.AbstractTokenizingFilter
- getTestOutputDirectory() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- -
-Gets the value of the testOutputDirectory property.-- getTestResource() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build.TestResources
-- -
-Gets the value of the testResource property.-- getTestResource() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase.TestResources
-- -
-Gets the value of the testResource property.-- getTestResources() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- -
-Gets the value of the testResources property.-- getTestResources() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase
-- -
-Gets the value of the testResources property.-- getTestSourceDirectory() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- -
Gets the value of the testSourceDirectory property.-- getTimestamp() - Method in class org.owasp.dependencycheck.data.update.NvdCveInfo
Get the value of timestamp - epoch time.@@ -3334,14 +1839,6 @@- getTimezone() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Contributor
-- -
-Gets the value of the timezone property.-- getTimezone() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Developer
-- -
Gets the value of the timezone property.-- getTitle() - Method in class org.owasp.dependencycheck.data.nuget.NugetPackage
Gets the title.@@ -3362,22 +1859,6 @@- getType() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Dependency
-- -
-Gets the value of the type property.-- getType() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Notifier
-- -
-Gets the value of the type property.-- getUnsubscribe() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.MailingList
-- -
-Gets the value of the unsubscribe property.-- getUpdatePolicy() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.RepositoryPolicy
-- -
Gets the value of the updatePolicy property.-- getUpdateToVersion() - Method in class org.owasp.dependencycheck.data.update.EngineVersionCheck
Getter for updateToVersion - only used for testing.@@ -3394,49 +1875,9 @@- getUrl() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.CiManagement
+- getUrl() - Method in class org.owasp.dependencycheck.xml.pom.License
- -
-Gets the value of the url property.-- getUrl() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Contributor
-- -
-Gets the value of the url property.-- getUrl() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.DeploymentRepository
-- -
-Gets the value of the url property.-- getUrl() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Developer
-- -
-Gets the value of the url property.-- getUrl() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.IssueManagement
-- -
-Gets the value of the url property.-- getUrl() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.License
-- -
-Gets the value of the url property.-- getUrl() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Gets the value of the url property.-- getUrl() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Organization
-- -
-Gets the value of the url property.-- getUrl() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Repository
-- -
-Gets the value of the url property.-- getUrl() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Scm
-- -
-Gets the value of the url property.-- getUrl() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Site
-- -
Gets the value of the url property.+Get the value of url.- getValue() - Method in class org.owasp.dependencycheck.dependency.Evidence
- @@ -3450,10 +1891,6 @@
- getValue() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ActivationProperty
-- -
Gets the value of the value property.-- getValue() - Method in class org.owasp.dependencycheck.suppression.PropertyType
Gets the value of the value property.@@ -3482,37 +1919,9 @@- getVersion() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ActivationOS
+- getVersion() - Method in class org.owasp.dependencycheck.xml.pom.Model
- -
-Gets the value of the version property.-- getVersion() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Dependency
-- -
-Gets the value of the version property.-- getVersion() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Extension
-- -
-Gets the value of the version property.-- getVersion() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Gets the value of the version property.-- getVersion() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Parent
-- -
-Gets the value of the version property.-- getVersion() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin
-- -
-Gets the value of the version property.-- getVersion() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Relocation
-- -
-Gets the value of the version property.-- getVersion() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ReportPlugin
-- -
Gets the value of the version property.+Get the value of version.- getVersionEvidence() - Method in class org.owasp.dependencycheck.dependency.Dependency
- @@ -3551,28 +1960,10 @@
- goal - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.PluginExecution.Goals
-- goals - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin
-- goals - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.PluginExecution
-- groupId - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Dependency
-- groupId - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Exclusion
-- groupId - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Extension
-- groupId - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- groupId - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Parent
-- groupId - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin
-- groupId - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Relocation
-- groupId - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.ReportPlugin
-- GROUPID - Static variable in class org.owasp.dependencycheck.xml.pom.PomHandler
+- +
@@ -3664,20 +2055,6 @@The artifactId element.+I
-
-
- id - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.DeploymentRepository -
- -
- id - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Developer -
- -
- id - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.PluginExecution -
- -
- id - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Profile -
- -
- id - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.ReportSet -
- -
- id - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Repository -
- -
- id - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Site -
- Identifier - Class in org.owasp.dependencycheck.dependency
- Identifier() - Constructor for class org.owasp.dependencycheck.dependency.Identifier @@ -3701,12 +2078,6 @@
-
Imports the NVD CVE XML File into the Lucene Index.
-
- inceptionYear - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model -
- -
- include - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Resource.Includes -
- -
- includes - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Resource -
- incrementToken() - Method in class org.owasp.dependencycheck.data.lucene.TokenPairConcatenatingFilter
-
Increments the underlying TokenStream and sets CharTermAttributes to construct an expanded set of tokens by @@ -3743,14 +2114,6 @@+
- inherited - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin
-- inherited - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.PluginExecution
-- inherited - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.ReportPlugin
-- inherited - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.ReportSet
-- init(RuntimeServices) - Method in class org.owasp.dependencycheck.reporting.VelocityLoggerRedirect
This will be invoked once by the LogManager.@@ -3838,10 +2201,6 @@- isActiveByDefault() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Activation
-- -
Gets the value of the activeByDefault property.-- isAutoUpdate() - Method in class org.owasp.dependencycheck.agent.DependencyCheckScanAgent
Get the value of autoUpdate.@@ -3902,10 +2261,6 @@- isEnabled() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.RepositoryPolicy
-- -
Gets the value of the enabled property.-- isEntryNode() - Method in class org.owasp.dependencycheck.data.update.xml.NvdCve12Handler.Element
Checks if the handler is at the ENTRY node.@@ -3914,21 +2269,13 @@- isExcludeDefaults() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Reporting
-- -
-Gets the value of the excludeDefaults property.-- isExtensions() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin
-- -
Gets the value of the extensions property.-- isFilesMatched() - Method in class org.owasp.dependencycheck.analyzer.AbstractFileTypeAnalyzer
- isFiltering() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Resource
+- isGenerateReport() - Method in class org.owasp.dependencycheck.agent.DependencyCheckScanAgent
- -
Gets the value of the filtering property.+Get the value of generateReport.- isLevelEnabled(int) - Method in class org.owasp.dependencycheck.reporting.VelocityLoggerRedirect
- @@ -3962,10 +2309,6 @@
- isOptional() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Dependency
-- -
Gets the value of the optional property.-- isProdNode() - Method in class org.owasp.dependencycheck.data.update.xml.NvdCve12Handler.Element
Checks if the handler is at the PROD node.@@ -3974,42 +2317,14 @@- isSendOnError() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Notifier
-- -
-Gets the value of the sendOnError property.-- isSendOnFailure() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Notifier
-- -
-Gets the value of the sendOnFailure property.-- isSendOnSuccess() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Notifier
-- -
-Gets the value of the sendOnSuccess property.-- isSendOnWarning() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Notifier
-- -
Gets the value of the sendOnWarning property.-- isShowSummary() - Method in class org.owasp.dependencycheck.agent.DependencyCheckScanAgent
- IssueManagement - Class in org.owasp.dependencycheck.jaxb.pom.generated
-- -
-Information about the issue tracking (or bug tracking) system used to manage this project.-- IssueManagement() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.IssueManagement
-- issueManagement - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- isTokenChar(int) - Method in class org.owasp.dependencycheck.data.lucene.AlphaNumericTokenizer
- isUniqueVersion() - Method in class org.owasp.dependencycheck.jaxb.pom.generated.DeploymentRepository
-- -
Gets the value of the uniqueVersion property.-- isUpdateNeeded() - Method in class org.owasp.dependencycheck.data.update.StandardUpdate
Gets whether or not an update is needed.@@ -4107,8 +2422,6 @@- jdk - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Activation
-- layout - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.DeploymentRepository
+- License - Class in org.owasp.dependencycheck.xml.pom
- layout - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Repository
+- License() - Constructor for class org.owasp.dependencycheck.xml.pom.License
- License - Class in org.owasp.dependencycheck.jaxb.pom.generated
+- License(String, String) - Constructor for class org.owasp.dependencycheck.xml.pom.License
- -
+Describes the licenses for this project.+Constructs a new license.+- LICENSE - Static variable in class org.owasp.dependencycheck.xml.pom.PomHandler
+- +
+The license element.+- LICENSES - Static variable in class org.owasp.dependencycheck.xml.pom.PomHandler
+- +
-The licenses element.- License() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.License
-- license - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model.Licenses
-- licenses - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- load(String) - Static method in class org.owasp.dependencycheck.data.nvdcve.DriverLoader
Loads the specified class using the system class loader and registers the driver with the driver manager.@@ -4168,23 +2483,6 @@M
-
-
- MailingList - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-This element describes all of the mailing lists associated with - a project.-
-
- MailingList() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.MailingList -
- -
- mailingList - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model.MailingLists -
- -
- MailingList.OtherArchives - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-Java class for anonymous complex type.-
-
- MailingList.OtherArchives() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.MailingList.OtherArchives -
- -
- mailingLists - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model -
- matches(String) - Method in class org.owasp.dependencycheck.suppression.PropertyType
-
Uses the object's properties to determine if the supplied string matches the value of this property.@@ -4193,8 +2491,6 @@
- maven - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Prerequisites -
- MavenArtifact - Class in org.owasp.dependencycheck.data.nexus
-
Simple bean representing a Maven Artifact.@@ -4215,12 +2511,6 @@
- MavenNamespaceFilter - Class in org.owasp.dependencycheck.jaxb.pom -
-
-This filter is used when parsing POM documents.-
-
- MavenNamespaceFilter() - Constructor for class org.owasp.dependencycheck.jaxb.pom.MavenNamespaceFilter -
- MAX_THREAD_POOL_SIZE - Static variable in class org.owasp.dependencycheck.data.update.StandardUpdate
-
The max thread pool size to use when downloading files.@@ -4237,135 +2527,26 @@
- message - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Relocation -
- -
- missing - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.ActivationFile -
- -
- Model - Class in org.owasp.dependencycheck.jaxb.pom.generated +
- Model - Class in org.owasp.dependencycheck.xml.pom
-
-The+
<project>element is the root of the descriptor.A simple pojo to hold data related to a Maven POM file.
- - Model() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Model -
- -
- Model.Contributors - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-- Java class for anonymous complex type.-
-
- Model.Contributors() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Model.Contributors -
- -
- Model.Dependencies - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-- Java class for anonymous complex type.-
-
- Model.Dependencies() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Model.Dependencies -
- -
- Model.Developers - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-- Java class for anonymous complex type.-
-
- Model.Developers() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Model.Developers -
- -
- Model.Licenses - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-- Java class for anonymous complex type.-
-
- Model.Licenses() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Model.Licenses -
- -
- Model.MailingLists - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-- Java class for anonymous complex type.-
-
- Model.MailingLists() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Model.MailingLists -
- -
- Model.Modules - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-- Java class for anonymous complex type.-
-
- Model.Modules() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Model.Modules -
- -
- Model.PluginRepositories - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-- Java class for anonymous complex type.-
-
- Model.PluginRepositories() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Model.PluginRepositories -
- -
- Model.Profiles - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-- Java class for anonymous complex type.-
-
- Model.Profiles() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Model.Profiles -
- -
- Model.Properties - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-- Java class for anonymous complex type.-
-
- Model.Properties() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Model.Properties -
- -
- Model.Reports - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-- Java class for anonymous complex type.-
-
- Model.Reports() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Model.Reports -
- -
- Model.Repositories - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-- Java class for anonymous complex type.-
-
- Model.Repositories() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Model.Repositories -
- -
- modelVersion - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model +
- Model() - Constructor for class org.owasp.dependencycheck.xml.pom.Model
- MODIFIED - Static variable in class org.owasp.dependencycheck.data.nvdcve.DatabaseProperties
-
Modified key word, used as a key to store information about the modified file (i.e.
-
- module - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model.Modules -
- -
- module - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Profile.Modules -
- -
- modules - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model -
- -
- modules - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Profile -
N
-
-
- name - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.ActivationOS -
- -
- name - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.ActivationProperty -
- -
- name - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Contributor -
- -
- name - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.DeploymentRepository -
- -
- name - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Developer -
- -
- name - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.License -
- -
- name - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.MailingList -
- -
- name - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model -
- -
- name - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Organization -
- -
- name - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Repository -
- -
- name - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Site -
- +
- NAME - Static variable in class org.owasp.dependencycheck.xml.pom.PomHandler +
-
+The name element.+
- newHashSet(String...) - Static method in class org.owasp.dependencycheck.analyzer.AbstractFileTypeAnalyzer
-
@@ -4418,22 +2599,6 @@+
- notifier - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.CiManagement.Notifiers
-- Notifier - Class in org.owasp.dependencycheck.jaxb.pom.generated
-- -
-Configures one method for notifying users/developers when a build breaks.-- Notifier() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Notifier
-- Notifier.Configuration - Class in org.owasp.dependencycheck.jaxb.pom.generated
-- -
-Java class for anonymous complex type.-- Notifier.Configuration() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Notifier.Configuration
-- notifiers - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.CiManagement
-- NugetPackage - Class in org.owasp.dependencycheck.data.nuget
Represents the contents of a Nuspec manifest.@@ -4533,16 +2698,6 @@O
-
-
- ObjectFactory - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-This object contains factory methods for each - Java content interface and Java element interface - generated in the org.owasp.dependencycheck.analyzer.pom.generated package.-
-
- ObjectFactory() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory -
-
-Create a new ObjectFactory that can be used to create new instances of schema derived classes for package: org.owasp.dependencycheck.analyzer.pom.generated-
- open() - Method in class org.owasp.dependencycheck.analyzer.CPEAnalyzer
-
Opens the data source.@@ -4567,227 +2722,110 @@
- optional - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Dependency -
- org.owasp.dependencycheck - package org.owasp.dependencycheck
-
-- -+
org.owasp.dependencycheck - - - Includes the main entry point (i.e.Includes the main entry point for dependency-check. - org.owasp.dependencycheck.agent - package org.owasp.dependencycheck.agent
-
-- -+
org.owasp.dependencycheck.agent - - - The agent package holds an agent API that can be used by other applications that have information about dependencies; - but would rather implement something in their code directly rather then spawn a process to run the entire - dependency-check engine.The agent package holds an agent API that can be used by other applications that have information about dependencies; but would + rather implement something in their code directly rather then spawn a process to run the entire dependency-check engine. - org.owasp.dependencycheck.analyzer - package org.owasp.dependencycheck.analyzer
-
-- -+
org.owasp.dependencycheck.analyzer - - - Analyzers are used to inspect the identified dependencies, collect Evidence, - and process the dependencies.Analyzers are used to inspect the identified dependencies, collect Evidence, and process the dependencies. - org.owasp.dependencycheck.analyzer.exception - package org.owasp.dependencycheck.analyzer.exception
-
-- -+
org.owasp.dependencycheck.analyzer.exception - -A collection of exception classes used within the analyzers. - org.owasp.dependencycheck.data.central - package org.owasp.dependencycheck.data.central
-
-- -+
org.owasp.dependencycheck.data.central - -Contains classes related to searching Maven Central.
+ + These are used to abstract Maven Central searching away from OWASP Dependency Check so they can be reused elsewhere. - org.owasp.dependencycheck.data.cpe - package org.owasp.dependencycheck.data.cpe
-
-- -+
org.owasp.dependencycheck.data.cpe - - - Contains classes for working with the CPE Lucene Index.Contains classes for working with the CPE Lucene Index. - org.owasp.dependencycheck.data.cwe - package org.owasp.dependencycheck.data.cwe
-
-- -+
org.owasp.dependencycheck.data.cwe - - - Contains classes for working with the CWE Database.Contains classes for working with the CWE Database. - org.owasp.dependencycheck.data.lucene - package org.owasp.dependencycheck.data.lucene
-
-- -+
org.owasp.dependencycheck.data.lucene - - - Contains classes used to work with the Lucene Indexes.Contains classes used to work with the Lucene Indexes. - org.owasp.dependencycheck.data.nexus - package org.owasp.dependencycheck.data.nexus
-
-- -+
org.owasp.dependencycheck.data.nexus - -Contains classes related to searching a Nexus repository.
+ + These are used to abstract Nexus searching away from OWASP Dependency Check so they can be reused elsewhere. - org.owasp.dependencycheck.data.nuget - package org.owasp.dependencycheck.data.nuget
-
-- -+
org.owasp.dependencycheck.data.nuget - -Contains classes related to parsing Nuget related files
+ These are used to abstract away Nuget-related handling from Dependency Check so they can be used elsewhere. - org.owasp.dependencycheck.data.nvdcve - package org.owasp.dependencycheck.data.nvdcve
-
-- -+
org.owasp.dependencycheck.data.nvdcve - - - Contains classes used to work with the NVD CVE data.Contains classes used to work with the NVD CVE data. - org.owasp.dependencycheck.data.update - package org.owasp.dependencycheck.data.update
-
-- -+
org.owasp.dependencycheck.data.update - -Contains classes used to update the data stores.
+ + The UpdateService will load, any correctly defined CachedWebDataSource(s) and call update() on them. - org.owasp.dependencycheck.data.update.exception - package org.owasp.dependencycheck.data.update.exception
-
-- -+
org.owasp.dependencycheck.data.update.exception - -A collection of exception classes used within the application. - org.owasp.dependencycheck.data.update.task - package org.owasp.dependencycheck.data.update.task
-
-- -+
org.owasp.dependencycheck.data.update.task - -A collection of callable/runnable tasks used to speed up the update process. - org.owasp.dependencycheck.data.update.xml - package org.owasp.dependencycheck.data.update.xml
-
-- -+
org.owasp.dependencycheck.data.nvdcve.xml - -Contains classes used to parse the NVD CVE XML file.
+ + The basic use is that the Importer is called to import an NVD CVE file. - org.owasp.dependencycheck.dependency - package org.owasp.dependencycheck.dependency
-
-- -+
org.owasp.dependencycheck.dependency - - - Contains the core Dependency implementation.Contains the core Dependency implementation. - org.owasp.dependencycheck.exception - package org.owasp.dependencycheck.exception
-
-- -+
org.owasp.dependencycheck.exception - -A collection of exception classes used within the application.
- - org.owasp.dependencycheck.jaxb.pom - package org.owasp.dependencycheck.jaxb.pom -
-
-- --
org.owasp.dependencycheck.analyzer.pom - - - This package contains utility classes used to parse pom.xml files.
- - org.owasp.dependencycheck.jaxb.pom.generated - package org.owasp.dependencycheck.jaxb.pom.generated -
- org.owasp.dependencycheck.reporting - package org.owasp.dependencycheck.reporting
-
-- -+
org.owasp.dependencycheck.reporting - - - Contains classes used to generate reports.Contains classes used to generate reports. - org.owasp.dependencycheck.suppression - package org.owasp.dependencycheck.suppression
-
-- -+
org.owasp.dependencycheck.suppression - - - Contains classes used to suppress findings.Contains classes used to suppress findings. - org.owasp.dependencycheck.utils - package org.owasp.dependencycheck.utils
-
-- -+
org.owasp.dependencycheck.utils - - - Includes various utility classes such as a Settings wrapper, a Checksum utility, etc.Includes various utility classes such as a Settings wrapper, a Checksum utility, etc.
- - organization - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Contributor -
- -
- organization - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Developer -
- -
- organization - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model -
- -
- Organization - Class in org.owasp.dependencycheck.jaxb.pom.generated +
- org.owasp.dependencycheck.xml.pom - package org.owasp.dependencycheck.xml.pom
-
-Specifies the organization that produces this project.+This package contains classes used to parse pom.xml files.+
+
- ORGANIZATION - Static variable in class org.owasp.dependencycheck.xml.pom.PomHandler +
-
+The organization element.
-
- Organization() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Organization -
- -
- organizationUrl - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Contributor -
- -
- organizationUrl - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Developer -
- -
- os - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Activation -
- -
- otherArchive - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.MailingList.OtherArchives -
- -
- otherArchives - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.MailingList -
- -
- outputDirectory - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Build -
- -
- outputDirectory - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Reporting -
P
-
-
- packaging - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model -
- Pair<L,R> - Class in org.owasp.dependencycheck.utils
-
A generic pair of elements.@@ -4800,14 +2838,10 @@
- parent - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model -
- -
- Parent - Class in org.owasp.dependencycheck.jaxb.pom.generated +
- PARENT - Static variable in class org.owasp.dependencycheck.xml.pom.PomHandler
-
-4.0.0+The parent element.
-
- Parent() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Parent -
- parse(InputStream) - Method in interface org.owasp.dependencycheck.data.nuget.NuspecParser
-
Parse an input stream and return the resulting@@ -4816,6 +2850,14 @@
NugetPackage.NugetPackage. - parse(File) - Method in class org.owasp.dependencycheck.xml.pom.PomParser +
-
+Parses the given xml file and returns a Model object containing only the fields dependency-check requires.+
+
- parse(InputStream) - Method in class org.owasp.dependencycheck.xml.pom.PomParser +
-
+Parses the given xml file and returns a Model object containing only the fields dependency-check requires.+
- parseManifest(Dependency, List<JarAnalyzer.ClassNameInformation>) - Method in class org.owasp.dependencycheck.analyzer.JarAnalyzer
-
@@ -4854,116 +2896,44 @@
- passes(T) - Method in class org.owasp.dependencycheck.utils.Filter
- phase - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.PluginExecution
-- plugin - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Build.Plugins
-- plugin - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase.Plugins
-- Plugin - Class in org.owasp.dependencycheck.jaxb.pom.generated
+- PomHandler - Class in org.owasp.dependencycheck.xml.pom
- -
-4.0.0+A handler to read the pom.xml model.- Plugin() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Plugin
+- PomHandler() - Constructor for class org.owasp.dependencycheck.xml.pom.PomHandler
- plugin - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.PluginManagement.Plugins
-- plugin - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Reporting.Plugins
-- Plugin.Configuration - Class in org.owasp.dependencycheck.jaxb.pom.generated
+- PomParseException - Exception in org.owasp.dependencycheck.xml.pom
- -
-Java class for anonymous complex type.+An exception used when parsing a suppression rule file fails.- Plugin.Configuration() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Plugin.Configuration
-- Plugin.Dependencies - Class in org.owasp.dependencycheck.jaxb.pom.generated
+- PomParseException() - Constructor for exception org.owasp.dependencycheck.xml.pom.PomParseException
- -
-Java class for anonymous complex type.+Creates a new SuppressionParseException.- Plugin.Dependencies() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Plugin.Dependencies
-- Plugin.Executions - Class in org.owasp.dependencycheck.jaxb.pom.generated
+- PomParseException(String) - Constructor for exception org.owasp.dependencycheck.xml.pom.PomParseException
- -
-Java class for anonymous complex type.+Creates a new SuppressionParseException.- Plugin.Executions() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Plugin.Executions
-- Plugin.Goals - Class in org.owasp.dependencycheck.jaxb.pom.generated
+- PomParseException(Throwable) - Constructor for exception org.owasp.dependencycheck.xml.pom.PomParseException
- -
-Java class for anonymous complex type.+Creates a new SuppressionParseException.- Plugin.Goals() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Plugin.Goals
-- PluginExecution - Class in org.owasp.dependencycheck.jaxb.pom.generated
+- PomParseException(String, Throwable) - Constructor for exception org.owasp.dependencycheck.xml.pom.PomParseException
- -
-4.0.0+Creates a new SuppressionParseException.- PluginExecution() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.PluginExecution
-- PluginExecution.Configuration - Class in org.owasp.dependencycheck.jaxb.pom.generated
+- PomParser - Class in org.owasp.dependencycheck.xml.pom
- -
-Java class for anonymous complex type.+A parser for pom.xml files.- PluginExecution.Configuration() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.PluginExecution.Configuration
+- PomParser() - Constructor for class org.owasp.dependencycheck.xml.pom.PomParser
- PluginExecution.Goals - Class in org.owasp.dependencycheck.jaxb.pom.generated
-- -
-Java class for anonymous complex type.-- PluginExecution.Goals() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.PluginExecution.Goals
-- pluginManagement - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- pluginManagement - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase
-- PluginManagement - Class in org.owasp.dependencycheck.jaxb.pom.generated
-- -
-Section for management of default plugin information for use in a group of POMs.-- PluginManagement() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.PluginManagement
-- PluginManagement.Plugins - Class in org.owasp.dependencycheck.jaxb.pom.generated
-- -
-Java class for anonymous complex type.-- PluginManagement.Plugins() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.PluginManagement.Plugins
-- pluginRepositories - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- pluginRepositories - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- pluginRepository - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model.PluginRepositories
-- pluginRepository - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Profile.PluginRepositories
-- plugins - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- plugins - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase
-- plugins - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.PluginManagement
-- plugins - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Reporting
-- PomUtils - Class in org.owasp.dependencycheck.jaxb.pom
-- PomUtils() - Constructor for class org.owasp.dependencycheck.jaxb.pom.PomUtils
-- -
-Constructs a new POM Utility.-- post - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.MailingList
+- PomUtils - Class in org.owasp.dependencycheck.xml.pom
- preflightRequest() - Method in class org.owasp.dependencycheck.data.nexus.NexusSearch
- prerequisites - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- Prerequisites - Class in org.owasp.dependencycheck.jaxb.pom.generated
-- -
-Describes the prerequisites a project can have.-- Prerequisites() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Prerequisites
-- process(Dependency) - Method in class org.owasp.dependencycheck.suppression.SuppressionRule
Processes a given dependency to determine if any CPE, CVE, CWE, or CVSS scores should be suppressed.@@ -4984,62 +2954,10 @@- profile - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model.Profiles
-- Profile - Class in org.owasp.dependencycheck.jaxb.pom.generated
+- PROJECT - Static variable in class org.owasp.dependencycheck.xml.pom.PomHandler
- -
-Modifications to the build process which is activated based on environmental parameters or command line arguments.+The project element.- Profile() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- Profile.Dependencies - Class in org.owasp.dependencycheck.jaxb.pom.generated
-- -
-Java class for anonymous complex type.-- Profile.Dependencies() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Profile.Dependencies
-- Profile.Modules - Class in org.owasp.dependencycheck.jaxb.pom.generated
-- -
-Java class for anonymous complex type.-- Profile.Modules() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Profile.Modules
-- Profile.PluginRepositories - Class in org.owasp.dependencycheck.jaxb.pom.generated
-- -
-Java class for anonymous complex type.-- Profile.PluginRepositories() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Profile.PluginRepositories
-- Profile.Properties - Class in org.owasp.dependencycheck.jaxb.pom.generated
-- -
-Java class for anonymous complex type.-- Profile.Properties() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Profile.Properties
-- Profile.Reports - Class in org.owasp.dependencycheck.jaxb.pom.generated
-- -
-Java class for anonymous complex type.-- Profile.Reports() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Profile.Reports
-- Profile.Repositories - Class in org.owasp.dependencycheck.jaxb.pom.generated
-- -
-Java class for anonymous complex type.-- Profile.Repositories() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Profile.Repositories
-- profiles - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- properties - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Contributor
-- properties - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Developer
-- properties - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- properties - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- property - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Activation
-- PropertyType - Class in org.owasp.dependencycheck.suppression
A simple PropertyType used to represent a string value that could be used as a regular expression or could be case @@ -5053,11 +2971,11 @@R
-
-
- readPom(File) - Method in class org.owasp.dependencycheck.jaxb.pom.PomUtils +
- readPom(File) - Static method in class org.owasp.dependencycheck.xml.pom.PomUtils
-
Reads in the specified POM and converts it to a Model.
-
- readPom(SAXSource) - Method in class org.owasp.dependencycheck.jaxb.pom.PomUtils +
- readPom(String, JarFile) - Static method in class org.owasp.dependencycheck.xml.pom.PomUtils
-
Retrieves the specified POM from a jar file and converts it to a Model.
@@ -5067,25 +2985,11 @@
- Reference() - Constructor for class org.owasp.dependencycheck.dependency.Reference
- -
- relativePath - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Parent -
- -
- releases - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Repository -
- -
- relocation - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.DistributionManagement -
- -
- Relocation - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-Describes where an artifact has moved to.-
-
- Relocation() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Relocation -
- remove() - Method in class org.owasp.dependencycheck.data.update.UpdateableNvdCve
-
Removes the current NvdCveInfo object from the collection.
-
- report - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.ReportSet.Reports -
- ReportGenerator - Class in org.owasp.dependencycheck.reporting
-
The ReportGenerator is used to, as the name implies, generate reports.@@ -5098,90 +3002,6 @@
- reporting - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model -
- -
- reporting - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Profile -
- -
- Reporting - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-Section for management of reports and their configuration.-
-
- Reporting() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Reporting -
- -
- Reporting.Plugins - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-Java class for anonymous complex type.-
-
- Reporting.Plugins() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Reporting.Plugins -
- -
- ReportPlugin - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-4.0.0-
-
- ReportPlugin() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.ReportPlugin -
- -
- ReportPlugin.Configuration - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-Java class for anonymous complex type.-
-
- ReportPlugin.Configuration() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.ReportPlugin.Configuration -
- -
- ReportPlugin.ReportSets - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-Java class for anonymous complex type.-
-
- ReportPlugin.ReportSets() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.ReportPlugin.ReportSets -
- -
- reports - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model -
- -
- reports - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Profile -
- -
- reports - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.ReportSet -
- -
- reportSet - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.ReportPlugin.ReportSets -
- -
- ReportSet - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-Represents a set of reports and configuration to be used to generate them.-
-
- ReportSet() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.ReportSet -
- -
- ReportSet.Configuration - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-Java class for anonymous complex type.-
-
- ReportSet.Configuration() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.ReportSet.Configuration -
- -
- ReportSet.Reports - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-Java class for anonymous complex type.-
-
- ReportSet.Reports() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.ReportSet.Reports -
- -
- reportSets - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.ReportPlugin -
- -
- repositories - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model -
- -
- repositories - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Profile -
- -
- repository - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.DistributionManagement -
- -
- repository - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model.Repositories -
- -
- repository - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Profile.Repositories -
- -
- Repository - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-A repository contains the information needed for establishing connections with remote repository.-
-
- Repository() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Repository -
- -
- RepositoryPolicy - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-Download policy-
-
- RepositoryPolicy() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.RepositoryPolicy -
- reset() - Method in class org.owasp.dependencycheck.analyzer.AbstractFileTypeAnalyzer
-
Resets the enabled flag on the analyzer.@@ -5190,41 +3010,6 @@
- resource - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Build.Resources -
- -
- resource - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase.Resources -
- -
- Resource - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-This element describes all of the classpath resources associated with a project or - unit tests.-
-
- Resource() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Resource -
- -
- Resource.Excludes - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-Java class for anonymous complex type.-
-
- Resource.Excludes() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Resource.Excludes -
- -
- Resource.Includes - Class in org.owasp.dependencycheck.jaxb.pom.generated -
-
-Java class for anonymous complex type.-
-
- Resource.Includes() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Resource.Includes -
- -
- resources - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Build -
- -
- resources - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase -
- -
- role - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Contributor.Roles -
- -
- role - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Developer.Roles -
- -
- roles - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Contributor -
- -
- roles - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Developer -
- scm - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- Scm - Class in org.owasp.dependencycheck.jaxb.pom.generated
-- -
-4.0.0-- Scm() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Scm
-- scope - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Dependency
-- scriptSourceDirectory - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- search(String, int) - Method in class org.owasp.dependencycheck.data.cpe.CpeMemoryIndex
Searches the index using the given search string.@@ -5337,77 +3110,21 @@- sendOnError - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Notifier
-- sendOnFailure - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Notifier
-- sendOnSuccess - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Notifier
-- sendOnWarning - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Notifier
-- setActivation(Activation) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- -
-Sets the value of the activation property.-- setActiveByDefault(Boolean) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Activation
-- -
Sets the value of the activeByDefault property.-- setActualFilePath(String) - Method in class org.owasp.dependencycheck.dependency.Dependency
- setAddress(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Notifier
-- -
Sets the value of the address property.-- setApplicationName(String) - Method in class org.owasp.dependencycheck.agent.DependencyCheckScanAgent
- setArch(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ActivationOS
-- -
-Sets the value of the arch property.-- setArchive(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.MailingList
-- -
Sets the value of the archive property.-- setArtifactId(String) - Method in class org.owasp.dependencycheck.data.nexus.MavenArtifact
- setArtifactId(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Dependency
+- setArtifactId(String) - Method in class org.owasp.dependencycheck.xml.pom.Model
- -
-Sets the value of the artifactId property.-- setArtifactId(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Exclusion
-- -
-Sets the value of the artifactId property.-- setArtifactId(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Extension
-- -
-Sets the value of the artifactId property.-- setArtifactId(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Sets the value of the artifactId property.-- setArtifactId(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Parent
-- -
-Sets the value of the artifactId property.-- setArtifactId(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin
-- -
-Sets the value of the artifactId property.-- setArtifactId(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Relocation
-- -
-Sets the value of the artifactId property.-- setArtifactId(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ReportPlugin
-- -
Sets the value of the artifactId property.+Set the value of artifactId.- setArtifactUrl(String) - Method in class org.owasp.dependencycheck.data.nexus.MavenArtifact
- @@ -5429,14 +3146,6 @@
- setBuild(Build) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Sets the value of the build property.-- setBuild(BuildBase) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- -
Sets the value of the build property.-- setCaseSensitive(boolean) - Method in class org.owasp.dependencycheck.suppression.PropertyType
Sets the value of the caseSensitive property.@@ -5449,22 +3158,6 @@- setChecksumPolicy(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.RepositoryPolicy
-- -
-Sets the value of the checksumPolicy property.-- setCiManagement(CiManagement) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Sets the value of the ciManagement property.-- setClassifier(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Dependency
-- -
-Sets the value of the classifier property.-- setComments(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.License
-- -
Sets the value of the comments property.-- setConfidence(Confidence) - Method in class org.owasp.dependencycheck.dependency.Evidence
Set the value of confidence.@@ -5473,30 +3166,6 @@- setConfiguration(Notifier.Configuration) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Notifier
-- -
-Sets the value of the configuration property.-- setConfiguration(Plugin.Configuration) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin
-- -
-Sets the value of the configuration property.-- setConfiguration(PluginExecution.Configuration) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.PluginExecution
-- -
-Sets the value of the configuration property.-- setConfiguration(ReportPlugin.Configuration) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ReportPlugin
-- -
-Sets the value of the configuration property.-- setConfiguration(ReportSet.Configuration) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ReportSet
-- -
-Sets the value of the configuration property.-- setConnection(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Scm
-- -
Sets the value of the connection property.-- setConnectionString(String) - Method in class org.owasp.dependencycheck.agent.DependencyCheckScanAgent
Set the value of connectionString.@@ -5505,10 +3174,6 @@- setContributors(Model.Contributors) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
Sets the value of the contributors property.-- setCpe(String) - Method in class org.owasp.dependencycheck.dependency.VulnerableSoftware
Parse a CPE entry from the cpe string representation.@@ -5601,14 +3266,6 @@- setDefaultGoal(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- -
-Sets the value of the defaultGoal property.-- setDefaultGoal(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase
-- -
Sets the value of the defaultGoal property.-- setDependencies(List<Dependency>) - Method in class org.owasp.dependencycheck.agent.DependencyCheckScanAgent
Sets the list of dependencies to scan.@@ -5617,30 +3274,6 @@- setDependencies(DependencyManagement.Dependencies) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.DependencyManagement
-- -
-Sets the value of the dependencies property.-- setDependencies(Model.Dependencies) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Sets the value of the dependencies property.-- setDependencies(Plugin.Dependencies) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin
-- -
-Sets the value of the dependencies property.-- setDependencies(Profile.Dependencies) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- -
-Sets the value of the dependencies property.-- setDependencyManagement(DependencyManagement) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Sets the value of the dependencyManagement property.-- setDependencyManagement(DependencyManagement) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- -
Sets the value of the dependencyManagement property.-- setDescription(String) - Method in class org.owasp.dependencycheck.dependency.Dependency
Set the value of description.@@ -5653,118 +3286,34 @@- setDescription(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
+- setDescription(String) - Method in class org.owasp.dependencycheck.xml.pom.Model
- -
-Sets the value of the description property.-- setDeveloperConnection(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Scm
-- -
-Sets the value of the developerConnection property.-- setDevelopers(Model.Developers) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Sets the value of the developers property.-- setDirectory(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- -
-Sets the value of the directory property.-- setDirectory(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase
-- -
-Sets the value of the directory property.-- setDirectory(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Resource
-- -
Sets the value of the directory property.+Set the value of description.- setDisplayFileName(String) - Method in class org.owasp.dependencycheck.dependency.Dependency
- setDistribution(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.License
-- -
-Sets the value of the distribution property.-- setDistributionManagement(DistributionManagement) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Sets the value of the distributionManagement property.-- setDistributionManagement(DistributionManagement) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- -
Sets the value of the distributionManagement property.-- setDocumentId(String) - Method in class org.owasp.dependencycheck.data.cpe.IndexEntry
- setDownloadUrl(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.DistributionManagement
-- -
Sets the value of the downloadUrl property.-- setEdition(String) - Method in class org.owasp.dependencycheck.dependency.VulnerableSoftware
- setEmail(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Contributor
-- -
-Sets the value of the email property.-- setEmail(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Developer
-- -
Sets the value of the email property.-- setEnabled(boolean) - Method in class org.owasp.dependencycheck.analyzer.AbstractFileTypeAnalyzer
- setEnabled(Boolean) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.RepositoryPolicy
-- -
Sets the value of the enabled property.-- setException(UpdateException) - Method in class org.owasp.dependencycheck.data.update.task.ProcessTask
- setExcludeDefaults(Boolean) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Reporting
-- -
-Sets the value of the excludeDefaults property.-- setExcludes(Resource.Excludes) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Resource
-- -
-Sets the value of the excludes property.-- setExclusions(Dependency.Exclusions) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Dependency
-- -
-Sets the value of the exclusions property.-- setExecutions(Plugin.Executions) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin
-- -
-Sets the value of the executions property.-- setExists(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ActivationFile
-- -
-Sets the value of the exists property.-- setExtensions(Build.Extensions) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- -
-Sets the value of the extensions property.-- setExtensions(Boolean) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin
-- -
Sets the value of the extensions property.-- setFailBuildOnCVSS(float) - Method in class org.owasp.dependencycheck.agent.DependencyCheckScanAgent
- setFamily(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ActivationOS
-- -
-Sets the value of the family property.-- setFile(ActivationFile) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Activation
-- -
Sets the value of the file property.-- setFileExtension(String) - Method in class org.owasp.dependencycheck.dependency.Dependency
Sets the file name of the dependency.@@ -5785,26 +3334,6 @@- setFiltering(Boolean) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Resource
-- -
-Sets the value of the filtering property.-- setFilters(Build.Filters) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- -
-Sets the value of the filters property.-- setFilters(BuildBase.Filters) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase
-- -
-Sets the value of the filters property.-- setFinalName(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- -
-Sets the value of the finalName property.-- setFinalName(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase
-- -
Sets the value of the finalName property.-- setFirst(File) - Method in class org.owasp.dependencycheck.data.update.task.DownloadTask
Set the value of first.@@ -5813,49 +3342,17 @@- setGoals(Plugin.Goals) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin
+- setGenerateReport(boolean) - Method in class org.owasp.dependencycheck.agent.DependencyCheckScanAgent
- -
-Sets the value of the goals property.-- setGoals(PluginExecution.Goals) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.PluginExecution
-- -
Sets the value of the goals property.+Set the value of generateReport.- setGroupId(String) - Method in class org.owasp.dependencycheck.data.nexus.MavenArtifact
- setGroupId(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Dependency
+- setGroupId(String) - Method in class org.owasp.dependencycheck.xml.pom.Model
- -
-Sets the value of the groupId property.-- setGroupId(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Exclusion
-- -
-Sets the value of the groupId property.-- setGroupId(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Extension
-- -
-Sets the value of the groupId property.-- setGroupId(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Sets the value of the groupId property.-- setGroupId(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Parent
-- -
-Sets the value of the groupId property.-- setGroupId(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin
-- -
-Sets the value of the groupId property.-- setGroupId(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Relocation
-- -
-Sets the value of the groupId property.-- setGroupId(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ReportPlugin
-- -
Sets the value of the groupId property.+Set the value of groupId.- setId(String) - Method in class org.owasp.dependencycheck.data.nuget.NugetPackage
- @@ -5865,78 +3362,10 @@
- setId(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.DeploymentRepository
-- -
-Sets the value of the id property.-- setId(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Developer
-- -
-Sets the value of the id property.-- setId(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.PluginExecution
-- -
-Sets the value of the id property.-- setId(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- -
-Sets the value of the id property.-- setId(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ReportSet
-- -
-Sets the value of the id property.-- setId(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Repository
-- -
-Sets the value of the id property.-- setId(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Site
-- -
Sets the value of the id property.-- setIdentifiers(Set<Identifier>) - Method in class org.owasp.dependencycheck.dependency.Dependency
- setInceptionYear(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Sets the value of the inceptionYear property.-- setIncludes(Resource.Includes) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Resource
-- -
-Sets the value of the includes property.-- setInherited(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin
-- -
-Sets the value of the inherited property.-- setInherited(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.PluginExecution
-- -
-Sets the value of the inherited property.-- setInherited(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ReportPlugin
-- -
-Sets the value of the inherited property.-- setInherited(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ReportSet
-- -
-Sets the value of the inherited property.-- setIssueManagement(IssueManagement) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Sets the value of the issueManagement property.-- setJdk(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Activation
-- -
-Sets the value of the jdk property.-- setLayout(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.DeploymentRepository
-- -
-Sets the value of the layout property.-- setLayout(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Repository
-- -
Sets the value of the layout property.-- setLeft(L) - Method in class org.owasp.dependencycheck.utils.Pair
Set the value of left.@@ -5945,10 +3374,6 @@- setLicenses(Model.Licenses) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
Sets the value of the licenses property.-- setLicenseUrl(String) - Method in class org.owasp.dependencycheck.data.nuget.NugetPackage
Sets the licenseUrl.@@ -5957,42 +3382,14 @@- setMailingLists(Model.MailingLists) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
Sets the value of the mailingLists property.-- setMatchedCPE(String, String) - Method in class org.owasp.dependencycheck.dependency.Vulnerability
- setMaven(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Prerequisites
-- -
Sets the value of the maven property.-- setMd5sum(String) - Method in class org.owasp.dependencycheck.dependency.Dependency
- setMessage(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Relocation
-- -
-Sets the value of the message property.-- setMissing(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ActivationFile
-- -
-Sets the value of the missing property.-- setModelVersion(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Sets the value of the modelVersion property.-- setModules(Model.Modules) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Sets the value of the modules property.-- setModules(Profile.Modules) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- -
Sets the value of the modules property.-- setName(String) - Method in class org.owasp.dependencycheck.analyzer.JarAnalyzer.ClassNameInformation
Set the value of name@@ -6013,49 +3410,13 @@- setName(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ActivationOS
+- setName(String) - Method in class org.owasp.dependencycheck.xml.pom.License
- -
-Sets the value of the name property.+Set the value of name.- setName(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ActivationProperty
+- setName(String) - Method in class org.owasp.dependencycheck.xml.pom.Model
- -
-Sets the value of the name property.-- setName(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Contributor
-- -
-Sets the value of the name property.-- setName(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.DeploymentRepository
-- -
-Sets the value of the name property.-- setName(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Developer
-- -
-Sets the value of the name property.-- setName(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.License
-- -
-Sets the value of the name property.-- setName(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.MailingList
-- -
-Sets the value of the name property.-- setName(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Sets the value of the name property.-- setName(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Organization
-- -
-Sets the value of the name property.-- setName(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Repository
-- -
-Sets the value of the name property.-- setName(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Site
-- -
Sets the value of the name property.+Set the value of name.- setNeedsUpdate(boolean) - Method in class org.owasp.dependencycheck.data.update.NvdCveInfo
- @@ -6081,10 +3442,6 @@
- setNotifiers(CiManagement.Notifiers) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.CiManagement
-- -
Sets the value of the notifiers property.-- setNvdCveInfo(NvdCveInfo) - Method in class org.owasp.dependencycheck.data.update.task.DownloadTask
Set the value of nvdCveInfo.@@ -6093,110 +3450,34 @@- setOptional(Boolean) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Dependency
+- setOrganization(String) - Method in class org.owasp.dependencycheck.xml.pom.Model
- -
-Sets the value of the optional property.-- setOrganization(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Contributor
-- -
-Sets the value of the organization property.-- setOrganization(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Developer
-- -
-Sets the value of the organization property.-- setOrganization(Organization) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Sets the value of the organization property.-- setOrganizationUrl(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Contributor
-- -
-Sets the value of the organizationUrl property.-- setOrganizationUrl(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Developer
-- -
-Sets the value of the organizationUrl property.-- setOs(ActivationOS) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Activation
-- -
-Sets the value of the os property.-- setOtherArchives(MailingList.OtherArchives) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.MailingList
-- -
-Sets the value of the otherArchives property.-- setOutputDirectory(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- -
-Sets the value of the outputDirectory property.-- setOutputDirectory(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Reporting
-- -
Sets the value of the outputDirectory property.+Set the value of organization.- setOwners(String) - Method in class org.owasp.dependencycheck.data.nuget.NugetPackage
- setPackaging(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
+- setParentArtifactId(String) - Method in class org.owasp.dependencycheck.xml.pom.Model
- -
-Sets the value of the packaging property.+Set the value of parentArtifactId.- setParent(Parent) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
+- setParentGroupId(String) - Method in class org.owasp.dependencycheck.xml.pom.Model
- -
+Sets the value of the parent property.+Set the value of parentGroupId.+- setParentVersion(String) - Method in class org.owasp.dependencycheck.xml.pom.Model
+- +
Set the value of parentVersion.- setPathToMono(String) - Method in class org.owasp.dependencycheck.agent.DependencyCheckScanAgent
- setPhase(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.PluginExecution
-- -
-Sets the value of the phase property.-- setPluginManagement(PluginManagement) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- -
-Sets the value of the pluginManagement property.-- setPluginManagement(PluginManagement) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase
-- -
-Sets the value of the pluginManagement property.-- setPluginRepositories(Model.PluginRepositories) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Sets the value of the pluginRepositories property.-- setPluginRepositories(Profile.PluginRepositories) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- -
-Sets the value of the pluginRepositories property.-- setPlugins(Build.Plugins) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- -
-Sets the value of the plugins property.-- setPlugins(BuildBase.Plugins) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase
-- -
-Sets the value of the plugins property.-- setPlugins(PluginManagement.Plugins) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.PluginManagement
-- -
-Sets the value of the plugins property.-- setPlugins(Reporting.Plugins) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Reporting
-- -
Sets the value of the plugins property.-- setPomUrl(String) - Method in class org.owasp.dependencycheck.data.nexus.MavenArtifact
- setPost(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.MailingList
-- -
-Sets the value of the post property.-- setPrerequisites(Prerequisites) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
Sets the value of the prerequisites property.-- setPreviousVersion(String) - Method in class org.owasp.dependencycheck.dependency.VulnerableSoftware
Set the value of previousVersion.@@ -6209,34 +3490,10 @@- setProfiles(Model.Profiles) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
Sets the value of the profiles property.-- setProjectReferences(Set<String>) - Method in class org.owasp.dependencycheck.dependency.Dependency
- setProperties(Contributor.Properties) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Contributor
-- -
-Sets the value of the properties property.-- setProperties(Developer.Properties) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Developer
-- -
-Sets the value of the properties property.-- setProperties(Model.Properties) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Sets the value of the properties property.-- setProperties(Profile.Properties) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- -
-Sets the value of the properties property.-- setProperty(ActivationProperty) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Activation
-- -
Sets the value of the property property.-- setProxyPassword(String) - Method in class org.owasp.dependencycheck.agent.DependencyCheckScanAgent
Set the value of proxyPassword.@@ -6271,70 +3528,14 @@- setRelativePath(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Parent
-- -
-Sets the value of the relativePath property.-- setReleases(RepositoryPolicy) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Repository
-- -
-Sets the value of the releases property.-- setRelocation(Relocation) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.DistributionManagement
-- -
Sets the value of the relocation property.-- setReportFormat(ReportGenerator.Format) - Method in class org.owasp.dependencycheck.agent.DependencyCheckScanAgent
- setReporting(Reporting) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Sets the value of the reporting property.-- setReporting(Reporting) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- -
Sets the value of the reporting property.-- setReportOutputDirectory(String) - Method in class org.owasp.dependencycheck.agent.DependencyCheckScanAgent
- setReports(Model.Reports) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Sets the value of the reports property.-- setReports(Profile.Reports) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- -
-Sets the value of the reports property.-- setReports(ReportSet.Reports) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ReportSet
-- -
-Sets the value of the reports property.-- setReportSets(ReportPlugin.ReportSets) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ReportPlugin
-- -
-Sets the value of the reportSets property.-- setRepositories(Model.Repositories) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Sets the value of the repositories property.-- setRepositories(Profile.Repositories) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Profile
-- -
-Sets the value of the repositories property.-- setRepository(DeploymentRepository) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.DistributionManagement
-- -
-Sets the value of the repository property.-- setResources(Build.Resources) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- -
-Sets the value of the resources property.-- setResources(BuildBase.Resources) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase
-- -
Sets the value of the resources property.-- setRevision(String) - Method in class org.owasp.dependencycheck.dependency.VulnerableSoftware
Set the value of revision.@@ -6343,30 +3544,10 @@- setRoles(Contributor.Roles) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Contributor
-- -
-Sets the value of the roles property.-- setRoles(Developer.Roles) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Developer
-- -
Sets the value of the roles property.-- setRules(List<SuppressionRule>) - Method in class org.owasp.dependencycheck.analyzer.AbstractSuppressionAnalyzer
- setScm(Scm) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Sets the value of the scm property.-- setScope(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Dependency
-- -
-Sets the value of the scope property.-- setScriptSourceDirectory(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- -
Sets the value of the scriptSourceDirectory property.-- setSearchScore(float) - Method in class org.owasp.dependencycheck.data.cpe.IndexEntry
Set the value of searchScore.@@ -6375,22 +3556,6 @@- setSendOnError(Boolean) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Notifier
-- -
-Sets the value of the sendOnError property.-- setSendOnFailure(Boolean) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Notifier
-- -
-Sets the value of the sendOnFailure property.-- setSendOnSuccess(Boolean) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Notifier
-- -
-Sets the value of the sendOnSuccess property.-- setSendOnWarning(Boolean) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Notifier
-- -
Sets the value of the sendOnWarning property.-- setSha1(String) - Method in class org.owasp.dependencycheck.suppression.SuppressionRule
Set the value of sha1.@@ -6403,18 +3568,6 @@- setSite(Site) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.DistributionManagement
-- -
-Sets the value of the site property.-- setSnapshotRepository(DeploymentRepository) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.DistributionManagement
-- -
-Sets the value of the snapshotRepository property.-- setSnapshots(RepositoryPolicy) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Repository
-- -
Sets the value of the snapshots property.-- setSource(String) - Method in class org.owasp.dependencycheck.dependency.Evidence
Set the value of source.@@ -6423,18 +3576,6 @@- setSourceDirectory(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- -
-Sets the value of the sourceDirectory property.-- setStatus(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.DistributionManagement
-- -
-Sets the value of the status property.-- setSubscribe(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.MailingList
-- -
Sets the value of the subscribe property.-- setSuppressedIdentifiers(Set<Identifier>) - Method in class org.owasp.dependencycheck.dependency.Dependency
Set the value of suppressedIdentifiers.@@ -6447,54 +3588,10 @@- setSystem(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.CiManagement
-- -
-Sets the value of the system property.-- setSystem(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.IssueManagement
-- -
-Sets the value of the system property.-- setSystemPath(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Dependency
-- -
-Sets the value of the systemPath property.-- setTag(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Scm
-- -
-Sets the value of the tag property.-- setTargetPath(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Resource
-- -
-Sets the value of the targetPath property.-- setTestOutputDirectory(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- -
-Sets the value of the testOutputDirectory property.-- setTestResources(Build.TestResources) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- -
-Sets the value of the testResources property.-- setTestResources(BuildBase.TestResources) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase
-- -
-Sets the value of the testResources property.-- setTestSourceDirectory(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- -
Sets the value of the testSourceDirectory property.-- setTimestamp(long) - Method in class org.owasp.dependencycheck.data.update.NvdCveInfo
- setTimezone(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Contributor
-- -
-Sets the value of the timezone property.-- setTimezone(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Developer
-- -
Sets the value of the timezone property.-- setTitle(String) - Method in class org.owasp.dependencycheck.data.nuget.NugetPackage
- setType(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Dependency
-- -
-Sets the value of the type property.-- setType(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Notifier
-- -
-Sets the value of the type property.-- setUniqueVersion(Boolean) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.DeploymentRepository
-- -
-Sets the value of the uniqueVersion property.-- setUnsubscribe(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.MailingList
-- -
-Sets the value of the unsubscribe property.-- setUpdatePolicy(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.RepositoryPolicy
-- -
Sets the value of the updatePolicy property.-- setUpdateToVersion(String) - Method in class org.owasp.dependencycheck.data.update.EngineVersionCheck
Setter for updateToVersion - only used for testing.@@ -6540,49 +3617,9 @@- setUrl(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.CiManagement
+- setUrl(String) - Method in class org.owasp.dependencycheck.xml.pom.License
- -
-Sets the value of the url property.-- setUrl(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Contributor
-- -
-Sets the value of the url property.-- setUrl(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.DeploymentRepository
-- -
-Sets the value of the url property.-- setUrl(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Developer
-- -
-Sets the value of the url property.-- setUrl(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.IssueManagement
-- -
-Sets the value of the url property.-- setUrl(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.License
-- -
-Sets the value of the url property.-- setUrl(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Sets the value of the url property.-- setUrl(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Organization
-- -
-Sets the value of the url property.-- setUrl(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Repository
-- -
-Sets the value of the url property.-- setUrl(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Scm
-- -
-Sets the value of the url property.-- setUrl(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Site
-- -
Sets the value of the url property.+Set the value of url.- setUsed(boolean) - Method in class org.owasp.dependencycheck.dependency.Evidence
- @@ -6596,10 +3633,6 @@
- setValue(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ActivationProperty
-- -
Sets the value of the value property.-- setValue(String) - Method in class org.owasp.dependencycheck.suppression.PropertyType
Sets the value of the value property.@@ -6620,37 +3653,9 @@- setVersion(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ActivationOS
+- setVersion(String) - Method in class org.owasp.dependencycheck.xml.pom.Model
- -
-Sets the value of the version property.-- setVersion(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Dependency
-- -
-Sets the value of the version property.-- setVersion(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Extension
-- -
-Sets the value of the version property.-- setVersion(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- -
-Sets the value of the version property.-- setVersion(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Parent
-- -
-Sets the value of the version property.-- setVersion(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin
-- -
-Sets the value of the version property.-- setVersion(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.Relocation
-- -
-Sets the value of the version property.-- setVersion(String) - Method in class org.owasp.dependencycheck.jaxb.pom.generated.ReportPlugin
-- -
Sets the value of the version property.+Set the value of version.- setVersionParts(List<String>) - Method in class org.owasp.dependencycheck.utils.DependencyVersion
- @@ -6676,24 +3681,10 @@
- site - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.DistributionManagement
-- Site - Class in org.owasp.dependencycheck.jaxb.pom.generated
-- -
-Contains the information needed for deploying websites.-- Site() - Constructor for class org.owasp.dependencycheck.jaxb.pom.generated.Site
-- size() - Method in class org.owasp.dependencycheck.dependency.EvidenceCollection
- snapshotRepository - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.DistributionManagement
-- snapshots - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Repository
-- sourceDirectory - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Build
-- StandardUpdate - Class in org.owasp.dependencycheck.data.update
Class responsible for updating the NVDCVE data store.@@ -6702,32 +3693,20 @@- startDocument() - Method in class org.owasp.dependencycheck.jaxb.pom.MavenNamespaceFilter
-- -
Called at the start of the document parsing.-- startElement(String, String, String, Attributes) - Method in class org.owasp.dependencycheck.data.cwe.CweHandler
- startElement(String, String, String, Attributes) - Method in class org.owasp.dependencycheck.data.update.xml.NvdCve12Handler
- startElement(String, String, String, Attributes) - Method in class org.owasp.dependencycheck.data.update.xml.NvdCve20Handler
- startElement(String, String, String, Attributes) - Method in class org.owasp.dependencycheck.jaxb.pom.MavenNamespaceFilter
-- -
Called when an element is started.-- startElement(String, String, String, Attributes) - Method in class org.owasp.dependencycheck.suppression.SuppressionHandler
- startPrefixMapping(String, String) - Method in class org.owasp.dependencycheck.jaxb.pom.MavenNamespaceFilter
+- startElement(String, String, String, Attributes) - Method in class org.owasp.dependencycheck.xml.pom.PomHandler
- -
-Called when prefix mapping is started.+Handles the start element event.- status - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.DistributionManagement
-- subscribe - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.MailingList
-- supportsExtension(String) - Method in class org.owasp.dependencycheck.analyzer.AbstractFileTypeAnalyzer
Returns whether or not this analyzer can process the given extension.@@ -6786,38 +3765,12 @@- SuppressionRule() - Constructor for class org.owasp.dependencycheck.suppression.SuppressionRule
- system - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.CiManagement
-- system - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.IssueManagement
-- systemPath - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Dependency
-T
-
-
- tag - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Scm -
- -
- targetPath - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Resource -
- -
- testOutputDirectory - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Build -
- -
- testResource - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Build.TestResources -
- -
- testResource - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase.TestResources -
- -
- testResources - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Build -
- -
- testResources - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.BuildBase -
- -
- testSourceDirectory - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Build -
- -
- timezone - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Contributor -
- -
- timezone - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Developer -
- TokenPairConcatenatingFilter - Class in org.owasp.dependencycheck.data.lucene
-
@@ -6841,6 +3794,10 @@@@ -165,96 +164,102 @@ extends +
- toString() - Method in class org.owasp.dependencycheck.dependency.Evidence
+- +
Standard toString() implementation.+- toString() - Method in class org.owasp.dependencycheck.dependency.EvidenceCollection
Returns a string of evidence 'values'.@@ -6865,20 +3822,12 @@- type - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Dependency
-- type - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Notifier
-U
-
-
- uniqueVersion - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.DeploymentRepository -
- -
- unsubscribe - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.MailingList -
- update() - Method in interface org.owasp.dependencycheck.data.update.CachedWebDataSource
-
Determines if an update to the current data store is needed, if it is the new data is downloaded from the @@ -6922,8 +3871,6 @@
- updatePolicy - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.RepositoryPolicy
-- UpdateService - Class in org.owasp.dependencycheck.data.update
The CachedWebDataSource Service Loader.@@ -6944,32 +3891,14 @@- url - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.CiManagement
-- url - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Contributor
-- url - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.DeploymentRepository
-- url - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Developer
-- url - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.IssueManagement
-- url - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.License
-- url - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model
-- url - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Organization
-- url - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Repository
-- url - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Scm
-- url - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Site
-- url(String) - Method in class org.owasp.dependencycheck.reporting.EscapeTool
- URL - Static variable in class org.owasp.dependencycheck.xml.pom.PomHandler
+- +
The url element.+- UrlStringUtils - Class in org.owasp.dependencycheck.utils
- UrlTokenizingFilter - Class in org.owasp.dependencycheck.data.lucene
@@ -6987,8 +3916,6 @@V
-
-
- value - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.ActivationProperty -
- valueOf(String) - Static method in enum org.owasp.dependencycheck.analyzer.AnalysisPhase
-
Returns the enum constant of this type with the specified name.@@ -7032,22 +3959,10 @@ the order they are declared.
- version - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.ActivationOS -
- -
- version - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Dependency -
- -
- version - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Extension -
- -
- version - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Model -
- -
- version - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Parent -
- -
- version - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Plugin -
- -
- version - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.Relocation -
- -
- version - Variable in class org.owasp.dependencycheck.jaxb.pom.generated.ReportPlugin -
- +
- VERSION - Static variable in class org.owasp.dependencycheck.xml.pom.PomHandler +
-
+The version element.+
- VULN_CWE - Static variable in class org.owasp.dependencycheck.data.update.xml.NvdCve20Handler.Element
-
A node type in the NVD CVE Schema 2.0diff --git a/dependency-check-core/apidocs/index.html b/dependency-check-core/apidocs/index.html index 6a2126476..99bbdb704 100644 --- a/dependency-check-core/apidocs/index.html +++ b/dependency-check-core/apidocs/index.html @@ -2,9 +2,9 @@ - + -
Dependency-Check Core 1.2.9 API +Dependency-Check Core 1.2.10 API @@ -99,11 +99,10 @@
public class Engine extends Object
-Scans files, directories, etc. for Dependencies. Analyzers are loaded and used to process the files found by the - scan, if a file is encountered and an Analyzer is associated with the file type then the file is turned into a - dependency.+Scans files, directories, etc. for Dependencies. Analyzers are loaded and used to process the files found by the scan, if a + file is encountered and an Analyzer is associated with the file type then the file is turned into a dependency.- Author: -
- Jeremy Long
- Jeremy Long
voiddoUpdates()+Cycles through the cached web data sources and calls update on all of them.+List<Analyzer>getAnalyzers()Returns a full list of all of the analyzers.+ List<Analyzer>getAnalyzers(AnalysisPhase phase)Get the List of the analyzers for a specific phase of analysis.+ List<Dependency>getDependencies()Get the dependencies identified.+ Set<FileTypeAnalyzer>getFileTypeAnalyzers()Returns the set of file type analyzers.+ protected AnalyzerinitializeAnalyzer(Analyzer analyzer)Initializes the given analyzer.+ protected voidinitializeEngine()Creates a new Engine using the specified classloader to dynamically load Analyzer and Update services.+ List<Dependency>scan(File file)Scans a given file or directory.+ List<Dependency>scan(File[] files)Scans an array of files or directories.+ List<Dependency>scan(List<File> files)Scans a list of files or directories.+ List<Dependency>scan(Set<File> files)Scans a list of files or directories.+ List<Dependency>scan(String path)Scans a given file or directory.+ List<Dependency>scan(String[] paths)Scans an array of files or directories.+ protected List<Dependency>scanDirectory(File dir)Recursively scans files and directories.+ protected DependencyscanFile(File file)Scans a specified file.+ voidsetDependencies(List<Dependency> dependencies)Sets the dependencies.+ booleansupportsExtension(String ext)Checks all analyzers to see if an extension is supported.@@ -381,8 +386,8 @@ extendsscan
public List<Dependency> scan(String[] paths)
-Scans an array of files or directories. If a directory is specified, it will be scanned recursively. Any - dependencies identified are added to the dependency collection.+Scans an array of files or directories. If a directory is specified, it will be scanned recursively. Any dependencies + identified are added to the dependency collection.- Parameters:
paths- an array of paths to files or directories to be analyzed- Returns:
- the list of dependencies scanned
- Since:
- v0.3.2.5
scan
public List<Dependency> scan(String path)
-Scans a given file or directory. If a directory is specified, it will be scanned recursively. Any dependencies - identified are added to the dependency collection.+Scans a given file or directory. If a directory is specified, it will be scanned recursively. Any dependencies identified + are added to the dependency collection.- Parameters:
path- the path to a file or directory to be analyzed- Returns:
- the list of dependencies scanned
scan
public List<Dependency> scan(File[] files)
-Scans an array of files or directories. If a directory is specified, it will be scanned recursively. Any - dependencies identified are added to the dependency collection.+Scans an array of files or directories. If a directory is specified, it will be scanned recursively. Any dependencies + identified are added to the dependency collection.- Parameters:
files- an array of paths to files or directories to be analyzed.- Returns:
- the list of dependencies
- Since:
- v0.3.2.5
scan
public List<Dependency> scan(Set<File> files)
-Scans a list of files or directories. If a directory is specified, it will be scanned recursively. Any - dependencies identified are added to the dependency collection.+Scans a list of files or directories. If a directory is specified, it will be scanned recursively. Any dependencies + identified are added to the dependency collection.- Parameters:
files- a set of paths to files or directories to be analyzed- Returns:
- the list of dependencies scanned
- Since:
- v0.3.2.5
scan
public List<Dependency> scan(List<File> files)
-Scans a list of files or directories. If a directory is specified, it will be scanned recursively. Any - dependencies identified are added to the dependency collection.+Scans a list of files or directories. If a directory is specified, it will be scanned recursively. Any dependencies + identified are added to the dependency collection.- Parameters:
files- a set of paths to files or directories to be analyzed- Returns:
- the list of dependencies scanned
- Since:
- v0.3.2.5
scan
public List<Dependency> scan(File file)
-Scans a given file or directory. If a directory is specified, it will be scanned recursively. Any dependencies - identified are added to the dependency collection.+Scans a given file or directory. If a directory is specified, it will be scanned recursively. Any dependencies identified + are added to the dependency collection.- Parameters:
file- the path to a file or directory to be analyzed- Returns:
- the list of dependencies scanned
- Since:
- v0.3.2.4
analyzer- the analyzer to close-
+
-
+
doUpdates
+public void doUpdates()
+Cycles through the cached web data sources and calls update on all of them.+
+
DependencyCheckScanAgent (Dependency-Check Core 1.2.9 API) - +DependencyCheckScanAgent (Dependency-Check Core 1.2.10 API) + @@ -157,7 +157,7 @@ extends Method and Description- +voidEngineexecute()Executes the dependency-check and generates the report.booleanisGenerateReport()+Get the value of generateReport.++ -booleanisNexusAnalyzerEnabled()Get the value of nexusAnalyzerEnabled.+ booleanisNexusUsesProxy()Get the value of nexusUsesProxy.+ booleanisShowSummary()Get the value of showSummary.+ voidsetApplicationName(String applicationName)Set the value of applicationName.+ voidsetAutoUpdate(boolean autoUpdate)Set the value of autoUpdate.+ voidsetCentralAnalyzerEnabled(boolean centralAnalyzerEnabled)Set the value of centralAnalyzerEnabled.+ voidsetCentralUrl(String centralUrl)Set the value of centralUrl.+ voidsetConnectionString(String connectionString)Set the value of connectionString.+ voidsetConnectionTimeout(String connectionTimeout)Set the value of connectionTimeout.+ voidsetCveUrl12Base(String cveUrl12Base)Set the value of cveUrl12Base.+ voidsetCveUrl12Modified(String cveUrl12Modified)Set the value of cveUrl12Modified.+ voidsetCveUrl20Base(String cveUrl20Base)Set the value of cveUrl20Base.+ voidsetCveUrl20Modified(String cveUrl20Modified)Set the value of cveUrl20Modified.+ voidsetDatabaseDriverName(String databaseDriverName)Set the value of databaseDriverName.+ voidsetDatabaseDriverPath(String databaseDriverPath)Set the value of databaseDriverPath.+ voidsetDatabasePassword(String databasePassword)Set the value of databasePassword.+ voidsetDatabaseUser(String databaseUser)Set the value of databaseUser.+ voidsetDataDirectory(String dataDirectory)Set the value of dataDirectory.+ voidsetDependencies(List<Dependency> dependencies)Sets the list of dependencies to scan.+ voidsetFailBuildOnCVSS(float failBuildOnCVSS)Set the value of failBuildOnCVSS.+ voidsetGenerateReport(boolean generateReport)+Set the value of generateReport.+voidsetLogFile(String logFile)@@ -721,6 +733,28 @@ extends Parameters:autoUpdate- new value of autoUpdate-
+
-
+
isGenerateReport
+public boolean isGenerateReport()
+Get the value of generateReport.+- Returns:
- the value of generateReport
+
-
+
-
+
setGenerateReport
+public void setGenerateReport(boolean generateReport)
+Set the value of generateReport.+- Parameters:
generateReport- new value of generateReport
+
execute
-public void execute() - throws ScanAgentException
+public Engine execute() + throws ScanAgentException
Executes the dependency-check and generates the report.- Throws:
ScanAgentException- thrown if there is an exception executing the diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/agent/class-use/DependencyCheckScanAgent.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/agent/class-use/DependencyCheckScanAgent.html index cea7dcf31..990745387 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/agent/class-use/DependencyCheckScanAgent.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/agent/class-use/DependencyCheckScanAgent.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.agent.DependencyCheckScanAgent (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.agent.DependencyCheckScanAgent (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/agent/package-frame.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/agent/package-frame.html index e26027cae..f98d0d7ae 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/agent/package-frame.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/agent/package-frame.html @@ -2,10 +2,10 @@ - + -org.owasp.dependencycheck.agent (Dependency-Check Core 1.2.9 API) - +org.owasp.dependencycheck.agent (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/agent/package-summary.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/agent/package-summary.html index 6942360de..30e702250 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/agent/package-summary.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/agent/package-summary.html @@ -2,16 +2,16 @@ - + -org.owasp.dependencycheck.agent (Dependency-Check Core 1.2.9 API) - +org.owasp.dependencycheck.agent (Dependency-Check Core 1.2.10 API) + @@ -66,14 +66,8 @@@@ -102,16 +96,9 @@Package org.owasp.dependencycheck.agent
-- -+org.owasp.dependencycheck.agent - - - The agent package holds an agent API that can be used by other applications that have information about dependencies; - but would rather implement something in their code directly rather then spawn a process to run the entire - dependency-check engine.The agent package holds an agent API that can be used by other applications that have information about dependencies; but would + rather implement something in their code directly rather then spawn a process to run the entire dependency-check engine.See: Description
Package org.owasp.dependencycheck.agent Description
-- -+org.owasp.dependencycheck.agent - - - The agent package holds an agent API that can be used by other applications that have information about dependencies; - but would rather implement something in their code directly rather then spawn a process to run the entire - dependency-check engine. This basically provides programmatic access to running a scan. - -The agent package holds an agent API that can be used by other applications that have information about dependencies; but would + rather implement something in their code directly rather then spawn a process to run the entire dependency-check engine. This + basically provides programmatic access to running a scan.diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/agent/package-tree.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/agent/package-tree.html index 8670c3501..a92cea898 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/agent/package-tree.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/agent/package-tree.html @@ -2,16 +2,16 @@ - + -diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/AbstractFileTypeAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/AbstractFileTypeAnalyzer.html index 6ffaf3cce..ef4b35ee0 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/AbstractFileTypeAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/AbstractFileTypeAnalyzer.html @@ -2,16 +2,16 @@ - + -org.owasp.dependencycheck.agent Class Hierarchy (Dependency-Check Core 1.2.9 API) - +org.owasp.dependencycheck.agent Class Hierarchy (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/agent/package-use.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/agent/package-use.html index ee6dc3a21..237138700 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/agent/package-use.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/agent/package-use.html @@ -2,16 +2,16 @@ - + -Uses of Package org.owasp.dependencycheck.agent (Dependency-Check Core 1.2.9 API) - +Uses of Package org.owasp.dependencycheck.agent (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/AbstractAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/AbstractAnalyzer.html index 4f43662d2..1ae8c5b7d 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/AbstractAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/AbstractAnalyzer.html @@ -2,16 +2,16 @@ - + -AbstractAnalyzer (Dependency-Check Core 1.2.9 API) - +AbstractAnalyzer (Dependency-Check Core 1.2.10 API) + @@ -109,7 +109,7 @@ extends Object implements Analyzer- Author: -
- Jeremy Long
- Jeremy Long
AbstractFileTypeAnalyzer (Dependency-Check Core 1.2.9 API) - +AbstractFileTypeAnalyzer (Dependency-Check Core 1.2.10 API) + @@ -115,7 +115,7 @@ extends FileTypeAnalyzerThe base FileTypeAnalyzer that all analyzers that have specific file types they analyze should extend.- Author: -
- Jeremy Long
- Jeremy Long
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/AbstractSuppressionAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/AbstractSuppressionAnalyzer.html index ff1281f04..101c1b071 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/AbstractSuppressionAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/AbstractSuppressionAnalyzer.html @@ -2,16 +2,16 @@ - + -AbstractSuppressionAnalyzer (Dependency-Check Core 1.2.9 API) - +AbstractSuppressionAnalyzer (Dependency-Check Core 1.2.10 API) + @@ -114,7 +114,7 @@ extends AbstractAnalyzerAbstract base suppression analyzer that contains methods for parsing the suppression xml file.- Author: -
- Jeremy Long
- Jeremy Long
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/AnalysisPhase.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/AnalysisPhase.html index 5ee01299b..eec8ad1da 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/AnalysisPhase.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/AnalysisPhase.html @@ -2,16 +2,16 @@ - + -AnalysisPhase (Dependency-Check Core 1.2.9 API) - +AnalysisPhase (Dependency-Check Core 1.2.10 API) + @@ -110,7 +110,7 @@ extends Enum<AnalysisPhase>An enumeration defining the phases of analysis.- Author: -
- Jeremy Long
- Jeremy Long
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/Analyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/Analyzer.html index 381815f92..c3971ddcb 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/Analyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/Analyzer.html @@ -2,16 +2,16 @@ - + -Analyzer (Dependency-Check Core 1.2.9 API) - +Analyzer (Dependency-Check Core 1.2.10 API) + @@ -101,7 +101,7 @@An interface that defines an Analyzer that is used to identify Dependencies. An analyzer will collect information about the dependency in the form of Evidence.- Author: -
- Jeremy Long
- Jeremy Long
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/AnalyzerService.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/AnalyzerService.html index e3dfc0080..a31e243df 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/AnalyzerService.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/AnalyzerService.html @@ -2,16 +2,16 @@ - + -AnalyzerService (Dependency-Check Core 1.2.9 API) - +AnalyzerService (Dependency-Check Core 1.2.10 API) + @@ -102,7 +102,7 @@ extends The Analyzer Service Loader. This class loads all services that implement org.owasp.dependencycheck.analyzer.Analyzer.- Author: -
- Jeremy Long
- Jeremy Long
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/ArchiveAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/ArchiveAnalyzer.html index 69c16aea7..81f861199 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/ArchiveAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/ArchiveAnalyzer.html @@ -2,16 +2,16 @@ - + -ArchiveAnalyzer (Dependency-Check Core 1.2.9 API) - +ArchiveAnalyzer (Dependency-Check Core 1.2.10 API) + @@ -117,7 +117,7 @@ extends Author: -- Jeremy Long
+- Jeremy Long
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/AssemblyAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/AssemblyAnalyzer.html index 2413be193..8f18c71a7 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/AssemblyAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/AssemblyAnalyzer.html @@ -2,16 +2,16 @@ - + -AssemblyAnalyzer (Dependency-Check Core 1.2.9 API) - +AssemblyAnalyzer (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/CPEAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/CPEAnalyzer.html index 0093e9fa1..e52f21c2b 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/CPEAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/CPEAnalyzer.html @@ -2,16 +2,16 @@ - + -CPEAnalyzer (Dependency-Check Core 1.2.9 API) - +CPEAnalyzer (Dependency-Check Core 1.2.10 API) + @@ -107,7 +107,7 @@ implements CPEAnalyzer is a utility class that takes a project dependency and attempts to discern if there is an associated CPE. It uses the evidence contained within the dependency to search the Lucene index.- Author: -
- Jeremy Long
- Jeremy Long
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/CentralAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/CentralAnalyzer.html index 5bc284176..fa9f84022 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/CentralAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/CentralAnalyzer.html @@ -2,16 +2,16 @@ - + -CentralAnalyzer (Dependency-Check Core 1.2.9 API) - +CentralAnalyzer (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/CpeSuppressionAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/CpeSuppressionAnalyzer.html index e918f5511..ea3fb92e4 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/CpeSuppressionAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/CpeSuppressionAnalyzer.html @@ -2,16 +2,16 @@ - + -CpeSuppressionAnalyzer (Dependency-Check Core 1.2.9 API) - +CpeSuppressionAnalyzer (Dependency-Check Core 1.2.10 API) + @@ -116,7 +116,7 @@ extends The suppression analyzer processes an externally defined XML document that complies with the suppressions.xsd schema. Any identified CPE entries within the dependencies that match will be removed.- Author: -
- Jeremy Long
- Jeremy Long
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/DependencyBundlingAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/DependencyBundlingAnalyzer.html index 926d6fb8f..b50d4f9e1 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/DependencyBundlingAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/DependencyBundlingAnalyzer.html @@ -2,16 +2,16 @@ - + -DependencyBundlingAnalyzer (Dependency-Check Core 1.2.9 API) - +DependencyBundlingAnalyzer (Dependency-Check Core 1.2.10 API) + @@ -116,7 +116,7 @@ implements Author: -- Jeremy Long
+- Jeremy Long
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/FalsePositiveAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/FalsePositiveAnalyzer.html index 6748076f4..0b0ea7a8e 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/FalsePositiveAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/FalsePositiveAnalyzer.html @@ -2,16 +2,16 @@ - + -FalsePositiveAnalyzer (Dependency-Check Core 1.2.9 API) - +FalsePositiveAnalyzer (Dependency-Check Core 1.2.10 API) + @@ -110,7 +110,7 @@ extends AbstractAnalyzerThis analyzer attempts to remove some well known false positives - specifically regarding the java runtime.- Author: -
- Jeremy Long
- Jeremy Long
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/FileNameAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/FileNameAnalyzer.html index 3ba3d9c10..0221fe0e9 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/FileNameAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/FileNameAnalyzer.html @@ -2,16 +2,16 @@ - + -FileNameAnalyzer (Dependency-Check Core 1.2.9 API) - +FileNameAnalyzer (Dependency-Check Core 1.2.10 API) + @@ -111,7 +111,7 @@ extends AnalyzerTakes a dependency and analyzes the filename and determines the hashes.- Author: -
- Jeremy Long
- Jeremy Long
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/FileTypeAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/FileTypeAnalyzer.html index a4740348f..64f39755a 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/FileTypeAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/FileTypeAnalyzer.html @@ -2,16 +2,16 @@ - + -FileTypeAnalyzer (Dependency-Check Core 1.2.9 API) - +FileTypeAnalyzer (Dependency-Check Core 1.2.10 API) + @@ -101,7 +101,7 @@ extends AnalyzerAn Analyzer that scans specific file types.- Author: -
- Jeremy Long
- Jeremy Long
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/HintAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/HintAnalyzer.html index 3f17a199d..069de66bb 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/HintAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/HintAnalyzer.html @@ -2,16 +2,16 @@ - + -HintAnalyzer (Dependency-Check Core 1.2.9 API) - +HintAnalyzer (Dependency-Check Core 1.2.10 API) + @@ -110,7 +110,7 @@ extends AbstractAnalyzer implements Analyzer- Author: -
- Jeremy Long
- Jeremy Long
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/JarAnalyzer.ClassNameInformation.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/JarAnalyzer.ClassNameInformation.html index 27fce65f9..75eb3e664 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/JarAnalyzer.ClassNameInformation.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/JarAnalyzer.ClassNameInformation.html @@ -2,16 +2,16 @@ - + -JarAnalyzer.ClassNameInformation (Dependency-Check Core 1.2.9 API) - +JarAnalyzer.ClassNameInformation (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/JarAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/JarAnalyzer.html index fd582574a..dc168f14f 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/JarAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/JarAnalyzer.html @@ -2,16 +2,16 @@ - + -JarAnalyzer (Dependency-Check Core 1.2.9 API) - +JarAnalyzer (Dependency-Check Core 1.2.10 API) + @@ -115,7 +115,7 @@ extends AbstractFileTypeAnalyzerUsed to load a JAR file and collect information that can be used to determine the associated CPE.- Author: -
- Jeremy Long
- Jeremy Long
@@ -216,7 +216,7 @@ extendsstatic voidextractLicense(Model pom, +extractLicense(Model pom, Properties pomProperties, Dependency dependency)Extracts the license information from the pom and adds it to the dependency.@@ -519,13 +519,13 @@ extends Returns:- the interpolated text.
- +-
extractLicense
-public static void extractLicense(Model pom, +
public static void extractLicense(Model pom, Properties pomProperties, Dependency dependency)
Extracts the license information from the pom and adds it to the dependency.diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/JavaScriptAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/JavaScriptAnalyzer.html index 3c7c4c625..d34ab9dcd 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/JavaScriptAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/JavaScriptAnalyzer.html @@ -2,16 +2,16 @@ - + -JavaScriptAnalyzer (Dependency-Check Core 1.2.9 API) - +JavaScriptAnalyzer (Dependency-Check Core 1.2.10 API) + @@ -115,7 +115,7 @@ extends AbstractFileTypeAnalyzerUsed to analyze a JavaScript file to gather information to aid in identification of a CPE identifier.- Author: -
- Jeremy Long
- Jeremy Long
NexusAnalyzer (Dependency-Check Core 1.2.9 API) - +NexusAnalyzer (Dependency-Check Core 1.2.10 API) + @@ -118,10 +118,10 @@ extendsSettings.KEYS.ANALYZER_NEXUS_ENABLEDdetermines whether this analyzer is - even enabled. This can be overridden by setting the system property. -Settings.KEYS.ANALYZER_NEXUS_URLthe URL to a Nexus service to search by - SHA-1. There is an expected%sin this where the SHA-1 will get entered.Settings.KEYS.ANALYZER_NEXUS_ENABLEDdetermines whether this analyzer is even + enabled. This can be overridden by setting the system property.Settings.KEYS.ANALYZER_NEXUS_URLthe URL to a Nexus service to search by SHA-1. + There is an expected%sin this where the SHA-1 will get entered.- Author:
- colezlaw
NuspecAnalyzer (Dependency-Check Core 1.2.9 API) - +NuspecAnalyzer (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/NvdCveAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/NvdCveAnalyzer.html index 966555a01..f4ebc1d3c 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/NvdCveAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/NvdCveAnalyzer.html @@ -2,16 +2,16 @@ - + -NvdCveAnalyzer (Dependency-Check Core 1.2.9 API) - +NvdCveAnalyzer (Dependency-Check Core 1.2.10 API) + @@ -107,7 +107,7 @@ implements NvdCveAnalyzer is a utility class that takes a project dependency and attempts to discern if there is an associated CVEs. It uses the the identifiers found by other analyzers to lookup the CVE data.- Author: -
- Jeremy Long
- Jeremy Long
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/VulnerabilitySuppressionAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/VulnerabilitySuppressionAnalyzer.html index 97f1ed973..4fd35fca6 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/VulnerabilitySuppressionAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/VulnerabilitySuppressionAnalyzer.html @@ -2,16 +2,16 @@ - + -VulnerabilitySuppressionAnalyzer (Dependency-Check Core 1.2.9 API) - +VulnerabilitySuppressionAnalyzer (Dependency-Check Core 1.2.10 API) + @@ -116,7 +116,7 @@ extends The suppression analyzer processes an externally defined XML document that complies with the suppressions.xsd schema. Any identified Vulnerability entries within the dependencies that match will be removed.- Author: -
- Jeremy Long
- Jeremy Long
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/AbstractAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/AbstractAnalyzer.html index 6204d8fc4..0b3e1052f 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/AbstractAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/AbstractAnalyzer.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.analyzer.AbstractAnalyzer (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.analyzer.AbstractAnalyzer (Dependency-Check Core 1.2.10 API) + @@ -79,13 +79,7 @@org.owasp.dependencycheck.analyzer - - -+org.owasp.dependencycheck.analyzer - - - Analyzers are used to inspect the identified dependencies, collect Evidence, - and process the dependencies.Analyzers are used to inspect the identified dependencies, collect Evidence, and process the dependencies.Uses of Class org.owasp.dependencycheck.analyzer.AbstractFileTypeAnalyzer (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.analyzer.AbstractFileTypeAnalyzer (Dependency-Check Core 1.2.10 API) + @@ -79,13 +79,7 @@org.owasp.dependencycheck.analyzer - - -+org.owasp.dependencycheck.analyzer - - - Analyzers are used to inspect the identified dependencies, collect Evidence, - and process the dependencies.Analyzers are used to inspect the identified dependencies, collect Evidence, and process the dependencies.Uses of Class org.owasp.dependencycheck.analyzer.AbstractSuppressionAnalyzer (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.analyzer.AbstractSuppressionAnalyzer (Dependency-Check Core 1.2.10 API) + @@ -79,13 +79,7 @@org.owasp.dependencycheck.analyzer - - -+org.owasp.dependencycheck.analyzer - - - Analyzers are used to inspect the identified dependencies, collect Evidence, - and process the dependencies.Analyzers are used to inspect the identified dependencies, collect Evidence, and process the dependencies.Uses of Class org.owasp.dependencycheck.analyzer.AnalysisPhase (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.analyzer.AnalysisPhase (Dependency-Check Core 1.2.10 API) + @@ -79,24 +79,13 @@org.owasp.dependencycheck - - -+org.owasp.dependencycheck - - - Includes the main entry point (i.e.Includes the main entry point for dependency-check.org.owasp.dependencycheck.analyzer - - -+org.owasp.dependencycheck.analyzer - - - Analyzers are used to inspect the identified dependencies, collect Evidence, - and process the dependencies.Analyzers are used to inspect the identified dependencies, collect Evidence, and process the dependencies.Uses of Interface org.owasp.dependencycheck.analyzer.Analyzer (Dependency-Check Core 1.2.9 API) - +Uses of Interface org.owasp.dependencycheck.analyzer.Analyzer (Dependency-Check Core 1.2.10 API) + @@ -79,35 +79,19 @@org.owasp.dependencycheck - - -+org.owasp.dependencycheck - - - Includes the main entry point (i.e.Includes the main entry point for dependency-check.org.owasp.dependencycheck.analyzer - - -+org.owasp.dependencycheck.analyzer - - - Analyzers are used to inspect the identified dependencies, collect Evidence, - and process the dependencies.Analyzers are used to inspect the identified dependencies, collect Evidence, and process the dependencies.org.owasp.dependencycheck.reporting - - -+org.owasp.dependencycheck.reporting - - - Contains classes used to generate reports.Contains classes used to generate reports.Uses of Class org.owasp.dependencycheck.analyzer.AnalyzerService (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.analyzer.AnalyzerService (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/ArchiveAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/ArchiveAnalyzer.html index e357848ee..b126520be 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/ArchiveAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/ArchiveAnalyzer.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.analyzer.ArchiveAnalyzer (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.analyzer.ArchiveAnalyzer (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/AssemblyAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/AssemblyAnalyzer.html index 433dd7d74..07a4c2b8f 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/AssemblyAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/AssemblyAnalyzer.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.analyzer.AssemblyAnalyzer (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.analyzer.AssemblyAnalyzer (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/CPEAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/CPEAnalyzer.html index 9fbcf73c6..896dafa85 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/CPEAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/CPEAnalyzer.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.analyzer.CPEAnalyzer (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.analyzer.CPEAnalyzer (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/CentralAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/CentralAnalyzer.html index b8a39f0c2..9eff533d8 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/CentralAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/CentralAnalyzer.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.analyzer.CentralAnalyzer (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.analyzer.CentralAnalyzer (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/CpeSuppressionAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/CpeSuppressionAnalyzer.html index 1e9d21627..ebe8ebf69 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/CpeSuppressionAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/CpeSuppressionAnalyzer.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.analyzer.CpeSuppressionAnalyzer (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.analyzer.CpeSuppressionAnalyzer (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/DependencyBundlingAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/DependencyBundlingAnalyzer.html index 675ce2bfe..d610c9db6 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/DependencyBundlingAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/DependencyBundlingAnalyzer.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.analyzer.DependencyBundlingAnalyzer (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.analyzer.DependencyBundlingAnalyzer (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/FalsePositiveAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/FalsePositiveAnalyzer.html index dcec9e8c9..bb3e68560 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/FalsePositiveAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/FalsePositiveAnalyzer.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.analyzer.FalsePositiveAnalyzer (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.analyzer.FalsePositiveAnalyzer (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/FileNameAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/FileNameAnalyzer.html index 397893930..4f06db30e 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/FileNameAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/FileNameAnalyzer.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.analyzer.FileNameAnalyzer (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.analyzer.FileNameAnalyzer (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/FileTypeAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/FileTypeAnalyzer.html index 7d69ff245..f19b7c4ee 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/FileTypeAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/FileTypeAnalyzer.html @@ -2,16 +2,16 @@ - + -Uses of Interface org.owasp.dependencycheck.analyzer.FileTypeAnalyzer (Dependency-Check Core 1.2.9 API) - +Uses of Interface org.owasp.dependencycheck.analyzer.FileTypeAnalyzer (Dependency-Check Core 1.2.10 API) + @@ -79,24 +79,13 @@org.owasp.dependencycheck - - -+org.owasp.dependencycheck - - - Includes the main entry point (i.e.Includes the main entry point for dependency-check.org.owasp.dependencycheck.analyzer - - -+org.owasp.dependencycheck.analyzer - - - Analyzers are used to inspect the identified dependencies, collect Evidence, - and process the dependencies.Analyzers are used to inspect the identified dependencies, collect Evidence, and process the dependencies.Uses of Class org.owasp.dependencycheck.analyzer.HintAnalyzer (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.analyzer.HintAnalyzer (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/JarAnalyzer.ClassNameInformation.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/JarAnalyzer.ClassNameInformation.html index e7ebc6d73..f24efd00a 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/JarAnalyzer.ClassNameInformation.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/JarAnalyzer.ClassNameInformation.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.analyzer.JarAnalyzer.ClassNameInformation (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.analyzer.JarAnalyzer.ClassNameInformation (Dependency-Check Core 1.2.10 API) + @@ -79,13 +79,7 @@org.owasp.dependencycheck.analyzer - - -+org.owasp.dependencycheck.analyzer - - - Analyzers are used to inspect the identified dependencies, collect Evidence, - and process the dependencies.Analyzers are used to inspect the identified dependencies, collect Evidence, and process the dependencies.Uses of Class org.owasp.dependencycheck.analyzer.JarAnalyzer (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.analyzer.JarAnalyzer (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/JavaScriptAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/JavaScriptAnalyzer.html index 6b0c389bb..56563f53f 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/JavaScriptAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/JavaScriptAnalyzer.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.analyzer.JavaScriptAnalyzer (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.analyzer.JavaScriptAnalyzer (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/NexusAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/NexusAnalyzer.html index f1c4e5f39..fbcd189d2 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/NexusAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/NexusAnalyzer.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.analyzer.NexusAnalyzer (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.analyzer.NexusAnalyzer (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/NuspecAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/NuspecAnalyzer.html index 3e0abcec2..8eef6ff3f 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/NuspecAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/NuspecAnalyzer.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.analyzer.NuspecAnalyzer (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.analyzer.NuspecAnalyzer (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/NvdCveAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/NvdCveAnalyzer.html index 6dd62d5db..7cd124058 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/NvdCveAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/NvdCveAnalyzer.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.analyzer.NvdCveAnalyzer (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.analyzer.NvdCveAnalyzer (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/VulnerabilitySuppressionAnalyzer.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/VulnerabilitySuppressionAnalyzer.html index 6b3f3c07f..778ad0234 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/VulnerabilitySuppressionAnalyzer.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/class-use/VulnerabilitySuppressionAnalyzer.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.analyzer.VulnerabilitySuppressionAnalyzer (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.analyzer.VulnerabilitySuppressionAnalyzer (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/exception/AnalysisException.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/exception/AnalysisException.html index a62e33ca2..19bd6ed96 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/exception/AnalysisException.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/exception/AnalysisException.html @@ -2,16 +2,16 @@ - + -AnalysisException (Dependency-Check Core 1.2.9 API) - +AnalysisException (Dependency-Check Core 1.2.10 API) + @@ -115,7 +115,7 @@ extends ExceptionAn exception thrown when the analysis of a dependency fails.- Author: -
- Jeremy Long
- Jeremy Long
- See Also:
- Serialized Form
ArchiveExtractionException (Dependency-Check Core 1.2.9 API) - +ArchiveExtractionException (Dependency-Check Core 1.2.10 API) + @@ -115,7 +115,7 @@ extends ExceptionAn exception thrown when files in an archive cannot be extracted.- Author: -
- Jeremy Long
- Jeremy Long
- See Also:
- Serialized Form
Uses of Class org.owasp.dependencycheck.analyzer.exception.AnalysisException (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.analyzer.exception.AnalysisException (Dependency-Check Core 1.2.10 API) + @@ -79,24 +79,13 @@org.owasp.dependencycheck.analyzer - - -+org.owasp.dependencycheck.analyzer - - - Analyzers are used to inspect the identified dependencies, collect Evidence, - and process the dependencies.Analyzers are used to inspect the identified dependencies, collect Evidence, and process the dependencies.- @@ -250,33 +239,34 @@ -org.owasp.dependencycheck.jaxb.pom +org.owasp.dependencycheck.xml.pom - - -+org.owasp.dependencycheck.analyzer.pom - - - This package contains utility classes used to parse pom.xml files.This package contains classes used to parse pom.xml files.- +
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/dependency/EvidenceCollection.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/dependency/EvidenceCollection.html index aa513e4d7..9bf427ad1 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/dependency/EvidenceCollection.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/dependency/EvidenceCollection.html @@ -2,16 +2,16 @@ - + -- -
-Uses of AnalysisException in org.owasp.dependencycheck.jaxb.pom
+Uses of AnalysisException in org.owasp.dependencycheck.xml.pom
-
Methods in org.owasp.dependencycheck.jaxb.pom that throw AnalysisException +Methods in org.owasp.dependencycheck.xml.pom that throw AnalysisException Modifier and Type Method and Description - voidPomUtils. analyzePOM(Dependency dependency, +static voidPomUtils. analyzePOM(Dependency dependency, File pomFile)Reads in the pom file and adds elements as evidence to the given dependency.- ModelPomUtils. readPom(File file)+static ModelPomUtils. readPom(File file)Reads in the specified POM and converts it to a Model.- diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/exception/class-use/ArchiveExtractionException.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/exception/class-use/ArchiveExtractionException.html index 454cb769b..b8beed900 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/exception/class-use/ArchiveExtractionException.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/exception/class-use/ArchiveExtractionException.html @@ -2,16 +2,16 @@ - + -ModelPomUtils. readPom(SAXSource source)+static ModelPomUtils. readPom(String path, + JarFile jar)Retrieves the specified POM from a jar file and converts it to a Model.Uses of Class org.owasp.dependencycheck.analyzer.exception.ArchiveExtractionException (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.analyzer.exception.ArchiveExtractionException (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/exception/package-frame.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/exception/package-frame.html index ee720b023..507de629f 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/exception/package-frame.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/exception/package-frame.html @@ -2,10 +2,10 @@ - + -org.owasp.dependencycheck.analyzer.exception (Dependency-Check Core 1.2.9 API) - +org.owasp.dependencycheck.analyzer.exception (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/exception/package-summary.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/exception/package-summary.html index 466ee71e5..db5755af5 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/exception/package-summary.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/exception/package-summary.html @@ -2,16 +2,16 @@ - + -org.owasp.dependencycheck.analyzer.exception (Dependency-Check Core 1.2.9 API) - +org.owasp.dependencycheck.analyzer.exception (Dependency-Check Core 1.2.10 API) + @@ -66,11 +66,7 @@@@ -104,15 +100,7 @@Package org.owasp.dependencycheck.analyzer.exception
-- -+org.owasp.dependencycheck.analyzer.exception - -A collection of exception classes used within the analyzers.See: Description
Package org.owasp.dependencycheck.analyzer.exception Description
-- -+org.owasp.dependencycheck.analyzer.exception - - -- A collection of exception classes used within the analyzers.
- -A collection of exception classes used within the analyzers.diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/exception/package-tree.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/exception/package-tree.html index 673b07614..7897dba30 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/exception/package-tree.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/exception/package-tree.html @@ -2,16 +2,16 @@ - + -@@ -119,17 +108,17 @@org.owasp.dependencycheck.analyzer.exception Class Hierarchy (Dependency-Check Core 1.2.9 API) - +org.owasp.dependencycheck.analyzer.exception Class Hierarchy (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/exception/package-use.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/exception/package-use.html index 229c2f1ea..9086a7dc5 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/exception/package-use.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/analyzer/exception/package-use.html @@ -2,16 +2,16 @@ - + -Uses of Package org.owasp.dependencycheck.analyzer.exception (Dependency-Check Core 1.2.9 API) - +Uses of Package org.owasp.dependencycheck.analyzer.exception (Dependency-Check Core 1.2.10 API) + @@ -79,24 +79,13 @@org.owasp.dependencycheck.analyzer - - -+org.owasp.dependencycheck.analyzer - - - Analyzers are used to inspect the identified dependencies, collect Evidence, - and process the dependencies.Analyzers are used to inspect the identified dependencies, collect Evidence, and process the dependencies.- org.owasp.dependencycheck.jaxb.pom +org.owasp.dependencycheck.xml.pom - - -+org.owasp.dependencycheck.analyzer.pom - - - This package contains utility classes used to parse pom.xml files.This package contains classes used to parse pom.xml files.- +
@@ -445,7 +451,7 @@ implements --
+
-
compareTo
public int compareTo(Evidence o)
@@ -457,6 +463,20 @@ implements Returns:- an integer indicating the ordering of the two objects
EvidenceCollection (Dependency-Check Core 1.2.9 API) - +EvidenceCollection (Dependency-Check Core 1.2.10 API) + @@ -106,7 +106,7 @@ extends Serializable, Iterable<Evidence>Used to maintain a collection of Evidence.- Author: -
- Jeremy Long
- Jeremy Long
- See Also:
- Serialized Form
Identifier (Dependency-Check Core 1.2.9 API) - +Identifier (Dependency-Check Core 1.2.10 API) + @@ -105,7 +105,7 @@ extends Object implements Serializable, Comparable<Identifier>- Author: -
- Jeremy Long
- Jeremy Long
- See Also:
- Serialized Form
Reference (Dependency-Check Core 1.2.9 API) - +Reference (Dependency-Check Core 1.2.10 API) + @@ -106,7 +106,7 @@ extends Serializable, Comparable<Reference>An external reference for a vulnerability. This contains a name, URL, and a source.- Author: -
- Jeremy Long
- Jeremy Long
- See Also:
- Serialized Form
Vulnerability (Dependency-Check Core 1.2.9 API) - +Vulnerability (Dependency-Check Core 1.2.10 API) + @@ -106,7 +106,7 @@ extends Serializable, Comparable<Vulnerability>Contains the information about a vulnerability.- Author: -
- Jeremy Long
- Jeremy Long
- See Also:
- Serialized Form
VulnerabilityComparator (Dependency-Check Core 1.2.9 API) - +VulnerabilityComparator (Dependency-Check Core 1.2.10 API) + @@ -106,7 +106,7 @@ extends Comparator<Vulnerability>, SerializableComparator for Vulnerability objects.- Author: -
- Jeremy Long
- Jeremy Long
- See Also:
- Serialized Form
VulnerableSoftware (Dependency-Check Core 1.2.9 API) - +VulnerableSoftware (Dependency-Check Core 1.2.10 API) + @@ -111,7 +111,7 @@ extends Serializable, Comparable<VulnerableSoftware>A record containing information about vulnerable software. This is referenced from a vulnerability.- Author: -
- Jeremy Long
- Jeremy Long
- See Also:
- Serialized Form
Uses of Class org.owasp.dependencycheck.dependency.Confidence (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.dependency.Confidence (Dependency-Check Core 1.2.10 API) + @@ -79,24 +79,13 @@org.owasp.dependencycheck.analyzer - - -+org.owasp.dependencycheck.analyzer - - - Analyzers are used to inspect the identified dependencies, collect Evidence, - and process the dependencies.Analyzers are used to inspect the identified dependencies, collect Evidence, and process the dependencies.org.owasp.dependencycheck.dependency - - -+org.owasp.dependencycheck.dependency - - - Contains the core Dependency implementation.Contains the core Dependency implementation.Uses of Class org.owasp.dependencycheck.dependency.Dependency (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.dependency.Dependency (Dependency-Check Core 1.2.10 API) + @@ -79,81 +79,44 @@org.owasp.dependencycheck - - -+org.owasp.dependencycheck - - - Includes the main entry point (i.e.Includes the main entry point for dependency-check.org.owasp.dependencycheck.agent - - -+org.owasp.dependencycheck.agent - - - The agent package holds an agent API that can be used by other applications that have information about dependencies; - but would rather implement something in their code directly rather then spawn a process to run the entire - dependency-check engine.The agent package holds an agent API that can be used by other applications that have information about dependencies; but would + rather implement something in their code directly rather then spawn a process to run the entire dependency-check engine.org.owasp.dependencycheck.analyzer - - -+org.owasp.dependencycheck.analyzer - - - Analyzers are used to inspect the identified dependencies, collect Evidence, - and process the dependencies.Analyzers are used to inspect the identified dependencies, collect Evidence, and process the dependencies.org.owasp.dependencycheck.dependency - - -+org.owasp.dependencycheck.dependency - - - Contains the core Dependency implementation.Contains the core Dependency implementation.- org.owasp.dependencycheck.jaxb.pom +org.owasp.dependencycheck.reporting - - -+org.owasp.dependencycheck.analyzer.pom - - - This package contains utility classes used to parse pom.xml files.Contains classes used to generate reports.- org.owasp.dependencycheck.reporting +org.owasp.dependencycheck.suppression - - -+org.owasp.dependencycheck.reporting - - - Contains classes used to generate reports.Contains classes used to suppress findings.- @@ -467,7 +430,7 @@org.owasp.dependencycheck.suppression +org.owasp.dependencycheck.xml.pom - - -+org.owasp.dependencycheck.suppression - - - Contains classes used to suppress findings.This package contains classes used to parse pom.xml files.static voidJarAnalyzer. extractLicense(Model pom, +JarAnalyzer. extractLicense(Model pom, Properties pomProperties, Dependency dependency)Extracts the license information from the pom and adds it to the dependency.@@ -540,27 +503,6 @@ -- - - -
Uses of Dependency in org.owasp.dependencycheck.jaxb.pom
--
-Methods in org.owasp.dependencycheck.jaxb.pom with parameters of type Dependency -- - -Modifier and Type -Method and Description -- - -voidPomUtils. -analyzePOM(Dependency dependency, - File pomFile)-Reads in the pom file and adds elements as evidence to the given dependency.-- @@ -602,6 +544,27 @@
+- + + +
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/dependency/class-use/Evidence.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/dependency/class-use/Evidence.html index 44fb6825f..76a6e9bf9 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/dependency/class-use/Evidence.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/dependency/class-use/Evidence.html @@ -2,16 +2,16 @@ - + -Uses of Dependency in org.owasp.dependencycheck.xml.pom
++
+Methods in org.owasp.dependencycheck.xml.pom with parameters of type Dependency ++ + +Modifier and Type +Method and Description ++ + +static voidPomUtils. +analyzePOM(Dependency dependency, + File pomFile)+Reads in the pom file and adds elements as evidence to the given dependency.+Uses of Class org.owasp.dependencycheck.dependency.Evidence (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.dependency.Evidence (Dependency-Check Core 1.2.10 API) + @@ -79,12 +79,7 @@org.owasp.dependencycheck.dependency - - -+org.owasp.dependencycheck.dependency - - - Contains the core Dependency implementation.Contains the core Dependency implementation.Uses of Class org.owasp.dependencycheck.dependency.EvidenceCollection (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.dependency.EvidenceCollection (Dependency-Check Core 1.2.10 API) + @@ -79,12 +79,7 @@org.owasp.dependencycheck.dependency - - -+org.owasp.dependencycheck.dependency - - - Contains the core Dependency implementation.Contains the core Dependency implementation.Uses of Class org.owasp.dependencycheck.dependency.Identifier (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.dependency.Identifier (Dependency-Check Core 1.2.10 API) + @@ -79,12 +79,7 @@org.owasp.dependencycheck.dependency - - -+org.owasp.dependencycheck.dependency - - - Contains the core Dependency implementation.Contains the core Dependency implementation.Uses of Class org.owasp.dependencycheck.dependency.Reference (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.dependency.Reference (Dependency-Check Core 1.2.10 API) + @@ -79,12 +79,7 @@org.owasp.dependencycheck.dependency - - -+org.owasp.dependencycheck.dependency - - - Contains the core Dependency implementation.Contains the core Dependency implementation.Uses of Class org.owasp.dependencycheck.dependency.Vulnerability (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.dependency.Vulnerability (Dependency-Check Core 1.2.10 API) + @@ -79,23 +79,13 @@org.owasp.dependencycheck.data.nvdcve - - -+org.owasp.dependencycheck.data.nvdcve - - - Contains classes used to work with the NVD CVE data.Contains classes used to work with the NVD CVE data.org.owasp.dependencycheck.dependency - - -+org.owasp.dependencycheck.dependency - - - Contains the core Dependency implementation.Contains the core Dependency implementation.Uses of Class org.owasp.dependencycheck.dependency.VulnerabilityComparator (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.dependency.VulnerabilityComparator (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/dependency/class-use/VulnerableSoftware.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/dependency/class-use/VulnerableSoftware.html index d949afd45..c9a46e8c7 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/dependency/class-use/VulnerableSoftware.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/dependency/class-use/VulnerableSoftware.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.dependency.VulnerableSoftware (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.dependency.VulnerableSoftware (Dependency-Check Core 1.2.10 API) + @@ -79,33 +79,21 @@org.owasp.dependencycheck.data.nvdcve - - -+org.owasp.dependencycheck.data.nvdcve - - - Contains classes used to work with the NVD CVE data.Contains classes used to work with the NVD CVE data.org.owasp.dependencycheck.data.update.xml - - -+org.owasp.dependencycheck.data.nvdcve.xml - -Contains classes used to parse the NVD CVE XML file.
+ + The basic use is that the Importer is called to import an NVD CVE file.org.owasp.dependencycheck.dependency - - -+org.owasp.dependencycheck.dependency - - - Contains the core Dependency implementation.Contains the core Dependency implementation.org.owasp.dependencycheck.dependency (Dependency-Check Core 1.2.9 API) - +org.owasp.dependencycheck.dependency (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/dependency/package-summary.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/dependency/package-summary.html index ab08282ca..44760cc98 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/dependency/package-summary.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/dependency/package-summary.html @@ -2,16 +2,16 @@ - + -org.owasp.dependencycheck.dependency (Dependency-Check Core 1.2.9 API) - +org.owasp.dependencycheck.dependency (Dependency-Check Core 1.2.10 API) + @@ -66,12 +66,7 @@@@ -156,14 +151,7 @@Package org.owasp.dependencycheck.dependency
-- -+org.owasp.dependencycheck.dependency - - - Contains the core Dependency implementation.Contains the core Dependency implementation.See: Description
Package org.owasp.dependencycheck.dependency Description
-- -+org.owasp.dependencycheck.dependency - - - Contains the core Dependency implementation. - -Contains the core Dependency implementation.diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/dependency/package-tree.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/dependency/package-tree.html index f12156d7e..6aaeff921 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/dependency/package-tree.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/dependency/package-tree.html @@ -2,16 +2,16 @@ - + -diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/exception/NoDataException.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/exception/NoDataException.html index f174a91b5..703c8766a 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/exception/NoDataException.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/exception/NoDataException.html @@ -2,16 +2,16 @@ - + -org.owasp.dependencycheck.dependency Class Hierarchy (Dependency-Check Core 1.2.9 API) - +org.owasp.dependencycheck.dependency Class Hierarchy (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/dependency/package-use.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/dependency/package-use.html index 0ce525546..366e9f0ae 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/dependency/package-use.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/dependency/package-use.html @@ -2,16 +2,16 @@ - + -Uses of Package org.owasp.dependencycheck.dependency (Dependency-Check Core 1.2.9 API) - +Uses of Package org.owasp.dependencycheck.dependency (Dependency-Check Core 1.2.10 API) + @@ -79,102 +79,58 @@org.owasp.dependencycheck - - -+org.owasp.dependencycheck - - - Includes the main entry point (i.e.Includes the main entry point for dependency-check.org.owasp.dependencycheck.agent - - -+org.owasp.dependencycheck.agent - - - The agent package holds an agent API that can be used by other applications that have information about dependencies; - but would rather implement something in their code directly rather then spawn a process to run the entire - dependency-check engine.The agent package holds an agent API that can be used by other applications that have information about dependencies; but would + rather implement something in their code directly rather then spawn a process to run the entire dependency-check engine.org.owasp.dependencycheck.analyzer - - -+org.owasp.dependencycheck.analyzer - - - Analyzers are used to inspect the identified dependencies, collect Evidence, - and process the dependencies.Analyzers are used to inspect the identified dependencies, collect Evidence, and process the dependencies.org.owasp.dependencycheck.data.nvdcve - - -+org.owasp.dependencycheck.data.nvdcve - - - Contains classes used to work with the NVD CVE data.Contains classes used to work with the NVD CVE data.org.owasp.dependencycheck.data.update.xml - - -+org.owasp.dependencycheck.data.nvdcve.xml - -Contains classes used to parse the NVD CVE XML file.
+ + The basic use is that the Importer is called to import an NVD CVE file.org.owasp.dependencycheck.dependency - - -+org.owasp.dependencycheck.dependency - - - Contains the core Dependency implementation.Contains the core Dependency implementation.- org.owasp.dependencycheck.jaxb.pom +org.owasp.dependencycheck.reporting - - -+org.owasp.dependencycheck.analyzer.pom - - - This package contains utility classes used to parse pom.xml files.Contains classes used to generate reports.- org.owasp.dependencycheck.reporting +org.owasp.dependencycheck.suppression - - -+org.owasp.dependencycheck.reporting - - - Contains classes used to generate reports.Contains classes used to suppress findings.- @@ -325,23 +281,6 @@ -org.owasp.dependencycheck.suppression +org.owasp.dependencycheck.xml.pom - - -+org.owasp.dependencycheck.suppression - - - Contains classes used to suppress findings.This package contains classes used to parse pom.xml files.- - - -
-
-Classes in org.owasp.dependencycheck.dependency used by org.owasp.dependencycheck.jaxb.pom -- - -Class and Description -- - -Dependency - -A program dependency.-- @@ -376,6 +315,23 @@
+- + + +
+
+Classes in org.owasp.dependencycheck.dependency used by org.owasp.dependencycheck.xml.pom ++ + +Class and Description ++ + +Dependency + +A program dependency.+NoDataException (Dependency-Check Core 1.2.9 API) - +NoDataException (Dependency-Check Core 1.2.10 API) + @@ -120,7 +120,7 @@ extends IOExceptionAn exception used when the data needed does not exist to perform analysis.- Author: -
- Jeremy Long
- Jeremy Long
- See Also:
- Serialized Form
ScanAgentException (Dependency-Check Core 1.2.9 API) - +ScanAgentException (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/exception/class-use/NoDataException.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/exception/class-use/NoDataException.html index f84930b0e..bb6e759df 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/exception/class-use/NoDataException.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/exception/class-use/NoDataException.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.exception.NoDataException (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.exception.NoDataException (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/exception/class-use/ScanAgentException.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/exception/class-use/ScanAgentException.html index f842f43bb..958af73b9 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/exception/class-use/ScanAgentException.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/exception/class-use/ScanAgentException.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.exception.ScanAgentException (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.exception.ScanAgentException (Dependency-Check Core 1.2.10 API) + @@ -79,14 +79,8 @@org.owasp.dependencycheck.agent - - -+org.owasp.dependencycheck.agent - - - The agent package holds an agent API that can be used by other applications that have information about dependencies; - but would rather implement something in their code directly rather then spawn a process to run the entire - dependency-check engine.The agent package holds an agent API that can be used by other applications that have information about dependencies; but would + rather implement something in their code directly rather then spawn a process to run the entire dependency-check engine.- diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/package-frame.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/package-frame.html index ecedbb618..1b288cb80 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/package-frame.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/package-frame.html @@ -2,10 +2,10 @@ - + -voidEngineDependencyCheckScanAgent. diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/exception/package-frame.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/exception/package-frame.html index 04712cadb..3f19326af 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/exception/package-frame.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/exception/package-frame.html @@ -2,10 +2,10 @@ - + -execute()Executes the dependency-check and generates the report.org.owasp.dependencycheck.exception (Dependency-Check Core 1.2.9 API) - +org.owasp.dependencycheck.exception (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/exception/package-summary.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/exception/package-summary.html index 4a09b671a..6fc44de10 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/exception/package-summary.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/exception/package-summary.html @@ -2,16 +2,16 @@ - + -org.owasp.dependencycheck.exception (Dependency-Check Core 1.2.9 API) - +org.owasp.dependencycheck.exception (Dependency-Check Core 1.2.10 API) + @@ -38,7 +38,7 @@org.owasp.dependencycheck (Dependency-Check Core 1.2.9 API) - +org.owasp.dependencycheck (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/package-summary.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/package-summary.html index 8c8918e13..5c623f2d3 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/package-summary.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/package-summary.html @@ -2,16 +2,16 @@ - + -org.owasp.dependencycheck (Dependency-Check Core 1.2.9 API) - +org.owasp.dependencycheck (Dependency-Check Core 1.2.10 API) + @@ -66,12 +66,7 @@@@ -99,14 +94,7 @@Package org.owasp.dependencycheck
-- -+org.owasp.dependencycheck - - - Includes the main entry point (i.e.Includes the main entry point for dependency-check.See: Description
Package org.owasp.dependencycheck Description
-- -+org.owasp.dependencycheck - - - Includes the main entry point (i.e. the engine) for dependency-check. - -Includes the main entry point for dependency-check.
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/package-tree.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/package-tree.html index 50b32e141..a9466698f 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/package-tree.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/package-tree.html @@ -2,16 +2,16 @@ - + -org.owasp.dependencycheck Class Hierarchy (Dependency-Check Core 1.2.9 API) - +org.owasp.dependencycheck Class Hierarchy (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/package-use.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/package-use.html index 95f83e824..a34ddc5a1 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/package-use.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/package-use.html @@ -2,16 +2,16 @@ - + -Uses of Package org.owasp.dependencycheck (Dependency-Check Core 1.2.9 API) - +Uses of Package org.owasp.dependencycheck (Dependency-Check Core 1.2.10 API) + @@ -77,26 +77,39 @@- org.owasp.dependencycheck.analyzer +org.owasp.dependencycheck.agent - - -+org.owasp.dependencycheck.analyzer - - - Analyzers are used to inspect the identified dependencies, collect Evidence, - and process the dependencies.The agent package holds an agent API that can be used by other applications that have information about dependencies; but would + rather implement something in their code directly rather then spawn a process to run the entire dependency-check engine.+ +org.owasp.dependencycheck.analyzer ++ +Analyzers are used to inspect the identified dependencies, collect Evidence, and process the dependencies.+org.owasp.dependencycheck.utils - +- -+org.owasp.dependencycheck.utils - - - Includes various utility classes such as a Settings wrapper, a Checksum utility, etc.Includes various utility classes such as a Settings wrapper, a Checksum utility, etc.+- + + +
+
Classes in org.owasp.dependencycheck used by org.owasp.dependencycheck.agent ++ + +Class and Description ++ diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/EscapeTool.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/EscapeTool.html index bea543d61..21dba1361 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/EscapeTool.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/EscapeTool.html @@ -2,16 +2,16 @@ - + -Engine + Scans files, directories, etc.EscapeTool (Dependency-Check Core 1.2.9 API) - +EscapeTool (Dependency-Check Core 1.2.10 API) + @@ -102,7 +102,7 @@ extends An extremely simple wrapper around various escape utils to perform URL and HTML encoding within the reports. This class was created to simplify the velocity configuration and avoid using the "built-in" escape tool.- Author: -
- Jeremy Long
- Jeremy Long
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/ReportGenerator.Format.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/ReportGenerator.Format.html index 05cdda413..27a04a747 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/ReportGenerator.Format.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/ReportGenerator.Format.html @@ -2,16 +2,16 @@ - + -ReportGenerator.Format (Dependency-Check Core 1.2.9 API) - +ReportGenerator.Format (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/ReportGenerator.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/ReportGenerator.html index 62918d174..bace06f93 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/ReportGenerator.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/ReportGenerator.html @@ -2,16 +2,16 @@ - + -ReportGenerator (Dependency-Check Core 1.2.9 API) - +ReportGenerator (Dependency-Check Core 1.2.10 API) + @@ -102,7 +102,7 @@ extends The ReportGenerator is used to, as the name implies, generate reports. Internally the generator uses the Velocity Templating Engine. The ReportGenerator exposes a list of Dependencies to the template when generating the report.- Author: -
- Jeremy Long
- Jeremy Long
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/VelocityLoggerRedirect.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/VelocityLoggerRedirect.html index 2297f3ad7..2bf7eadc9 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/VelocityLoggerRedirect.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/VelocityLoggerRedirect.html @@ -2,16 +2,16 @@ - + -VelocityLoggerRedirect (Dependency-Check Core 1.2.9 API) - +VelocityLoggerRedirect (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/class-use/EscapeTool.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/class-use/EscapeTool.html index 7ccd141b6..303b3e6dc 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/class-use/EscapeTool.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/class-use/EscapeTool.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.reporting.EscapeTool (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.reporting.EscapeTool (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/class-use/ReportGenerator.Format.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/class-use/ReportGenerator.Format.html index f1f1902e0..36d9f764a 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/class-use/ReportGenerator.Format.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/class-use/ReportGenerator.Format.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.reporting.ReportGenerator.Format (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.reporting.ReportGenerator.Format (Dependency-Check Core 1.2.10 API) + @@ -79,25 +79,14 @@org.owasp.dependencycheck.agent - - -+org.owasp.dependencycheck.agent - - - The agent package holds an agent API that can be used by other applications that have information about dependencies; - but would rather implement something in their code directly rather then spawn a process to run the entire - dependency-check engine.The agent package holds an agent API that can be used by other applications that have information about dependencies; but would + rather implement something in their code directly rather then spawn a process to run the entire dependency-check engine.org.owasp.dependencycheck.reporting - - -+org.owasp.dependencycheck.reporting - - - Contains classes used to generate reports.Contains classes used to generate reports.Uses of Class org.owasp.dependencycheck.reporting.ReportGenerator (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.reporting.ReportGenerator (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/class-use/VelocityLoggerRedirect.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/class-use/VelocityLoggerRedirect.html index ada33d5b7..5a54aa1c5 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/class-use/VelocityLoggerRedirect.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/class-use/VelocityLoggerRedirect.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.reporting.VelocityLoggerRedirect (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.reporting.VelocityLoggerRedirect (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/package-frame.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/package-frame.html index 7ef8e99a5..9198a70c5 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/package-frame.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/package-frame.html @@ -2,10 +2,10 @@ - + -org.owasp.dependencycheck.reporting (Dependency-Check Core 1.2.9 API) - +org.owasp.dependencycheck.reporting (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/package-summary.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/package-summary.html index 05ebe11f7..1479c7fce 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/package-summary.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/reporting/package-summary.html @@ -2,16 +2,16 @@ - + -org.owasp.dependencycheck.reporting (Dependency-Check Core 1.2.9 API) - +org.owasp.dependencycheck.reporting (Dependency-Check Core 1.2.10 API) + @@ -37,7 +37,7 @@- Author: -
- Jeremy Long
- Jeremy Long
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/SuppressionErrorHandler.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/SuppressionErrorHandler.html index 4bf6a1969..61b7d7cf8 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/SuppressionErrorHandler.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/SuppressionErrorHandler.html @@ -2,16 +2,16 @@ - + -SuppressionErrorHandler (Dependency-Check Core 1.2.9 API) - +SuppressionErrorHandler (Dependency-Check Core 1.2.10 API) + @@ -106,7 +106,7 @@ extends ErrorHandlerAn XML parsing error handler.- Author: -
- Jeremy Long
- Jeremy Long
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/SuppressionHandler.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/SuppressionHandler.html index 76cdc422a..dcd428fc4 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/SuppressionHandler.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/SuppressionHandler.html @@ -2,16 +2,16 @@ - + -SuppressionHandler (Dependency-Check Core 1.2.9 API) - +SuppressionHandler (Dependency-Check Core 1.2.10 API) + @@ -110,7 +110,7 @@ extends org.xml.sax.helpers.DefaultHandlerA handler to load suppression rules.- Author: -
- Jeremy Long
- Jeremy Long
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/SuppressionParseException.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/SuppressionParseException.html index d79aa1140..b0de36c11 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/SuppressionParseException.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/SuppressionParseException.html @@ -2,16 +2,16 @@ - + -SuppressionParseException (Dependency-Check Core 1.2.9 API) - +SuppressionParseException (Dependency-Check Core 1.2.10 API) + @@ -120,7 +120,7 @@ extends IOExceptionAn exception used when parsing a suppression rule file fails.- Author: -
- Jeremy Long
- Jeremy Long
- See Also:
- Serialized Form
SuppressionParser (Dependency-Check Core 1.2.9 API) - +SuppressionParser (Dependency-Check Core 1.2.10 API) + @@ -101,7 +101,7 @@ extends ObjectA simple validating parser for XML Suppression Rules.- Author: -
- Jeremy Long
- Jeremy Long
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/SuppressionRule.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/SuppressionRule.html index e5a22c77e..f9ab5a6cf 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/SuppressionRule.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/SuppressionRule.html @@ -2,16 +2,16 @@ - + -SuppressionRule (Dependency-Check Core 1.2.9 API) - +SuppressionRule (Dependency-Check Core 1.2.10 API) + @@ -100,7 +100,7 @@public class SuppressionRule extends Object
- Author: -
- Jeremy Long
- Jeremy Long
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/class-use/PropertyType.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/class-use/PropertyType.html index 42844c9e6..3295f0200 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/class-use/PropertyType.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/class-use/PropertyType.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.suppression.PropertyType (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.suppression.PropertyType (Dependency-Check Core 1.2.10 API) + @@ -79,12 +79,7 @@org.owasp.dependencycheck.suppression - - -+org.owasp.dependencycheck.suppression - - - Contains classes used to suppress findings.Contains classes used to suppress findings.Uses of Class org.owasp.dependencycheck.suppression.SuppressionErrorHandler (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.suppression.SuppressionErrorHandler (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/class-use/SuppressionHandler.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/class-use/SuppressionHandler.html index 8b1b54cf5..36edfa54b 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/class-use/SuppressionHandler.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/class-use/SuppressionHandler.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.suppression.SuppressionHandler (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.suppression.SuppressionHandler (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/class-use/SuppressionParseException.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/class-use/SuppressionParseException.html index b6d7bf1ef..b8731ad3c 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/class-use/SuppressionParseException.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/class-use/SuppressionParseException.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.suppression.SuppressionParseException (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.suppression.SuppressionParseException (Dependency-Check Core 1.2.10 API) + @@ -79,12 +79,7 @@org.owasp.dependencycheck.suppression - - -+org.owasp.dependencycheck.suppression - - - Contains classes used to suppress findings.Contains classes used to suppress findings.Uses of Class org.owasp.dependencycheck.suppression.SuppressionParser (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.suppression.SuppressionParser (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/class-use/SuppressionRule.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/class-use/SuppressionRule.html index 82111a7a7..33cba77a1 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/class-use/SuppressionRule.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/class-use/SuppressionRule.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.suppression.SuppressionRule (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.suppression.SuppressionRule (Dependency-Check Core 1.2.10 API) + @@ -79,24 +79,13 @@org.owasp.dependencycheck.analyzer - - -+org.owasp.dependencycheck.analyzer - - - Analyzers are used to inspect the identified dependencies, collect Evidence, - and process the dependencies.Analyzers are used to inspect the identified dependencies, collect Evidence, and process the dependencies.org.owasp.dependencycheck.suppression - - -+org.owasp.dependencycheck.suppression - - - Contains classes used to suppress findings.Contains classes used to suppress findings.org.owasp.dependencycheck.suppression (Dependency-Check Core 1.2.9 API) - +org.owasp.dependencycheck.suppression (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/package-summary.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/package-summary.html index 6def769a4..3eaa37737 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/package-summary.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/package-summary.html @@ -2,16 +2,16 @@ - + -org.owasp.dependencycheck.suppression (Dependency-Check Core 1.2.9 API) - +org.owasp.dependencycheck.suppression (Dependency-Check Core 1.2.10 API) + @@ -66,12 +66,7 @@@@ -139,14 +134,7 @@Package org.owasp.dependencycheck.suppression
-- -+org.owasp.dependencycheck.suppression - - - Contains classes used to suppress findings.Contains classes used to suppress findings.See: Description
Package org.owasp.dependencycheck.suppression Description
-- -+org.owasp.dependencycheck.suppression - - - Contains classes used to suppress findings. - -Contains classes used to suppress findings.diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/package-tree.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/package-tree.html index 731df4146..121f7f07b 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/package-tree.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/package-tree.html @@ -2,16 +2,16 @@ - + -diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/DateUtil.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/DateUtil.html index b4238b93a..15bf768c8 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/DateUtil.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/DateUtil.html @@ -2,16 +2,16 @@ - + -org.owasp.dependencycheck.suppression Class Hierarchy (Dependency-Check Core 1.2.9 API) - +org.owasp.dependencycheck.suppression Class Hierarchy (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/package-use.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/package-use.html index 3a6c99ab6..c208c5be7 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/package-use.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/suppression/package-use.html @@ -2,16 +2,16 @@ - + -Uses of Package org.owasp.dependencycheck.suppression (Dependency-Check Core 1.2.9 API) - +Uses of Package org.owasp.dependencycheck.suppression (Dependency-Check Core 1.2.10 API) + @@ -79,24 +79,13 @@org.owasp.dependencycheck.analyzer - - -+org.owasp.dependencycheck.analyzer - - - Analyzers are used to inspect the identified dependencies, collect Evidence, - and process the dependencies.Analyzers are used to inspect the identified dependencies, collect Evidence, and process the dependencies.org.owasp.dependencycheck.suppression - - -+org.owasp.dependencycheck.suppression - - - Contains classes used to suppress findings.Contains classes used to suppress findings.DBUtils (Dependency-Check Core 1.2.9 API) - +DBUtils (Dependency-Check Core 1.2.10 API) + @@ -100,7 +100,7 @@public final class DBUtils extends Object
- Author: -
- Jeremy Long
- Jeremy Long
DateUtil (Dependency-Check Core 1.2.9 API) - +DateUtil (Dependency-Check Core 1.2.10 API) + @@ -100,7 +100,7 @@public final class DateUtil extends Object
- Author: -
- Jeremy Long
- Jeremy Long
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/DependencyVersion.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/DependencyVersion.html index 2aa01c9e6..3ba38c1d4 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/DependencyVersion.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/DependencyVersion.html @@ -2,16 +2,16 @@ - + -DependencyVersion (Dependency-Check Core 1.2.9 API) - +DependencyVersion (Dependency-Check Core 1.2.10 API) + @@ -114,7 +114,7 @@ implements Author: -- Jeremy Long
+- Jeremy Long
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/DependencyVersionUtil.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/DependencyVersionUtil.html index 9e4a69d89..e6d6d6335 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/DependencyVersionUtil.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/DependencyVersionUtil.html @@ -2,16 +2,16 @@ - + -DependencyVersionUtil (Dependency-Check Core 1.2.9 API) - +DependencyVersionUtil (Dependency-Check Core 1.2.10 API) + @@ -102,7 +102,7 @@ extendsA utility class to extract version numbers from file names (or other strings containing version numbers.
- Author: -
- Jeremy Long
- Jeremy Long
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/ExtractionUtil.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/ExtractionUtil.html index cb890fb1e..5d081bc13 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/ExtractionUtil.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/ExtractionUtil.html @@ -2,16 +2,16 @@ - + -ExtractionUtil (Dependency-Check Core 1.2.9 API) - +ExtractionUtil (Dependency-Check Core 1.2.10 API) + @@ -100,7 +100,7 @@public final class ExtractionUtil extends Object
- Author: -
- Jeremy Long
- Jeremy Long
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/Filter.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/Filter.html index 4c84873bf..de65889b2 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/Filter.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/Filter.html @@ -2,16 +2,16 @@ - + -Filter (Dependency-Check Core 1.2.9 API) - +Filter (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/NonClosingStream.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/NonClosingStream.html index c60dc21a3..d9890abf4 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/NonClosingStream.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/NonClosingStream.html @@ -2,16 +2,16 @@ - + -NonClosingStream (Dependency-Check Core 1.2.9 API) - +NonClosingStream (Dependency-Check Core 1.2.10 API) + @@ -116,7 +116,7 @@ extends NonClosingStream is a stream filter which prevents another class that processes the stream from closing it. This is necessary when dealing with things like JAXB and zipInputStreams.- Author: -
- Jeremy Long
- Jeremy Long
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/Pair.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/Pair.html index e047a36e3..234d49e08 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/Pair.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/Pair.html @@ -2,16 +2,16 @@ - + -Pair (Dependency-Check Core 1.2.9 API) - +Pair (Dependency-Check Core 1.2.10 API) + @@ -102,7 +102,7 @@ extends ObjectA generic pair of elements.- Author: -
- Jeremy Long
- Jeremy Long
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/UrlStringUtils.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/UrlStringUtils.html index dd256e6b8..06f59f6b8 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/UrlStringUtils.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/UrlStringUtils.html @@ -2,16 +2,16 @@ - + -UrlStringUtils (Dependency-Check Core 1.2.9 API) - +UrlStringUtils (Dependency-Check Core 1.2.10 API) + @@ -100,7 +100,7 @@public final class UrlStringUtils extends Object
- Author: -
- Jeremy Long
- Jeremy Long
diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/class-use/DBUtils.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/class-use/DBUtils.html index 8f6f2d644..49d31f6b1 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/class-use/DBUtils.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/class-use/DBUtils.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.utils.DBUtils (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.utils.DBUtils (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/class-use/DateUtil.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/class-use/DateUtil.html index 2786b8698..46c04f491 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/class-use/DateUtil.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/class-use/DateUtil.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.utils.DateUtil (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.utils.DateUtil (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/class-use/DependencyVersion.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/class-use/DependencyVersion.html index 3400cdd28..9a50b6449 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/class-use/DependencyVersion.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/class-use/DependencyVersion.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.utils.DependencyVersion (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.utils.DependencyVersion (Dependency-Check Core 1.2.10 API) + @@ -79,23 +79,13 @@org.owasp.dependencycheck.dependency - - -+org.owasp.dependencycheck.dependency - - - Contains the core Dependency implementation.Contains the core Dependency implementation.org.owasp.dependencycheck.utils - - -+org.owasp.dependencycheck.utils - - - Includes various utility classes such as a Settings wrapper, a Checksum utility, etc.Includes various utility classes such as a Settings wrapper, a Checksum utility, etc.Uses of Class org.owasp.dependencycheck.utils.DependencyVersionUtil (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.utils.DependencyVersionUtil (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/class-use/ExtractionUtil.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/class-use/ExtractionUtil.html index 492fc67b6..9c4acf882 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/class-use/ExtractionUtil.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/class-use/ExtractionUtil.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.utils.ExtractionUtil (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.utils.ExtractionUtil (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/class-use/Filter.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/class-use/Filter.html index a3d37513c..22d395211 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/class-use/Filter.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/class-use/Filter.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.utils.Filter (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.utils.Filter (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/class-use/NonClosingStream.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/class-use/NonClosingStream.html index 18f263606..c95ac4daf 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/class-use/NonClosingStream.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/class-use/NonClosingStream.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.utils.NonClosingStream (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.utils.NonClosingStream (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/class-use/Pair.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/class-use/Pair.html index 22bcbd046..6ef67cd8f 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/class-use/Pair.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/class-use/Pair.html @@ -2,16 +2,16 @@ - + -Uses of Class org.owasp.dependencycheck.utils.Pair (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.utils.Pair (Dependency-Check Core 1.2.10 API) + @@ -79,12 +79,7 @@org.owasp.dependencycheck.data.nvdcve - - -+org.owasp.dependencycheck.data.nvdcve - - - Contains classes used to work with the NVD CVE data.Contains classes used to work with the NVD CVE data.Uses of Class org.owasp.dependencycheck.utils.UrlStringUtils (Dependency-Check Core 1.2.9 API) - +Uses of Class org.owasp.dependencycheck.utils.UrlStringUtils (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/package-frame.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/package-frame.html index d045b22c1..5065b3588 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/package-frame.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/package-frame.html @@ -2,10 +2,10 @@ - + -org.owasp.dependencycheck.utils (Dependency-Check Core 1.2.9 API) - +org.owasp.dependencycheck.utils (Dependency-Check Core 1.2.10 API) + diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/package-summary.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/package-summary.html index 7f0b3aac3..3316867ea 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/package-summary.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/package-summary.html @@ -2,16 +2,16 @@ - + -org.owasp.dependencycheck.utils (Dependency-Check Core 1.2.9 API) - +org.owasp.dependencycheck.utils (Dependency-Check Core 1.2.10 API) + @@ -38,7 +38,7 @@@@ -168,7 +156,7 @@- Frames diff --git a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/package-tree.html b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/package-tree.html index 5ed8ce192..709646286 100644 --- a/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/package-tree.html +++ b/dependency-check-core/apidocs/org/owasp/dependencycheck/utils/package-tree.html @@ -2,16 +2,16 @@ - + -
- org.owasp.dependencycheck.data.update.xml,
- org.owasp.dependencycheck.dependency,
- org.owasp.dependencycheck.exception, -
- org.owasp.dependencycheck.jaxb.pom, -
- org.owasp.dependencycheck.jaxb.pom.generated,
- org.owasp.dependencycheck.reporting,
- org.owasp.dependencycheck.suppression, -
- org.owasp.dependencycheck.utils +
- org.owasp.dependencycheck.utils, +
- org.owasp.dependencycheck.xml.pom
- org.owasp.dependencycheck.analyzer.HintAnalyzer (implements org.owasp.dependencycheck.analyzer.Analyzer) -
- org.owasp.dependencycheck.jaxb.pom.generated.Activation -
- org.owasp.dependencycheck.jaxb.pom.generated.ActivationFile -
- org.owasp.dependencycheck.jaxb.pom.generated.ActivationOS -
- org.owasp.dependencycheck.jaxb.pom.generated.ActivationProperty
- org.apache.lucene.analysis.Analyzer (implements java.io.Closeable)
- org.owasp.dependencycheck.data.lucene.FieldAnalyzer @@ -159,24 +154,8 @@
- - org.owasp.dependencycheck.jaxb.pom.generated.Build -
- org.owasp.dependencycheck.jaxb.pom.generated.Build.Extensions -
- org.owasp.dependencycheck.jaxb.pom.generated.Build.Filters -
- org.owasp.dependencycheck.jaxb.pom.generated.Build.Plugins -
- org.owasp.dependencycheck.jaxb.pom.generated.Build.Resources -
- org.owasp.dependencycheck.jaxb.pom.generated.Build.TestResources -
- org.owasp.dependencycheck.jaxb.pom.generated.BuildBase -
- org.owasp.dependencycheck.jaxb.pom.generated.BuildBase.Filters -
- org.owasp.dependencycheck.jaxb.pom.generated.BuildBase.Plugins -
- org.owasp.dependencycheck.jaxb.pom.generated.BuildBase.Resources -
- org.owasp.dependencycheck.jaxb.pom.generated.BuildBase.TestResources
- org.owasp.dependencycheck.data.central.CentralSearch -
- org.owasp.dependencycheck.jaxb.pom.generated.CiManagement -
- org.owasp.dependencycheck.jaxb.pom.generated.CiManagement.Notifiers
- org.owasp.dependencycheck.data.nvdcve.ConnectionFactory -
- org.owasp.dependencycheck.jaxb.pom.generated.Contributor -
- org.owasp.dependencycheck.jaxb.pom.generated.Contributor.Properties -
- org.owasp.dependencycheck.jaxb.pom.generated.Contributor.Roles
- org.owasp.dependencycheck.analyzer.CPEAnalyzer (implements org.owasp.dependencycheck.analyzer.Analyzer)
- org.owasp.dependencycheck.data.cpe.CpeMemoryIndex
- org.owasp.dependencycheck.data.nvdcve.CveDB @@ -189,22 +168,14 @@
- org.owasp.dependencycheck.data.cwe.CweHandler
- org.owasp.dependencycheck.data.update.xml.NvdCve12Handler
- org.owasp.dependencycheck.data.update.xml.NvdCve20Handler +
- org.owasp.dependencycheck.xml.pom.PomHandler
- org.owasp.dependencycheck.suppression.SuppressionHandler
- org.owasp.dependencycheck.dependency.Dependency (implements java.lang.Comparable<T>, java.io.Serializable) -
- org.owasp.dependencycheck.jaxb.pom.generated.Dependency -
- org.owasp.dependencycheck.jaxb.pom.generated.Dependency.Exclusions
- org.owasp.dependencycheck.agent.DependencyCheckScanAgent -
- org.owasp.dependencycheck.jaxb.pom.generated.DependencyManagement -
- org.owasp.dependencycheck.jaxb.pom.generated.DependencyManagement.Dependencies
- org.owasp.dependencycheck.utils.DependencyVersion (implements java.lang.Comparable<T>, java.lang.Iterable<T>)
- org.owasp.dependencycheck.utils.DependencyVersionUtil -
- org.owasp.dependencycheck.jaxb.pom.generated.DeploymentRepository -
- org.owasp.dependencycheck.jaxb.pom.generated.Developer -
- org.owasp.dependencycheck.jaxb.pom.generated.Developer.Properties -
- org.owasp.dependencycheck.jaxb.pom.generated.Developer.Roles -
- org.owasp.dependencycheck.jaxb.pom.generated.DistributionManagement
- org.owasp.dependencycheck.data.update.task.DownloadTask (implements java.util.concurrent.Callable<V>)
- org.owasp.dependencycheck.data.nvdcve.DriverLoader
- org.owasp.dependencycheck.Engine @@ -212,8 +183,6 @@
- org.owasp.dependencycheck.reporting.EscapeTool
- org.owasp.dependencycheck.dependency.Evidence (implements java.lang.Comparable<T>, java.io.Serializable)
- org.owasp.dependencycheck.dependency.EvidenceCollection (implements java.lang.Iterable<T>, java.io.Serializable) -
- org.owasp.dependencycheck.jaxb.pom.generated.Exclusion -
- org.owasp.dependencycheck.jaxb.pom.generated.Extension
- org.owasp.dependencycheck.utils.ExtractionUtil
- org.owasp.dependencycheck.data.cpe.Fields
- org.owasp.dependencycheck.utils.Filter<T> @@ -232,76 +201,25 @@ -
- org.owasp.dependencycheck.jaxb.pom.generated.IssueManagement
- org.owasp.dependencycheck.analyzer.JarAnalyzer.ClassNameInformation -
- org.owasp.dependencycheck.jaxb.pom.generated.License +
- org.owasp.dependencycheck.xml.pom.License
- org.owasp.dependencycheck.data.lucene.LuceneUtils -
- org.owasp.dependencycheck.jaxb.pom.generated.MailingList -
- org.owasp.dependencycheck.jaxb.pom.generated.MailingList.OtherArchives
- org.owasp.dependencycheck.data.nexus.MavenArtifact -
- org.owasp.dependencycheck.jaxb.pom.generated.Model -
- org.owasp.dependencycheck.jaxb.pom.generated.Model.Contributors -
- org.owasp.dependencycheck.jaxb.pom.generated.Model.Dependencies -
- org.owasp.dependencycheck.jaxb.pom.generated.Model.Developers -
- org.owasp.dependencycheck.jaxb.pom.generated.Model.Licenses -
- org.owasp.dependencycheck.jaxb.pom.generated.Model.MailingLists -
- org.owasp.dependencycheck.jaxb.pom.generated.Model.Modules -
- org.owasp.dependencycheck.jaxb.pom.generated.Model.PluginRepositories -
- org.owasp.dependencycheck.jaxb.pom.generated.Model.Profiles -
- org.owasp.dependencycheck.jaxb.pom.generated.Model.Properties -
- org.owasp.dependencycheck.jaxb.pom.generated.Model.Reports -
- org.owasp.dependencycheck.jaxb.pom.generated.Model.Repositories +
- org.owasp.dependencycheck.xml.pom.Model
- org.owasp.dependencycheck.data.nexus.NexusSearch -
- org.owasp.dependencycheck.jaxb.pom.generated.Notifier -
- org.owasp.dependencycheck.jaxb.pom.generated.Notifier.Configuration
- org.owasp.dependencycheck.data.nuget.NugetPackage
- org.owasp.dependencycheck.data.update.xml.NvdCve12Handler.Element
- org.owasp.dependencycheck.data.update.xml.NvdCve20Handler.Element
- org.owasp.dependencycheck.analyzer.NvdCveAnalyzer (implements org.owasp.dependencycheck.analyzer.Analyzer)
- org.owasp.dependencycheck.data.update.NvdCveInfo
- org.owasp.dependencycheck.data.update.NvdCveUpdater (implements org.owasp.dependencycheck.data.update.CachedWebDataSource) -
- org.owasp.dependencycheck.jaxb.pom.generated.ObjectFactory -
- org.owasp.dependencycheck.jaxb.pom.generated.Organization
- org.owasp.dependencycheck.utils.Pair<L,R> -
- org.owasp.dependencycheck.jaxb.pom.generated.Parent -
- org.owasp.dependencycheck.jaxb.pom.generated.Plugin -
- org.owasp.dependencycheck.jaxb.pom.generated.Plugin.Configuration -
- org.owasp.dependencycheck.jaxb.pom.generated.Plugin.Dependencies -
- org.owasp.dependencycheck.jaxb.pom.generated.Plugin.Executions -
- org.owasp.dependencycheck.jaxb.pom.generated.Plugin.Goals -
- org.owasp.dependencycheck.jaxb.pom.generated.PluginExecution -
- org.owasp.dependencycheck.jaxb.pom.generated.PluginExecution.Configuration -
- org.owasp.dependencycheck.jaxb.pom.generated.PluginExecution.Goals -
- org.owasp.dependencycheck.jaxb.pom.generated.PluginManagement -
- org.owasp.dependencycheck.jaxb.pom.generated.PluginManagement.Plugins -
- org.owasp.dependencycheck.jaxb.pom.PomUtils -
- org.owasp.dependencycheck.jaxb.pom.generated.Prerequisites +
- org.owasp.dependencycheck.xml.pom.PomParser +
- org.owasp.dependencycheck.xml.pom.PomUtils
- org.owasp.dependencycheck.data.update.task.ProcessTask (implements java.util.concurrent.Callable<V>) -
- org.owasp.dependencycheck.jaxb.pom.generated.Profile -
- org.owasp.dependencycheck.jaxb.pom.generated.Profile.Dependencies -
- org.owasp.dependencycheck.jaxb.pom.generated.Profile.Modules -
- org.owasp.dependencycheck.jaxb.pom.generated.Profile.PluginRepositories -
- org.owasp.dependencycheck.jaxb.pom.generated.Profile.Properties -
- org.owasp.dependencycheck.jaxb.pom.generated.Profile.Reports -
- org.owasp.dependencycheck.jaxb.pom.generated.Profile.Repositories
- org.owasp.dependencycheck.suppression.PropertyType
- org.owasp.dependencycheck.dependency.Reference (implements java.lang.Comparable<T>, java.io.Serializable) -
- org.owasp.dependencycheck.jaxb.pom.generated.Relocation
- org.owasp.dependencycheck.reporting.ReportGenerator -
- org.owasp.dependencycheck.jaxb.pom.generated.Reporting -
- org.owasp.dependencycheck.jaxb.pom.generated.Reporting.Plugins -
- org.owasp.dependencycheck.jaxb.pom.generated.ReportPlugin -
- org.owasp.dependencycheck.jaxb.pom.generated.ReportPlugin.Configuration -
- org.owasp.dependencycheck.jaxb.pom.generated.ReportPlugin.ReportSets -
- org.owasp.dependencycheck.jaxb.pom.generated.ReportSet -
- org.owasp.dependencycheck.jaxb.pom.generated.ReportSet.Configuration -
- org.owasp.dependencycheck.jaxb.pom.generated.ReportSet.Reports -
- org.owasp.dependencycheck.jaxb.pom.generated.Repository -
- org.owasp.dependencycheck.jaxb.pom.generated.RepositoryPolicy -
- org.owasp.dependencycheck.jaxb.pom.generated.Resource -
- org.owasp.dependencycheck.jaxb.pom.generated.Resource.Excludes -
- org.owasp.dependencycheck.jaxb.pom.generated.Resource.Includes -
- org.owasp.dependencycheck.jaxb.pom.generated.Scm
- org.apache.lucene.search.similarities.Similarity
- org.apache.lucene.search.similarities.TFIDFSimilarity @@ -315,7 +233,6 @@
- - org.owasp.dependencycheck.jaxb.pom.generated.Site
- org.owasp.dependencycheck.data.update.StandardUpdate
- org.owasp.dependencycheck.suppression.SuppressionErrorHandler (implements org.xml.sax.ErrorHandler)
- org.owasp.dependencycheck.suppression.SuppressionParser @@ -333,6 +250,7 @@
- java.io.IOException
- org.owasp.dependencycheck.exception.NoDataException +
- org.owasp.dependencycheck.xml.pom.PomParseException
- org.owasp.dependencycheck.exception.ScanAgentException
- org.owasp.dependencycheck.suppression.SuppressionParseException
- org.owasp.dependencycheck.data.update.exception.UpdateException @@ -349,11 +267,6 @@
- org.owasp.dependencycheck.reporting.VelocityLoggerRedirect (implements org.apache.velocity.runtime.log.LogChute)
- org.owasp.dependencycheck.dependency.Vulnerability (implements java.lang.Comparable<T>, java.io.Serializable)
- org.owasp.dependencycheck.dependency.VulnerabilityComparator (implements java.util.Comparator<T>, java.io.Serializable) -
- org.xml.sax.helpers.XMLFilterImpl (implements org.xml.sax.ContentHandler, org.xml.sax.DTDHandler, org.xml.sax.EntityResolver, org.xml.sax.ErrorHandler, org.xml.sax.XMLFilter)
-
-
-
- org.owasp.dependencycheck.jaxb.pom.MavenNamespaceFilter -
- org.owasp.dependencycheck.data.nuget.XPathNuspecParser (implements org.owasp.dependencycheck.data.nuget.NuspecParser)
diff --git a/dependency-check-core/apidocs/package-list b/dependency-check-core/apidocs/package-list
index 32600e0a1..5aaee1d78 100644
--- a/dependency-check-core/apidocs/package-list
+++ b/dependency-check-core/apidocs/package-list
@@ -15,8 +15,7 @@ org.owasp.dependencycheck.data.update.task
org.owasp.dependencycheck.data.update.xml
org.owasp.dependencycheck.dependency
org.owasp.dependencycheck.exception
-org.owasp.dependencycheck.jaxb.pom
-org.owasp.dependencycheck.jaxb.pom.generated
org.owasp.dependencycheck.reporting
org.owasp.dependencycheck.suppression
org.owasp.dependencycheck.utils
+org.owasp.dependencycheck.xml.pom
diff --git a/dependency-check-core/apidocs/serialized-form.html b/dependency-check-core/apidocs/serialized-form.html
index e808d0908..684fa9494 100644
--- a/dependency-check-core/apidocs/serialized-form.html
+++ b/dependency-check-core/apidocs/serialized-form.html
@@ -2,16 +2,16 @@
-
+
- -
+
Package org.owasp.dependencycheck.xml.pom
+-
+
-
+
+
+
Class org.owasp.dependencycheck.xml.pom.PomParseException extends IOException implements Serializable
+
+
-
+
+
+
- - + / @@ -67,9 +67,9 @@ -
- | Last Published: 2015-03-06 +
- | Last Published: 2015-04-12
- - Version: 1.2.9 + Version: 1.2.10 @@ -242,10 +242,10 @@
org.owasp.dependencycheck.utils Class Hierarchy (Dependency-Check Core 1.2.9 API) - +org.owasp.dependencycheck.utils Class Hierarchy (Dependency-Check Core 1.2.10 API) + @@ -38,7 +38,7 @@-Dependency-Check Core 1.2.9 API
+Dependency-Check Core 1.2.10 API
+@@ -77,230 +77,137 @@
org.owasp.dependencycheck - - -+org.owasp.dependencycheck - - - Includes the main entry point (i.e.Includes the main entry point for dependency-check.org.owasp.dependencycheck.agent - - -+org.owasp.dependencycheck.agent - - - The agent package holds an agent API that can be used by other applications that have information about dependencies; - but would rather implement something in their code directly rather then spawn a process to run the entire - dependency-check engine.The agent package holds an agent API that can be used by other applications that have information about dependencies; but would + rather implement something in their code directly rather then spawn a process to run the entire dependency-check engine.org.owasp.dependencycheck.analyzer - - -+org.owasp.dependencycheck.analyzer - - - Analyzers are used to inspect the identified dependencies, collect Evidence, - and process the dependencies.Analyzers are used to inspect the identified dependencies, collect Evidence, and process the dependencies.org.owasp.dependencycheck.analyzer.exception - - -+org.owasp.dependencycheck.analyzer.exception - -A collection of exception classes used within the analyzers.org.owasp.dependencycheck.data.central - - -+org.owasp.dependencycheck.data.central - -Contains classes related to searching Maven Central.
+ + These are used to abstract Maven Central searching away from OWASP Dependency Check so they can be reused elsewhere.org.owasp.dependencycheck.data.cpe - - -+org.owasp.dependencycheck.data.cpe - - - Contains classes for working with the CPE Lucene Index.Contains classes for working with the CPE Lucene Index.org.owasp.dependencycheck.data.cwe - - -+org.owasp.dependencycheck.data.cwe - - - Contains classes for working with the CWE Database.Contains classes for working with the CWE Database.org.owasp.dependencycheck.data.lucene - - -+org.owasp.dependencycheck.data.lucene - - - Contains classes used to work with the Lucene Indexes.Contains classes used to work with the Lucene Indexes.org.owasp.dependencycheck.data.nexus - - -+org.owasp.dependencycheck.data.nexus - -Contains classes related to searching a Nexus repository.
+ + These are used to abstract Nexus searching away from OWASP Dependency Check so they can be reused elsewhere.org.owasp.dependencycheck.data.nuget - - -+org.owasp.dependencycheck.data.nuget - -Contains classes related to parsing Nuget related files
+ These are used to abstract away Nuget-related handling from Dependency Check so they can be used elsewhere.org.owasp.dependencycheck.data.nvdcve - - -+org.owasp.dependencycheck.data.nvdcve - - - Contains classes used to work with the NVD CVE data.Contains classes used to work with the NVD CVE data.org.owasp.dependencycheck.data.update - - -+org.owasp.dependencycheck.data.update - -Contains classes used to update the data stores.
+ + The UpdateService will load, any correctly defined CachedWebDataSource(s) and call update() on them.org.owasp.dependencycheck.data.update.exception - - -+org.owasp.dependencycheck.data.update.exception - -A collection of exception classes used within the application.org.owasp.dependencycheck.data.update.task - - -+org.owasp.dependencycheck.data.update.task - -A collection of callable/runnable tasks used to speed up the update process.org.owasp.dependencycheck.data.update.xml - - -+org.owasp.dependencycheck.data.nvdcve.xml - -Contains classes used to parse the NVD CVE XML file.
+ + The basic use is that the Importer is called to import an NVD CVE file.org.owasp.dependencycheck.dependency - - -+org.owasp.dependencycheck.dependency - - - Contains the core Dependency implementation.Contains the core Dependency implementation.org.owasp.dependencycheck.exception - - -+org.owasp.dependencycheck.exception - -A collection of exception classes used within the application.- -org.owasp.dependencycheck.jaxb.pom -- -- --org.owasp.dependencycheck.analyzer.pom - - - This package contains utility classes used to parse pom.xml files.- -org.owasp.dependencycheck.jaxb.pom.generated -org.owasp.dependencycheck.reporting - - -+org.owasp.dependencycheck.reporting - - - Contains classes used to generate reports.Contains classes used to generate reports.org.owasp.dependencycheck.suppression - - -+org.owasp.dependencycheck.suppression - - - Contains classes used to suppress findings.Contains classes used to suppress findings.org.owasp.dependencycheck.utils - +- -+org.owasp.dependencycheck.utils - - - Includes various utility classes such as a Settings wrapper, a Checksum utility, etc.Includes various utility classes such as a Settings wrapper, a Checksum utility, etc.++ diff --git a/dependency-check-core/apidocs/overview-tree.html b/dependency-check-core/apidocs/overview-tree.html index 2595d662b..bdaef10be 100644 --- a/dependency-check-core/apidocs/overview-tree.html +++ b/dependency-check-core/apidocs/overview-tree.html @@ -2,16 +2,16 @@ - + -org.owasp.dependencycheck.xml.pom ++ This package contains classes used to parse pom.xml files.Class Hierarchy (Dependency-Check Core 1.2.9 API) - +Class Hierarchy (Dependency-Check Core 1.2.10 API) + @@ -84,11 +84,10 @@@@ -121,10 +120,6 @@diff --git a/dependency-check-core/checkstyle.html b/dependency-check-core/checkstyle.html index c03bf6302..2a9716104 100644 --- a/dependency-check-core/checkstyle.html +++ b/dependency-check-core/checkstyle.html @@ -1,13 +1,13 @@ - +Serialized Form (Dependency-Check Core 1.2.9 API) - +Serialized Form (Dependency-Check Core 1.2.10 API) + @@ -666,6 +666,16 @@ +dependency-check-core - Checkstyle Results @@ -19,7 +19,7 @@ - + @@ -42,7 +42,7 @@-dependency-check-core
+
@@ -54,7 +54,7 @@Warnings Errors - 232 +198 0 0 -6 28 Details
@@ -257,23 +257,66 @@+Line Total number of methods is 70 (max allowed is 40). -60 Total number of methods is 72 (max allowed is 40). +60 ++ Expected an @return tag. +971 +org/owasp/dependencycheck/analyzer/AssemblyAnalyzer.java
+
+ +Violation +Message +Line + +Inner assignments should be avoided. +124 + Must have at least one statement. +239 ++org/owasp/dependencycheck/analyzer/JarAnalyzer.java
+Violation Message Line Inner assignments should be avoided. -124 Unused import - java.io.FileInputStream. +22 Must have at least one statement. -239 Unused import - java.io.FileNotFoundException. +23 ++ +Unused import - java.io.UnsupportedEncodingException. +30 + +Unused import - javax.xml.transform.sax.SAXSource. +49 + +Unused import - org.owasp.dependencycheck.utils.NonClosingStream. +60 + +Unused import - org.owasp.dependencycheck.xml.pom.PomParser. +62 + +Unused import - org.xml.sax.InputSource. +63 + Variable 'model' should be declared final. +423 org/owasp/dependencycheck/analyzer/JavaScriptAnalyzer.java
@@ -290,6 +333,17 @@
Variable 'sb' should be declared final. 116 ++org/owasp/dependencycheck/data/nexus/NexusSearch.java
++
+ +Violation +Message +Line + Variable 'url' should be declared final. +173 org/owasp/dependencycheck/dependency/Dependency.java
@@ -299,7 +353,90 @@ Total number of methods is 56 (max allowed is 40). -43
43
++org/owasp/dependencycheck/xml/pom/License.java
++
+ +Violation +Message +Line + +Line does not match expected header line of '^ \* This file is part of dependency-check-(ant|core|cli|maven)\.\s*$'. +2 + +Missing a Javadoc comment. +24 + +Expected @param tag for 'name'. +33 + Expected @param tag for 'url'. +33 ++org/owasp/dependencycheck/xml/pom/PomHandler.java
++
+ +Violation +Message +Line + +Must have at least one statement. +158 + Must have at least one statement. +169 ++org/owasp/dependencycheck/xml/pom/PomParseException.java
++
+ +Violation +Message +Line + Using the '.*' form of import should be avoided - org.owasp.dependencycheck.suppression.*. +20 ++org/owasp/dependencycheck/xml/pom/PomParser.java
++
+ +Violation +Message +Line + +Unused import - java.util.List. +27 + +Unable to get class information for @throws tag 'SuppressionParseException'. +80 + +Unused @throws tag for 'SuppressionParseException'. +80 + Expected @throws tag for 'PomParseException'. +82 +org/owasp/dependencycheck/xml/pom/PomUtils.java
++
+ +Violation +Message +Line + Variable 'parser' should be declared final. +58
en-us ©2012 - 2015 OWASP - -
File: 232, - Errors: 6, + <title>File: 198, + Errors: 28, Warnings: 0, Infos: 0 @@ -83,7 +83,7 @@ under the License. 0- 0 + 1 @@ -113,6 +113,20 @@ under the License. +0 ++ + org/owasp/dependencycheck/xml/pom/License.java + ++ 0 + ++ 0 + ++ 4 + @@ -155,20 +169,6 @@ under the License. 0 -- - org/owasp/dependencycheck/jaxb/pom/generated/Dependency.java - -- 0 - -- 0 - -- 0 - @@ -183,20 +183,6 @@ under the License. 1 -- - org/owasp/dependencycheck/jaxb/pom/generated/IssueManagement.java - -- 0 - -- 0 - -- 0 - @@ -295,20 +281,6 @@ under the License. 0 -- - org/owasp/dependencycheck/jaxb/pom/generated/Parent.java - -- 0 - -- 0 - -- 0 - @@ -337,20 +309,6 @@ under the License. 0 -- - org/owasp/dependencycheck/jaxb/pom/generated/RepositoryPolicy.java - -- 0 - -- 0 - -- 0 - @@ -407,34 +365,6 @@ under the License. 0 -- -- org/owasp/dependencycheck/jaxb/pom/generated/Exclusion.java - -- 0 - -- 0 - -- 0 - -- - org/owasp/dependencycheck/jaxb/pom/generated/Build.java - -- 0 - -- 0 - -- 0 - @@ -449,20 +379,6 @@ under the License. 0 -- - org/owasp/dependencycheck/jaxb/pom/generated/Relocation.java - -- 0 - -- 0 - -- 0 - @@ -480,7 +396,7 @@ under the License. - org/owasp/dependencycheck/jaxb/pom/generated/Developer.java + org/owasp/dependencycheck/xml/pom/PomParser.java 0 @@ -489,7 +405,7 @@ under the License. 0 - 0 + 4 @@ -508,7 +424,7 @@ under the License. - org/owasp/dependencycheck/jaxb/pom/generated/Notifier.java + org/owasp/dependencycheck/data/cpe/CpeMemoryIndex.java 0 @@ -533,20 +449,6 @@ under the License. 0 -- - org/owasp/dependencycheck/data/cpe/CpeMemoryIndex.java - -- 0 - -- 0 - -- 0 - @@ -603,6 +505,20 @@ under the License. 0 ++ + org/owasp/dependencycheck/xml/pom/PomParseException.java + ++ 0 + ++ 0 + ++ 1 + @@ -645,20 +561,6 @@ under the License. 0 -- - org/owasp/dependencycheck/jaxb/pom/generated/CiManagement.java - -- 0 - -- 0 - -- 0 - @@ -785,20 +687,6 @@ under the License. 0 -- - org/owasp/dependencycheck/jaxb/pom/generated/Reporting.java - -- 0 - -- 0 - -- 0 - @@ -911,20 +799,6 @@ under the License. 0 -- - org/owasp/dependencycheck/jaxb/pom/generated/Prerequisites.java - -- 0 - -- 0 - -- 0 - @@ -995,20 +869,6 @@ under the License. 0 -- - org/owasp/dependencycheck/jaxb/pom/generated/PluginManagement.java - -- 0 - -- 0 - -- 0 - @@ -1107,20 +967,6 @@ under the License. 0 -- - org/owasp/dependencycheck/jaxb/pom/PomUtils.java - -- 0 - -- 0 - -- 0 - @@ -1163,6 +1009,20 @@ under the License. 0 ++ + org/owasp/dependencycheck/xml/pom/PomUtils.java + ++ 0 + ++ 0 + ++ 1 + @@ -1233,34 +1093,6 @@ under the License. 0 -- -- org/owasp/dependencycheck/jaxb/pom/generated/Profile.java - -- 0 - -- 0 - -- 0 - -- - org/owasp/dependencycheck/jaxb/pom/generated/ActivationFile.java - -- 0 - -- 0 - -- 0 - @@ -1275,34 +1107,6 @@ under the License. 0 -- -- dependency-check-maven/target/maven-plugin-plugin-sources/org.apache.maven.plugins/maven-site-plugin/3.4/sources/site-plugin_de.properties - -- 0 - -- 0 - -- 0 - -- - org/owasp/dependencycheck/jaxb/pom/generated/Organization.java - -- 0 - -- 0 - -- 0 - @@ -1317,6 +1121,20 @@ under the License. 0 ++ + dependency-check-maven/target/maven-plugin-plugin-sources/org.apache.maven.plugins/maven-site-plugin/3.4/sources/site-plugin_de.properties + ++ 0 + ++ 0 + ++ 0 + @@ -1446,7 +1264,7 @@ under the License. - dependency-check-maven/target/maven-plugin-plugin-sources/org.apache.maven.plugins/maven-site-plugin/3.4/sources/site-plugin_da.properties + org/owasp/dependencycheck/exception/NoDataException.java 0 @@ -1460,7 +1278,7 @@ under the License. - org/owasp/dependencycheck/exception/NoDataException.java + dependency-check-maven/target/maven-plugin-plugin-sources/org.apache.maven.plugins/maven-site-plugin/3.4/sources/site-plugin_da.properties 0 @@ -1502,7 +1320,7 @@ under the License. - org/owasp/dependencycheck/jaxb/pom/generated/DistributionManagement.java + org/owasp/dependencycheck/xml/pom/PomHandler.java 0 @@ -1511,7 +1329,7 @@ under the License. 0 - 0 + 2 @@ -1555,34 +1373,6 @@ under the License. -0 -- -- org/owasp/dependencycheck/jaxb/pom/generated/MailingList.java - -- 0 - -- 0 - -- 0 - -- - org/owasp/dependencycheck/jaxb/pom/package-info.java - -- 0 - -- 0 - -- 0 - @@ -1667,20 +1457,6 @@ under the License. 0 -- - dependency-check-maven/target/classes/log.properties - -- 0 - -- 0 - -- 0 - @@ -1712,7 +1488,7 @@ under the License. - dependency-check-maven/target/generated-classes/cobertura/mojo.properties + dependency-check-maven/target/classes/log.properties 0 @@ -1737,6 +1513,20 @@ under the License. 0 ++ + dependency-check-maven/target/generated-classes/cobertura/mojo.properties + ++ 0 + ++ 0 + ++ 0 + @@ -1749,21 +1539,7 @@ under the License. 0 - 0 - -- - org/owasp/dependencycheck/jaxb/pom/generated/Plugin.java - -- 0 - -- 0 - -- 0 + 8 @@ -1779,34 +1555,6 @@ under the License. -0 -- -- org/owasp/dependencycheck/jaxb/pom/generated/BuildBase.java - -- 0 - -- 0 - -- 0 - -- - org/owasp/dependencycheck/jaxb/pom/generated/PluginExecution.java - -- 0 - -- 0 - -- 0 - @@ -1936,7 +1684,7 @@ under the License. - org/owasp/dependencycheck/jaxb/pom/generated/ActivationProperty.java + org/owasp/dependencycheck/xml/pom/Model.java 0 @@ -1975,20 +1723,6 @@ under the License. 0 -- - org/owasp/dependencycheck/jaxb/pom/generated/Model.java - -- 0 - -- 0 - -- 0 - @@ -2059,20 +1793,6 @@ under the License. 0 -- - org/owasp/dependencycheck/jaxb/pom/generated/Site.java - -- 0 - -- 0 - -- 0 - @@ -2087,20 +1807,6 @@ under the License. 0 -- - org/owasp/dependencycheck/jaxb/pom/generated/package-info.java - -- 0 - -- 0 - -- 0 - @@ -2115,20 +1821,6 @@ under the License. 0 -- - org/owasp/dependencycheck/jaxb/pom/generated/ReportSet.java - -- 0 - -- 0 - -- 0 - @@ -2185,20 +1877,6 @@ under the License. 0 -- - org/owasp/dependencycheck/jaxb/pom/generated/ObjectFactory.java - -- 0 - -- 0 - -- 0 - @@ -2241,20 +1919,6 @@ under the License. 0 -- - org/owasp/dependencycheck/jaxb/pom/generated/Repository.java - -- 0 - -- 0 - -- 0 - @@ -2325,20 +1989,6 @@ under the License. 0 -- - org/owasp/dependencycheck/jaxb/pom/generated/DeploymentRepository.java - -- 0 - -- 0 - -- 0 - @@ -2370,7 +2020,7 @@ under the License. - dependency-check-maven/target/maven-plugin-plugin-sources/org.apache.maven.plugins/maven-site-plugin/3.4/sources/site-plugin_tr.properties + org/owasp/dependencycheck/analyzer/FalsePositiveAnalyzer.java 0 @@ -2384,7 +2034,7 @@ under the License. - org/owasp/dependencycheck/analyzer/FalsePositiveAnalyzer.java + dependency-check-maven/target/maven-plugin-plugin-sources/org.apache.maven.plugins/maven-site-plugin/3.4/sources/site-plugin_tr.properties 0 @@ -2437,20 +2087,6 @@ under the License. 0 -- - org/owasp/dependencycheck/jaxb/pom/generated/Contributor.java - -- 0 - -- 0 - -- 0 - @@ -2507,20 +2143,6 @@ under the License. 0 -- - org/owasp/dependencycheck/jaxb/pom/generated/Scm.java - -- 0 - -- 0 - -- 0 - @@ -2535,20 +2157,6 @@ under the License. 0 -- - org/owasp/dependencycheck/jaxb/pom/generated/ActivationOS.java - -- 0 - -- 0 - -- 0 - @@ -2605,6 +2213,20 @@ under the License. 0 ++ + org/owasp/dependencycheck/xml/pom/package-info.java + ++ 0 + ++ 0 + ++ 0 + @@ -2706,7 +2328,7 @@ under the License. - dependency-check-maven/target/maven-plugin-plugin-sources/org.apache.maven.plugins/maven-site-plugin/3.4/sources/site-plugin_fr.properties + org/owasp/dependencycheck/suppression/SuppressionRule.java 0 @@ -2720,7 +2342,7 @@ under the License. - org/owasp/dependencycheck/suppression/SuppressionRule.java + dependency-check-maven/target/maven-plugin-plugin-sources/org.apache.maven.plugins/maven-site-plugin/3.4/sources/site-plugin_fr.properties 0 @@ -2773,20 +2395,6 @@ under the License. 0 -- - dependency-check-maven/target/maven-plugin-plugin-sources/org.apache.maven.plugins/maven-site-plugin/3.4/sources/site-plugin_cs.properties - -- 0 - -- 0 - -- 0 - @@ -2804,21 +2412,7 @@ under the License. - org/owasp/dependencycheck/jaxb/pom/generated/DependencyManagement.java - -- 0 - -- 0 - -- 0 - -- -- org/owasp/dependencycheck/jaxb/pom/generated/ReportPlugin.java + dependency-check-maven/target/maven-plugin-plugin-sources/org.apache.maven.plugins/maven-site-plugin/3.4/sources/site-plugin_cs.properties 0 @@ -2871,20 +2465,6 @@ under the License. 0 -- - org/owasp/dependencycheck/jaxb/pom/generated/Extension.java - -- 0 - -- 0 - -- 0 - @@ -2955,20 +2535,6 @@ under the License. 0 -- - org/owasp/dependencycheck/jaxb/pom/generated/License.java - -- 0 - -- 0 - -- 0 - @@ -3025,20 +2591,6 @@ under the License. 0 -- - org/owasp/dependencycheck/jaxb/pom/MavenNamespaceFilter.java - -- 0 - -- 0 - -- 0 - @@ -3079,7 +2631,7 @@ under the License. 0 - 1 + 2 @@ -3221,20 +2773,6 @@ under the License. -0 -- - dependency-check-maven/target/maven-plugin-plugin-sources/org.apache.maven.plugins/maven-site-plugin/3.4/sources/site-plugin_no.properties - -- 0 - -- 0 - -- 0 - @@ -3252,21 +2790,7 @@ under the License. - org/owasp/dependencycheck/jaxb/pom/generated/Resource.java - -- 0 - -- 0 - -- 0 - -- - org/owasp/dependencycheck/jaxb/pom/generated/Activation.java + dependency-check-maven/target/maven-plugin-plugin-sources/org.apache.maven.plugins/maven-site-plugin/3.4/sources/site-plugin_no.properties 0 diff --git a/dependency-check-core/cobertura/frame-packages.html b/dependency-check-core/cobertura/frame-packages.html index 7b1496335..4b41888c1 100644 --- a/dependency-check-core/cobertura/frame-packages.html +++ b/dependency-check-core/cobertura/frame-packages.html @@ -64,12 +64,6 @@ org.owasp.dependencycheck.exception - -org.owasp.dependencycheck.jaxb.pom -- -org.owasp.dependencycheck.jaxb.pom.generated -org.owasp.dependencycheck.reporting @@ -78,6 +72,9 @@ org.owasp.dependencycheck.utils + diff --git a/dependency-check-core/cobertura/frame-sourcefiles-org.owasp.dependencycheck.analyzer.html b/dependency-check-core/cobertura/frame-sourcefiles-org.owasp.dependencycheck.analyzer.html index 7ee707e77..457bf785b 100644 --- a/dependency-check-core/cobertura/frame-sourcefiles-org.owasp.dependencycheck.analyzer.html +++ b/dependency-check-core/cobertura/frame-sourcefiles-org.owasp.dependencycheck.analyzer.html @@ -42,7 +42,7 @@ org.owasp.dependencycheck.analyzerorg.owasp.dependencycheck.xml.pom +CPEAnalyzer (73%) - CentralAnalyzer (26%) +CentralAnalyzer (25%) CpeSuppressionAnalyzer (90%) @@ -63,13 +63,13 @@ org.owasp.dependencycheck.analyzerHintAnalyzer (78%) - JarAnalyzer (59%) +JarAnalyzer (63%) JavaScriptAnalyzer (29%) - NexusAnalyzer (20%) +NexusAnalyzer (18%) NuspecAnalyzer (22%) diff --git a/dependency-check-core/cobertura/frame-sourcefiles-org.owasp.dependencycheck.dependency.html b/dependency-check-core/cobertura/frame-sourcefiles-org.owasp.dependencycheck.dependency.html index 8e93bc145..8a33cb245 100644 --- a/dependency-check-core/cobertura/frame-sourcefiles-org.owasp.dependencycheck.dependency.html +++ b/dependency-check-core/cobertura/frame-sourcefiles-org.owasp.dependencycheck.dependency.html @@ -21,7 +21,7 @@ org.owasp.dependencycheck.dependencyDependency (58%) - Evidence (60%) +Evidence (65%) EvidenceCollection (73%) diff --git a/dependency-check-core/cobertura/frame-sourcefiles-org.owasp.dependencycheck.utils.html b/dependency-check-core/cobertura/frame-sourcefiles-org.owasp.dependencycheck.utils.html index 847d73701..a5ca6471d 100644 --- a/dependency-check-core/cobertura/frame-sourcefiles-org.owasp.dependencycheck.utils.html +++ b/dependency-check-core/cobertura/frame-sourcefiles-org.owasp.dependencycheck.utils.html @@ -33,7 +33,7 @@ org.owasp.dependencycheck.utilsFilter (92%) - NonClosingStream (100%) +NonClosingStream (0%) Pair (42%) diff --git a/dependency-check-core/cobertura/frame-sourcefiles-org.owasp.dependencycheck.xml.pom.html b/dependency-check-core/cobertura/frame-sourcefiles-org.owasp.dependencycheck.xml.pom.html new file mode 100644 index 000000000..f3be1c877 --- /dev/null +++ b/dependency-check-core/cobertura/frame-sourcefiles-org.owasp.dependencycheck.xml.pom.html @@ -0,0 +1,38 @@ + + + + +Coverage Report Classes + + + ++org.owasp.dependencycheck.xml.pom +
++Classes
++ +
+ + diff --git a/dependency-check-core/cobertura/frame-sourcefiles.html b/dependency-check-core/cobertura/frame-sourcefiles.html index 4fec32827..2add37856 100644 --- a/dependency-check-core/cobertura/frame-sourcefiles.html +++ b/dependency-check-core/cobertura/frame-sourcefiles.html @@ -27,18 +27,6 @@ All Packages+ +License (0%) ++ +Model (87%) ++ +PomHandler (77%) ++ +PomParseException (0%) ++ +PomParser (50%) ++ + +PomUtils (14%) +AbstractTokenizingFilter (100%) - -Activation (6%) -- -ActivationFile (0%) -- -ActivationOS (0%) -- -ActivationProperty (14%) -AlphaNumericTokenizer (60%) @@ -63,36 +51,24 @@ All Packages AssemblyAnalyzer (67%) - -Build (4%) -- -BuildBase (7%) -CPEAnalyzer (73%) CachedWebDataSource (N/A) - CentralAnalyzer (26%) +CentralAnalyzer (25%) CentralSearch (83%) - -CiManagement (0%) -Confidence (100%) ConnectionFactory (42%) - -Contributor (0%) -CorruptDatabaseException (0%) @@ -126,18 +102,12 @@ All Packages Dependency (58%) - -Dependency (9%) -DependencyBundlingAnalyzer (41%) DependencyCheckScanAgent (0%) - -DependencyManagement (0%) -DependencySimilarity (0%) @@ -147,15 +117,6 @@ All Packages DependencyVersionUtil (88%) - -DeploymentRepository (0%) -- -Developer (0%) -- -DistributionManagement (0%) -DownloadTask (52%) @@ -177,18 +138,12 @@ All Packages EscapeTool (0%) - Evidence (60%) +Evidence (65%) EvidenceCollection (73%) - -Exclusion (14%) -- -Extension (0%) -ExtractionUtil (0%) @@ -225,34 +180,25 @@ All Packages InvalidDataException (0%) - -IssueManagement (0%) -- JarAnalyzer (59%) +JarAnalyzer (63%) JavaScriptAnalyzer (29%) - License (0%) +License (0%) LuceneUtils (88%) - -MailingList (0%) -MavenArtifact (52%) - MavenNamespaceFilter (15%) +Model (87%) - -Model (8%) -- NexusAnalyzer (20%) +NexusAnalyzer (18%) NexusSearch (0%) @@ -261,10 +207,7 @@ All PackagesNoDataException (0%) - -NonClosingStream (100%) -- Notifier (0%) +NonClosingStream (0%) NugetPackage (58%) @@ -294,81 +237,39 @@ All PackagesNvdCveUpdater (0%) - -ObjectFactory (0%) -- -Organization (0%) -Pair (42%) - Parent (30%) +PomHandler (77%) - Plugin (8%) +PomParseException (0%) - PluginExecution (16%) +PomParser (50%) - -PluginManagement (0%) -- -PomUtils (15%) -- Prerequisites (0%) +PomUtils (14%) ProcessTask (0%) - -Profile (4%) -PropertyType (70%) Reference (38%) - -Relocation (0%) -ReportGenerator (0%) - -ReportPlugin (10%) -- -ReportSet (0%) -- -Reporting (20%) -- -Repository (0%) -- -RepositoryPolicy (0%) -- -Resource (0%) -ScanAgentException (0%) - -Scm (7%) -SearchFieldAnalyzer (100%) - -Site (0%) -StandardUpdate (0%) @@ -422,9 +323,6 @@ All Packages XPathNuspecParser (94%) - diff --git a/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.agent.html b/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.agent.html index f5812a606..d37783c65 100644 --- a/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.agent.html +++ b/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.agent.html @@ -16,7 +16,7 @@package-info (N/A) -
- + diff --git a/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.analyzer.exception.html b/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.analyzer.exception.html index bebf6edc2..d043cf23d 100644 --- a/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.analyzer.exception.html +++ b/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.analyzer.exception.html @@ -39,6 +39,6 @@ var classTable = new SortableTable(document.getElementById("classResults"), ["String", "Percentage", "Percentage", "FormattedNumber"]); classTable.sort(0); - + diff --git a/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.analyzer.html b/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.analyzer.html index 3ed602ef7..03e4cae13 100644 --- a/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.analyzer.html +++ b/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.analyzer.html @@ -16,7 +16,7 @@Package # Classes Line Coverage Branch Coverage Complexity org.owasp.dependencycheck.agent 1 0% 0% 1.8571428571428572;1.857 org.owasp.dependencycheck.agent 1 0% 0% 1.8472222222222223;1.847
@@ -49,7 +49,7 @@ packageTable.sort(0);Package # Classes Line Coverage Branch Coverage Complexity org.owasp.dependencycheck.analyzer 25 54% 41% 5.037837837837838;5.038 org.owasp.dependencycheck.analyzer 25 55% 42% 4.983695652173913;4.984 org.owasp.dependencycheck.analyzer.exception 2 12% N/A 1.0;1 CPEAnalyzer$IdentifierConfidence 100% N/A 4.592592592592593;4.593 CPEAnalyzer$IdentifierMatch 38% 16% 4.592592592592593;4.593 CentralAnalyzer 26% 13% 3.625;3.625 CentralAnalyzer 25% 13% 3.625;3.625 CpeSuppressionAnalyzer 90% 66% 2.3333333333333335;2.333 HintAnalyzer 78% 54% 4.666666666666667;4.667 JarAnalyzer 58% 50% 7.393939393939394;7.394 JarAnalyzer$ClassNameInformation 80% 80% 7.393939393939394;7.394 JarAnalyzer 62% 50% 7.15625;7.156 JarAnalyzer$ClassNameInformation 80% 80% 7.15625;7.156 JavaScriptAnalyzer 29% 0% 2.0;2 NexusAnalyzer 20% 4% 3.375;3.375 NexusAnalyzer 18% 4% 3.375;3.375 NuspecAnalyzer 22% 0% 2.6666666666666665;2.667
- + diff --git a/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.data.nuget.html b/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.data.nuget.html index 250310a96..e3efbaed6 100644 --- a/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.data.nuget.html +++ b/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.data.nuget.html @@ -43,6 +43,6 @@ var classTable = new SortableTable(document.getElementById("classResults"), ["String", "Percentage", "Percentage", "FormattedNumber"]); classTable.sort(0); - + diff --git a/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.data.nvdcve.html b/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.data.nvdcve.html index ff9f59652..982ef79e2 100644 --- a/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.data.nvdcve.html +++ b/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.data.nvdcve.html @@ -52,6 +52,6 @@ var classTable = new SortableTable(document.getElementById("classResults"), ["String", "Percentage", "Percentage", "FormattedNumber"]); classTable.sort(0); - + diff --git a/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.data.update.exception.html b/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.data.update.exception.html index 447f76890..393c899cb 100644 --- a/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.data.update.exception.html +++ b/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.data.update.exception.html @@ -39,6 +39,6 @@ var classTable = new SortableTable(document.getElementById("classResults"), ["String", "Percentage", "Percentage", "FormattedNumber"]); classTable.sort(0); - + diff --git a/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.data.update.html b/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.data.update.html index 2dac6ef53..8f39fd7f9 100644 --- a/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.data.update.html +++ b/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.data.update.html @@ -52,6 +52,6 @@ var classTable = new SortableTable(document.getElementById("classResults"), ["String", "Percentage", "Percentage", "FormattedNumber"]); classTable.sort(0); - + diff --git a/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.data.update.task.html b/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.data.update.task.html index 1ee0ba837..67549c4aa 100644 --- a/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.data.update.task.html +++ b/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.data.update.task.html @@ -39,6 +39,6 @@ var classTable = new SortableTable(document.getElementById("classResults"), ["String", "Percentage", "Percentage", "FormattedNumber"]); classTable.sort(0); - + diff --git a/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.data.update.xml.html b/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.data.update.xml.html index 9cf42440c..5b4f72dd0 100644 --- a/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.data.update.xml.html +++ b/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.data.update.xml.html @@ -41,6 +41,6 @@ var classTable = new SortableTable(document.getElementById("classResults"), ["String", "Percentage", "Percentage", "FormattedNumber"]); classTable.sort(0); - + diff --git a/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.dependency.html b/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.dependency.html index 82d08a178..a71494aa3 100644 --- a/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.dependency.html +++ b/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.dependency.html @@ -16,7 +16,7 @@Package # Classes Line Coverage Branch Coverage Complexity org.owasp.dependencycheck.data.nexus 2 21% 7% 2.388888888888889;2.389 org.owasp.dependencycheck.data.nexus 2 20% 7% 2.388888888888889;2.389
- + diff --git a/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.exception.html b/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.exception.html index e9b4eed26..e19e89027 100644 --- a/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.exception.html +++ b/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.exception.html @@ -39,6 +39,6 @@ var classTable = new SortableTable(document.getElementById("classResults"), ["String", "Percentage", "Percentage", "FormattedNumber"]); classTable.sort(0); - + diff --git a/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.html b/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.html index 05290bef0..0924f6063 100644 --- a/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.html +++ b/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.html @@ -17,27 +17,26 @@Package # Classes Line Coverage Branch Coverage Complexity org.owasp.dependencycheck.dependency 14 61% 37% 2.497297297297297;2.497 org.owasp.dependencycheck.dependency 14 62% 39% 2.489247311827957;2.489 Package # Classes Line Coverage Branch Coverage Complexity org.owasp.dependencycheck 1 52% 55% 3.25;3.25 org.owasp.dependencycheck.agent 1 0% 0% 1.8571428571428572;1.857 org.owasp.dependencycheck.analyzer 25 54% 41% 5.037837837837838;5.038 org.owasp.dependencycheck.agent 1 0% 0% 1.8472222222222223;1.847 org.owasp.dependencycheck.analyzer 25 55% 42% 4.983695652173913;4.984 org.owasp.dependencycheck.analyzer.exception 2 12% N/A 1.0;1 org.owasp.dependencycheck.data.central 1 83% 85% 9.0;9 org.owasp.dependencycheck.data.cpe 4 65% 37% 2.4516129032258065;2.452 org.owasp.dependencycheck.data.cwe 2 39% 25% 2.8;2.8 org.owasp.dependencycheck.data.lucene 8 90% 92% 2.6956521739130435;2.696 org.owasp.dependencycheck.data.nexus 2 21% 7% 2.388888888888889;2.389 org.owasp.dependencycheck.data.nexus 2 20% 7% 2.388888888888889;2.389 org.owasp.dependencycheck.data.nuget 4 70% 15% 2.238095238095238;2.238 org.owasp.dependencycheck.data.nvdcve 9 42% 45% 3.9508196721311477;3.951 org.owasp.dependencycheck.data.update 7 28% 20% 2.925;2.925 org.owasp.dependencycheck.data.update.exception 2 0% N/A 1.0;1 org.owasp.dependencycheck.data.update.task 2 34% 22% 3.5555555555555554;3.556 org.owasp.dependencycheck.data.update.xml 4 85% 88% 2.914285714285714;2.914 org.owasp.dependencycheck.dependency 14 61% 37% 2.497297297297297;2.497 org.owasp.dependencycheck.dependency 14 62% 39% 2.489247311827957;2.489 org.owasp.dependencycheck.exception 2 0% N/A 1.0;1 org.owasp.dependencycheck.jaxb.pom 2 15% 0% 8.25;8.25 org.owasp.dependencycheck.jaxb.pom.generated 87 4% 0% 1.0907407407407408;1.091 org.owasp.dependencycheck.reporting 4 0% 0% 4.25;4.25 org.owasp.dependencycheck.suppression 6 72% 62% 3.0727272727272728;3.073 org.owasp.dependencycheck.utils 11 61% 58% 3.5555555555555554;3.556 org.owasp.dependencycheck.utils 11 60% 58% 3.5555555555555554;3.556 org.owasp.dependencycheck.xml.pom 6 41% 20% 3.125;3.125
- + diff --git a/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.xml.pom.html b/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.xml.pom.html new file mode 100644 index 000000000..c7cad2ae7 --- /dev/null +++ b/dependency-check-core/cobertura/frame-summary-org.owasp.dependencycheck.xml.pom.html @@ -0,0 +1,52 @@ + + + + +Package # Classes Line Coverage Branch Coverage Complexity org.owasp.dependencycheck.utils 11 61% 58% 3.5555555555555554;3.556 org.owasp.dependencycheck.utils 11 60% 58% 3.5555555555555554;3.556 Coverage Report + + + + + + + +Coverage Report - org.owasp.dependencycheck.xml.pom
+++
+ +Package # Classes Line Coverage Branch Coverage Complexity org.owasp.dependencycheck.xml.pom 6 41% 20% 3.125;3.125 ++
+ + + + diff --git a/dependency-check-core/cobertura/frame-summary.html b/dependency-check-core/cobertura/frame-summary.html index 253a971be..6d69a5aef 100644 --- a/dependency-check-core/cobertura/frame-summary.html +++ b/dependency-check-core/cobertura/frame-summary.html @@ -16,29 +16,28 @@Classes in this Package Line Coverage Branch Coverage Complexity License 0% N/A 1.0;1 Model 87% N/A 1.0;1 PomHandler 77% 60% 5.75;5.75 PomParseException 0% N/A 1.0;1 PomParser 50% 50% 8.0;8 PomUtils 14% 1% 14.0;14
- + diff --git a/dependency-check-core/cobertura/org.owasp.dependencycheck.Engine.html b/dependency-check-core/cobertura/org.owasp.dependencycheck.Engine.html index 45e999962..41d0808e9 100644 --- a/dependency-check-core/cobertura/org.owasp.dependencycheck.Engine.html +++ b/dependency-check-core/cobertura/org.owasp.dependencycheck.Engine.html @@ -110,801 +110,799 @@Package # Classes Line Coverage Branch Coverage Complexity All Packages 200 44% 39% 2.4643874643874644;2.464 All Packages 117 51% 41% 3.250556792873051;3.251 org.owasp.dependencycheck 1 52% 55% 3.25;3.25 org.owasp.dependencycheck.agent 1 0% 0% 1.8571428571428572;1.857 org.owasp.dependencycheck.analyzer 25 54% 41% 5.037837837837838;5.038 org.owasp.dependencycheck.agent 1 0% 0% 1.8472222222222223;1.847 org.owasp.dependencycheck.analyzer 25 55% 42% 4.983695652173913;4.984 org.owasp.dependencycheck.analyzer.exception 2 12% N/A 1.0;1 org.owasp.dependencycheck.data.central 1 83% 85% 9.0;9 org.owasp.dependencycheck.data.cpe 4 65% 37% 2.4516129032258065;2.452 org.owasp.dependencycheck.data.cwe 2 39% 25% 2.8;2.8 org.owasp.dependencycheck.data.lucene 8 90% 92% 2.6956521739130435;2.696 org.owasp.dependencycheck.data.nexus 2 21% 7% 2.388888888888889;2.389 org.owasp.dependencycheck.data.nexus 2 20% 7% 2.388888888888889;2.389 org.owasp.dependencycheck.data.nuget 4 70% 15% 2.238095238095238;2.238 org.owasp.dependencycheck.data.nvdcve 9 42% 45% 3.9508196721311477;3.951 org.owasp.dependencycheck.data.update 7 28% 20% 2.925;2.925 org.owasp.dependencycheck.data.update.exception 2 0% N/A 1.0;1 org.owasp.dependencycheck.data.update.task 2 34% 22% 3.5555555555555554;3.556 org.owasp.dependencycheck.data.update.xml 4 85% 88% 2.914285714285714;2.914 org.owasp.dependencycheck.dependency 14 61% 37% 2.497297297297297;2.497 org.owasp.dependencycheck.dependency 14 62% 39% 2.489247311827957;2.489 org.owasp.dependencycheck.exception 2 0% N/A 1.0;1 org.owasp.dependencycheck.jaxb.pom 2 15% 0% 8.25;8.25 org.owasp.dependencycheck.jaxb.pom.generated 87 4% 0% 1.0907407407407408;1.091 org.owasp.dependencycheck.reporting 4 0% 0% 4.25;4.25 org.owasp.dependencycheck.suppression 6 72% 62% 3.0727272727272728;3.073 org.owasp.dependencycheck.utils 11 61% 58% 3.5555555555555554;3.556 org.owasp.dependencycheck.utils 11 60% 58% 3.5555555555555554;3.556 org.owasp.dependencycheck.xml.pom 6 41% 20% 3.125;3.125 46 /**47 * Scans files, directories, etc. for Dependencies. Analyzers are loaded and used to process the files found by the* Scans files, directories, etc. for Dependencies. Analyzers are loaded and used to process the files found by the scan, if a48 * scan, if a file is encountered and an Analyzer is associated with the file type then the file is turned into a* file is encountered and an Analyzer is associated with the file type then the file is turned into a dependency.49 * dependency.50 *50 * @author Jeremy Long51 * @author Jeremy Long <jeremy.long@owasp.org>52 */53 52 public class Engine {
53 54 /**55 /**56 * The list of dependencies.57 56 */58 1 private List<Dependency> dependencies = new ArrayList<Dependency>();
57 1 private List<Dependency> dependencies = new ArrayList<Dependency>();
58 /**59 /*** A Map of analyzers grouped by Analysis phase.60 * A Map of analyzers grouped by Analysis phase.61 */62 1 private EnumMap<AnalysisPhase, List<Analyzer>> analyzers = new EnumMap<AnalysisPhase, List<Analyzer>>(AnalysisPhase.class);
61 1 private EnumMap<AnalysisPhase, List<Analyzer>> analyzers = new EnumMap<AnalysisPhase, List<Analyzer>>(AnalysisPhase.class);
62 63 /**64 /**65 * A Map of analyzers grouped by Analysis phase.66 65 */67 1 private Set<FileTypeAnalyzer> fileTypeAnalyzers = new HashSet<FileTypeAnalyzer>();
66 1 private Set<FileTypeAnalyzer> fileTypeAnalyzers = new HashSet<FileTypeAnalyzer>();
67 68 /**69 /**70 * The ClassLoader to use when dynamically loading Analyzer and Update services.71 70 */72 1 private ClassLoader serviceClassLoader = Thread.currentThread().getContextClassLoader();71 1 private ClassLoader serviceClassLoader = Thread.currentThread().getContextClassLoader();72 /**73 /**74 * The Logger for use throughout the class.75 74 */76 1 private static final Logger LOGGER = Logger.getLogger(Engine.class.getName());
75 1 private static final Logger LOGGER = Logger.getLogger(Engine.class.getName());
76 77 /**78 /*** Creates a new Engine.79 * Creates a new Engine.*80 ** @throws DatabaseException thrown if there is an error connecting to the database81 * @throws DatabaseException thrown if there is an error connecting to the database82 */83 1 public Engine() throws DatabaseException {
84 1 initializeEngine();
85 1 }
82 1 public Engine() throws DatabaseException {
83 1 initializeEngine();
84 1 }
85 86 /**87 /**88 * Creates a new Engine.88 *89 *90 * @param serviceClassLoader a reference the class loader being used90 * @throws DatabaseException thrown if there is an error connecting to the database91 * @throws DatabaseException thrown if there is an error connecting to the database92 */93 0 public Engine(ClassLoader serviceClassLoader) throws DatabaseException {94 0 this.serviceClassLoader = serviceClassLoader;95 0 initializeEngine();96 0 }92 0 public Engine(ClassLoader serviceClassLoader) throws DatabaseException {93 0 this.serviceClassLoader = serviceClassLoader;94 0 initializeEngine();95 0 }96 97 /**98 /**99 * Creates a new Engine using the specified classloader to dynamically load Analyzer and Update services.99 *100 *101 * @throws DatabaseException thrown if there is an error connecting to the database101 */102 */103 protected final void initializeEngine() throws DatabaseException {
104 1 ConnectionFactory.initialize();
105 1 loadAnalyzers();
106 1 }
103 1 ConnectionFactory.initialize();
104 1 loadAnalyzers();
105 1 }
106 107 /**108 /**109 * Properly cleans up resources allocated during analysis.109 */110 */111 public void cleanup() {
112 0 ConnectionFactory.cleanup();113 0 }111 0 ConnectionFactory.cleanup();112 0 }113 114 /**115 /**116 * Loads the analyzers specified in the configuration file (or system properties).116 */117 */118 private void loadAnalyzers() {
119 1 if (!analyzers.isEmpty()) {120 0 return;121 118 1 if (!analyzers.isEmpty()) {119 0 return;120 }
121 10 for (AnalysisPhase phase : AnalysisPhase.values()) {
122 9 analyzers.put(phase, new ArrayList<Analyzer>());123 }
122 10 for (AnalysisPhase phase : AnalysisPhase.values()) {
123 9 analyzers.put(phase, new ArrayList<Analyzer>());124 }
125 126 1 final AnalyzerService service = new AnalyzerService(serviceClassLoader);
127 1 final Iterator<Analyzer> iterator = service.getAnalyzers();128 15 while (iterator.hasNext()) {
129 14 final Analyzer a = iterator.next();130 14 analyzers.get(a.getAnalysisPhase()).add(a);
131 14 if (a instanceof FileTypeAnalyzer) {
132 6 this.fileTypeAnalyzers.add((FileTypeAnalyzer) a);133 125 1 final AnalyzerService service = new AnalyzerService(serviceClassLoader);
126 1 final Iterator<Analyzer> iterator = service.getAnalyzers();127 15 while (iterator.hasNext()) {
128 14 final Analyzer a = iterator.next();129 14 analyzers.get(a.getAnalysisPhase()).add(a);
130 14 if (a instanceof FileTypeAnalyzer) {
131 6 this.fileTypeAnalyzers.add((FileTypeAnalyzer) a);132 }
134 14 }
135 1 }
133 14 }
134 1 }
135 136 /**137 /**138 * Get the List of the analyzers for a specific phase of analysis.138 *139 *140 * @param phase the phase to get the configured analyzers.141 140 * @return the analyzers loaded141 */142 */143 public List<Analyzer> getAnalyzers(AnalysisPhase phase) {144 0 return analyzers.get(phase);143 0 return analyzers.get(phase);144 }
145 }
146 /**147 /**148 * Get the dependencies identified.148 *149 *150 * @return the dependencies identified150 */151 */152 public List<Dependency> getDependencies() {153 10 return dependencies;152 10 return dependencies;153 }
154 }
155 /**156 /**157 * Sets the dependencies.157 *158 *159 * @param dependencies the dependencies159 */160 */161 public void setDependencies(List<Dependency> dependencies) {
162 0 this.dependencies = dependencies;163 0 }161 0 this.dependencies = dependencies;162 0 }163 164 /**165 /*** Scans an array of files or directories. If a directory is specified, it will be scanned recursively. Any dependencies166 * Scans an array of files or directories. If a directory is specified, it will be scanned recursively. Any* identified are added to the dependency collection.167 * dependencies identified are added to the dependency collection.*168 *169 * @param paths an array of paths to files or directories to be analyzed169 * @return the list of dependencies scanned170 * @return the list of dependencies scanned*171 ** @since v0.3.2.5172 * @since v0.3.2.5*/173 */174 public List<Dependency> scan(String[] paths) {175 0 final List<Dependency> deps = new ArrayList<Dependency>();176 0 for (String path : paths) {177 0 final File file = new File(path);178 0 final List<Dependency> d = scan(file);179 0 if (d != null) {180 0 deps.addAll(d);174 0 final List<Dependency> deps = new ArrayList<Dependency>();175 0 for (String path : paths) {176 0 final File file = new File(path);177 0 final List<Dependency> d = scan(file);178 0 if (d != null) {179 0 deps.addAll(d);180 }
181 }
182 }
183 0 return deps;182 0 return deps;183 }
184 }
185 /**186 /*** Scans a given file or directory. If a directory is specified, it will be scanned recursively. Any dependencies identified187 * Scans a given file or directory. If a directory is specified, it will be scanned recursively. Any dependencies* are added to the dependency collection.188 * identified are added to the dependency collection.*189 *190 * @param path the path to a file or directory to be analyzed190 * @return the list of dependencies scanned191 * @return the list of dependencies scanned*/192 */193 public List<Dependency> scan(String path) {194 0 final File file = new File(path);195 0 return scan(file);193 0 final File file = new File(path);194 0 return scan(file);195 }
196 }
197 /**198 /*** Scans an array of files or directories. If a directory is specified, it will be scanned recursively. Any dependencies199 * Scans an array of files or directories. If a directory is specified, it will be scanned recursively. Any200 * dependencies identified are added to the dependency collection.201 *202 * @param files an array of paths to files or directories to be analyzed.203 * @return the list of dependencies204 *205 * @since v0.3.2.5206 */207 public List<Dependency> scan(File[] files) {208 0 final List<Dependency> deps = new ArrayList<Dependency>();209 0 for (File file : files) {210 0 final List<Dependency> d = scan(file);211 0 if (d != null) {212 0 deps.addAll(d);213 }
214 }
215 0 return deps;216 }
217 218 /**219 * Scans a list of files or directories. If a directory is specified, it will be scanned recursively. Any220 * dependencies identified are added to the dependency collection.221 *222 * @param files a set of paths to files or directories to be analyzed223 * @return the list of dependencies scanned224 *225 * @since v0.3.2.5226 */227 public List<Dependency> scan(Set<File> files) {228 0 final List<Dependency> deps = new ArrayList<Dependency>();229 0 for (File file : files) {230 0 final List<Dependency> d = scan(file);231 0 if (d != null) {232 0 deps.addAll(d);233 }
234 0 }235 0 return deps;236 }
237 238 /**239 * Scans a list of files or directories. If a directory is specified, it will be scanned recursively. Any240 * dependencies identified are added to the dependency collection.241 *242 * @param files a set of paths to files or directories to be analyzed243 * @return the list of dependencies scanned244 *245 * @since v0.3.2.5246 */247 public List<Dependency> scan(List<File> files) {248 0 final List<Dependency> deps = new ArrayList<Dependency>();249 0 for (File file : files) {250 0 final List<Dependency> d = scan(file);251 0 if (d != null) {252 0 deps.addAll(d);253 }
254 0 }255 0 return deps;256 }
257 258 /**259 * Scans a given file or directory. If a directory is specified, it will be scanned recursively. Any dependencies260 * identified are added to the dependency collection.261 200 *262 * @param file the path to a file or directory to be analyzed263 201 * @param files an array of paths to files or directories to be analyzed.202 * @return the list of dependencies203 *204 * @since v0.3.2.5205 */206 public List<Dependency> scan(File[] files) {207 0 final List<Dependency> deps = new ArrayList<Dependency>();208 0 for (File file : files) {209 0 final List<Dependency> d = scan(file);210 0 if (d != null) {211 0 deps.addAll(d);212 }
213 }
214 0 return deps;215 }
216 217 /**218 * Scans a list of files or directories. If a directory is specified, it will be scanned recursively. Any dependencies219 * identified are added to the dependency collection.220 *221 * @param files a set of paths to files or directories to be analyzed222 * @return the list of dependencies scanned223 *224 * @since v0.3.2.5225 */226 public List<Dependency> scan(Set<File> files) {227 0 final List<Dependency> deps = new ArrayList<Dependency>();228 0 for (File file : files) {229 0 final List<Dependency> d = scan(file);230 0 if (d != null) {231 0 deps.addAll(d);232 }
233 0 }234 0 return deps;235 }
236 237 /**238 * Scans a list of files or directories. If a directory is specified, it will be scanned recursively. Any dependencies239 * identified are added to the dependency collection.240 *241 * @param files a set of paths to files or directories to be analyzed242 * @return the list of dependencies scanned243 *244 * @since v0.3.2.5245 */246 public List<Dependency> scan(List<File> files) {247 0 final List<Dependency> deps = new ArrayList<Dependency>();248 0 for (File file : files) {249 0 final List<Dependency> d = scan(file);250 0 if (d != null) {251 0 deps.addAll(d);252 }
253 0 }254 0 return deps;255 }
256 257 /**258 * Scans a given file or directory. If a directory is specified, it will be scanned recursively. Any dependencies identified259 * are added to the dependency collection.260 *261 * @param file the path to a file or directory to be analyzed262 * @return the list of dependencies scanned263 *264 *265 * @since v0.3.2.4265 *266 **/267 */268 public List<Dependency> scan(File file) {269 4 if (file.exists()) {270 4 if (file.isDirectory()) {
271 2 return scanDirectory(file);272 268 4 if (file.exists()) {269 4 if (file.isDirectory()) {
270 2 return scanDirectory(file);271 } else {273 2 final Dependency d = scanFile(file);274 2 if (d != null) {275 2 final List<Dependency> deps = new ArrayList<Dependency>();
276 2 deps.add(d);
277 2 return deps;272 2 final Dependency d = scanFile(file);273 2 if (d != null) {274 2 final List<Dependency> deps = new ArrayList<Dependency>();
275 2 deps.add(d);
276 2 return deps;277 }
278 }
}
279 }
280 }
281 0 return null;280 0 return null;281 }
282 }
283 /**284 /**285 * Recursively scans files and directories. Any dependencies identified are added to the dependency collection.285 *286 *287 * @param dir the directory to scan288 287 * @return the list of Dependency objects scanned288 */289 */290 protected List<Dependency> scanDirectory(File dir) {291 38 final File[] files = dir.listFiles();292 38 final List<Dependency> deps = new ArrayList<Dependency>();
293 38 if (files != null) {294 74 for (File f : files) {
295 36 if (f.isDirectory()) {296 36 final List<Dependency> d = scanDirectory(f);297 36 if (d != null) {298 36 deps.addAll(d);
299 290 38 final File[] files = dir.listFiles();291 38 final List<Dependency> deps = new ArrayList<Dependency>();
292 38 if (files != null) {293 74 for (File f : files) {
294 36 if (f.isDirectory()) {295 36 final List<Dependency> d = scanDirectory(f);296 36 if (d != null) {297 36 deps.addAll(d);
298 }
300 36 } else {301 0 final Dependency d = scanFile(f);302 0 deps.add(d);303 299 36 } else {300 0 final Dependency d = scanFile(f);301 0 deps.add(d);302 }
303 }
304 }
305 }
306 38 return deps;305 38 return deps;306 }
307 }
308 /**309 /**310 * Scans a specified file. If a dependency is identified it is added to the dependency collection.310 *311 *312 * @param file The file to scan313 312 * @return the scanned dependency313 */314 */315 protected Dependency scanFile(File file) {316 2 if (!file.isFile()) {317 0 final String msg = String.format("Path passed to scanFile(File) is not a file: %s. Skipping the file.", file.toString());318 0 LOGGER.log(Level.FINE, msg);319 0 return null;320 315 2 if (!file.isFile()) {316 0 final String msg = String.format("Path passed to scanFile(File) is not a file: %s. Skipping the file.", file.toString());317 0 LOGGER.log(Level.FINE, msg);318 0 return null;319 }
321 2 final String fileName = file.getName();322 2 final String extension = FileUtils.getFileExtension(fileName);323 2 Dependency dependency = null;324 2 if (extension != null) {325 2 if (supportsExtension(extension)) {326 2 dependency = new Dependency(file);327 2 dependencies.add(dependency);
320 2 final String fileName = file.getName();321 2 final String extension = FileUtils.getFileExtension(fileName);322 2 Dependency dependency = null;323 2 if (extension != null) {324 2 if (supportsExtension(extension)) {325 2 dependency = new Dependency(file);326 2 dependencies.add(dependency);
327 }
328 }
329 } else {330 0 final String msg = String.format("No file extension found on file '%s'. The file was not analyzed.", file.toString());331 0 LOGGER.log(Level.FINE, msg);332 329 0 final String msg = String.format("No file extension found on file '%s'. The file was not analyzed.", file.toString());330 0 LOGGER.log(Level.FINE, msg);331 }
333 2 return dependency;332 2 return dependency;333 }
334 }
335 /**336 /**337 * Runs the analyzers against all of the dependencies.337 */338 */339 public void analyzeDependencies() {
340 1 boolean autoUpdate = true;
341 339 1 boolean autoUpdate = true;
340 try {342 1 autoUpdate = Settings.getBoolean(Settings.KEYS.AUTO_UPDATE);
343 0 } catch (InvalidSettingException ex) {344 0 LOGGER.log(Level.FINE, "Invalid setting for auto-update; using true.");345 1 }
346 1 if (autoUpdate) {347 0 doUpdates();341 1 autoUpdate = Settings.getBoolean(Settings.KEYS.AUTO_UPDATE);
342 0 } catch (InvalidSettingException ex) {343 0 LOGGER.log(Level.FINE, "Invalid setting for auto-update; using true.");344 1 }
345 1 if (autoUpdate) {346 0 doUpdates();347 }
348 }
349 350 //need to ensure that data exists351 350 try {352 1 ensureDataExists();
353 0 } catch (NoDataException ex) {354 0 final String msg = String.format("%s%n%nUnable to continue dependency-check analysis.", ex.getMessage());355 0 LOGGER.log(Level.SEVERE, msg);356 0 LOGGER.log(Level.FINE, null, ex);357 0 return;358 0 } catch (DatabaseException ex) {359 0 final String msg = String.format("%s%n%nUnable to continue dependency-check analysis.", ex.getMessage());360 0 LOGGER.log(Level.SEVERE, msg);361 0 LOGGER.log(Level.FINE, null, ex);362 0 return;363 351 1 ensureDataExists();
352 0 } catch (NoDataException ex) {353 0 final String msg = String.format("%s%n%nUnable to continue dependency-check analysis.", ex.getMessage());354 0 LOGGER.log(Level.SEVERE, msg);355 0 LOGGER.log(Level.FINE, null, ex);356 0 return;357 0 } catch (DatabaseException ex) {358 0 final String msg = String.format("%s%n%nUnable to continue dependency-check analysis.", ex.getMessage());359 0 LOGGER.log(Level.SEVERE, msg);360 0 LOGGER.log(Level.FINE, null, ex);361 0 return;362 364 1 }
365 363 1 }
364 366 1 final String logHeader = String.format("%n"
365 1 final String logHeader = String.format("%n"
366 + "----------------------------------------------------%n"367 + "----------------------------------------------------%n"368 + "BEGIN ANALYSIS%n"369 368 + "----------------------------------------------------");370 1 LOGGER.log(Level.FINE, logHeader);
371 1 LOGGER.log(Level.INFO, "Analysis Starting");369 1 LOGGER.log(Level.FINE, logHeader);
370 1 LOGGER.log(Level.INFO, "Analysis Starting");371 372 373 // analysis phases374 10 for (AnalysisPhase phase : AnalysisPhase.values()) {
375 9 final List<Analyzer> analyzerList = analyzers.get(phase);376 373 10 for (AnalysisPhase phase : AnalysisPhase.values()) {
374 9 final List<Analyzer> analyzerList = analyzers.get(phase);375 376 9 for (Analyzer a : analyzerList) {
377 14 a = initializeAnalyzer(a);
378 377 9 for (Analyzer a : analyzerList) {
378 14 a = initializeAnalyzer(a);
379 380 /* need to create a copy of the collection because some of the381 380 * analyzers may modify it. This prevents ConcurrentModificationExceptions.382 381 * This is okay for adds/deletes because it happens per analyzer.383 382 */384 14 final String msg = String.format("Begin Analyzer '%s'", a.getName());
385 14 LOGGER.log(Level.FINE, msg);
386 14 final Set<Dependency> dependencySet = new HashSet<Dependency>();
387 14 dependencySet.addAll(dependencies);
388 14 for (Dependency d : dependencySet) {
389 28 boolean shouldAnalyze = true;
390 28 if (a instanceof FileTypeAnalyzer) {
391 12 final FileTypeAnalyzer fAnalyzer = (FileTypeAnalyzer) a;392 12 shouldAnalyze = fAnalyzer.supportsExtension(d.getFileExtension());
393 383 14 final String msg = String.format("Begin Analyzer '%s'", a.getName());
384 14 LOGGER.log(Level.FINE, msg);
385 14 final Set<Dependency> dependencySet = new HashSet<Dependency>();
386 14 dependencySet.addAll(dependencies);
387 14 for (Dependency d : dependencySet) {
388 28 boolean shouldAnalyze = true;
389 28 if (a instanceof FileTypeAnalyzer) {
390 12 final FileTypeAnalyzer fAnalyzer = (FileTypeAnalyzer) a;391 12 shouldAnalyze = fAnalyzer.supportsExtension(d.getFileExtension());
392 }
394 28 if (shouldAnalyze) {
395 20 final String msgFile = String.format("Begin Analysis of '%s'", d.getActualFilePath());
396 20 LOGGER.log(Level.FINE, msgFile);
397 393 28 if (shouldAnalyze) {
394 20 final String msgFile = String.format("Begin Analysis of '%s'", d.getActualFilePath());
395 20 LOGGER.log(Level.FINE, msgFile);
396 try {398 20 a.analyze(d, this);399 0 } catch (AnalysisException ex) {400 0 final String exMsg = String.format("An error occurred while analyzing '%s'.", d.getActualFilePath());401 0 LOGGER.log(Level.WARNING, exMsg);402 0 LOGGER.log(Level.FINE, "", ex);403 0 } catch (Throwable ex) {404 0 final String axMsg = String.format("An unexpected error occurred during analysis of '%s'", d.getActualFilePath());405 397 20 a.analyze(d, this);398 0 } catch (AnalysisException ex) {399 0 final String exMsg = String.format("An error occurred while analyzing '%s'.", d.getActualFilePath());400 0 LOGGER.log(Level.WARNING, exMsg);401 0 LOGGER.log(Level.FINE, "", ex);402 0 } catch (Throwable ex) {403 0 final String axMsg = String.format("An unexpected error occurred during analysis of '%s'", d.getActualFilePath());404 //final AnalysisException ax = new AnalysisException(axMsg, ex);406 0 LOGGER.log(Level.WARNING, axMsg);407 0 LOGGER.log(Level.FINE, "", ex);408 20 }
409 405 0 LOGGER.log(Level.WARNING, axMsg);406 0 LOGGER.log(Level.FINE, "", ex);407 20 }
408 }
410 28 }
411 14 }
412 409 28 }
410 14 }
411 }
413 10 for (AnalysisPhase phase : AnalysisPhase.values()) {
414 9 final List<Analyzer> analyzerList = analyzers.get(phase);415 412 10 for (AnalysisPhase phase : AnalysisPhase.values()) {
413 9 final List<Analyzer> analyzerList = analyzers.get(phase);414 416 9 for (Analyzer a : analyzerList) {
417 14 closeAnalyzer(a);
418 14 }
415 9 for (Analyzer a : analyzerList) {
416 14 closeAnalyzer(a);
417 14 }
418 }
419 }
420 421 1 final String logFooter = String.format("%n"
422 420 1 final String logFooter = String.format("%n"
421 + "----------------------------------------------------%n"423 422 + "END ANALYSIS%n"424 423 + "----------------------------------------------------");425 1 LOGGER.log(Level.FINE, logFooter);
426 1 LOGGER.log(Level.INFO, "Analysis Complete");427 1 }
424 1 LOGGER.log(Level.FINE, logFooter);
425 1 LOGGER.log(Level.INFO, "Analysis Complete");426 1 }
427 428 /**429 /**430 * Initializes the given analyzer.430 *431 *432 * @param analyzer the analyzer to initialize433 432 * @return the initialized analyzer433 */434 */435 protected Analyzer initializeAnalyzer(Analyzer analyzer) {436 435 try {437 14 final String msg = String.format("Initializing %s", analyzer.getName());
438 14 LOGGER.log(Level.FINE, msg);
439 14 analyzer.initialize();
440 0 } catch (Throwable ex) {441 0 final String msg = String.format("Exception occurred initializing %s.", analyzer.getName());442 0 LOGGER.log(Level.SEVERE, msg);443 0 LOGGER.log(Level.FINE, null, ex);444 436 14 final String msg = String.format("Initializing %s", analyzer.getName());
437 14 LOGGER.log(Level.FINE, msg);
438 14 analyzer.initialize();
439 0 } catch (Throwable ex) {440 0 final String msg = String.format("Exception occurred initializing %s.", analyzer.getName());441 0 LOGGER.log(Level.SEVERE, msg);442 0 LOGGER.log(Level.FINE, null, ex);443 try {445 0 analyzer.close();446 0 } catch (Throwable ex1) {447 0 LOGGER.log(Level.FINEST, null, ex1);448 0 }449 14 }
450 14 return analyzer;444 0 analyzer.close();445 0 } catch (Throwable ex1) {446 0 LOGGER.log(Level.FINEST, null, ex1);447 0 }448 14 }
449 14 return analyzer;450 }
451 }
452 /**453 /**454 * Closes the given analyzer.454 *455 *456 * @param analyzer the analyzer to close456 */457 */458 protected void closeAnalyzer(Analyzer analyzer) {
459 14 final String msg = String.format("Closing Analyzer '%s'", analyzer.getName());
460 14 LOGGER.log(Level.FINE, msg);
461 458 14 final String msg = String.format("Closing Analyzer '%s'", analyzer.getName());
459 14 LOGGER.log(Level.FINE, msg);
460 try {462 14 analyzer.close();
463 0 } catch (Throwable ex) {464 0 LOGGER.log(Level.FINEST, null, ex);465 14 }
466 14 }
461 14 analyzer.close();
462 0 } catch (Throwable ex) {463 0 LOGGER.log(Level.FINEST, null, ex);464 14 }
465 14 }
466 467 /**468 /**469 * Cycles through the cached web data sources and calls update on all of them.469 */470 */471 private void doUpdates() {
472 0 LOGGER.info("Checking for updates");473 0 final UpdateService service = new UpdateService(serviceClassLoader);474 0 final Iterator<CachedWebDataSource> iterator = service.getDataSources();475 0 while (iterator.hasNext()) {476 0 final CachedWebDataSource source = iterator.next();477 public void doUpdates() {
471 0 LOGGER.info("Checking for updates");472 0 final UpdateService service = new UpdateService(serviceClassLoader);473 0 final Iterator<CachedWebDataSource> iterator = service.getDataSources();474 0 while (iterator.hasNext()) {475 0 final CachedWebDataSource source = iterator.next();476 try {478 0 source.update();479 0 } catch (UpdateException ex) {480 0 LOGGER.log(Level.WARNING,481 477 0 source.update();478 0 } catch (UpdateException ex) {479 0 LOGGER.log(Level.WARNING,480 "Unable to update Cached Web DataSource, using local data instead. Results may not include recent vulnerabilities.");482 0 LOGGER.log(Level.FINE, String.format("Unable to update details for %s", source.getClass().getName()), ex);483 0 }484 0 }485 0 LOGGER.info("Check for updates complete");486 0 }481 0 LOGGER.log(Level.FINE, String.format("Unable to update details for %s", source.getClass().getName()), ex);482 0 }483 0 }484 0 LOGGER.info("Check for updates complete");485 0 }486 487 /**488 /**489 * Returns a full list of all of the analyzers. This is useful for reporting which analyzers where used.489 *490 *491 * @return a list of Analyzers491 */492 */493 public List<Analyzer> getAnalyzers() {494 0 final List<Analyzer> ret = new ArrayList<Analyzer>();495 0 for (AnalysisPhase phase : AnalysisPhase.values()) {496 0 final List<Analyzer> analyzerList = analyzers.get(phase);497 0 ret.addAll(analyzerList);498 493 0 final List<Analyzer> ret = new ArrayList<Analyzer>();494 0 for (AnalysisPhase phase : AnalysisPhase.values()) {495 0 final List<Analyzer> analyzerList = analyzers.get(phase);496 0 ret.addAll(analyzerList);497 }
499 0 return ret;498 0 return ret;499 }
500 }
501 /**502 /**503 * Checks all analyzers to see if an extension is supported.503 *504 *505 * @param ext a file extension506 505 * @return true or false depending on whether or not the file extension is supported506 */507 */508 public boolean supportsExtension(String ext) {
509 851 if (ext == null) {
510 3 return false;
511 508 851 if (ext == null) {
509 3 return false;
510 }
512 848 boolean scan = false;
513 848 for (FileTypeAnalyzer a : this.fileTypeAnalyzers) {
514 511 848 boolean scan = false;
512 848 for (FileTypeAnalyzer a : this.fileTypeAnalyzers) {
513 /* note, we can't break early on this loop as the analyzers need to know if515 514 they have files to work on prior to initialization */516 5088 scan |= a.supportsExtension(ext);
517 5088 }
518 848 return scan;515 5088 scan |= a.supportsExtension(ext);
516 5088 }
517 848 return scan;518 }
519 }
520 /**521 /**522 * Returns the set of file type analyzers.522 *523 *524 * @return the set of file type analyzers524 */525 */526 public Set<FileTypeAnalyzer> getFileTypeAnalyzers() {527 0 return this.fileTypeAnalyzers;528 526 0 return this.fileTypeAnalyzers;527 }
529 528 530 529 /**531 530 * Checks the CPE Index to ensure documents exists. If none exist a NoDataException is thrown.532 531 *533 532 * @throws NoDataException thrown if no data exists in the CPE Index534 533 * @throws DatabaseException thrown if there is an exception opening the database535 534 */536 535 private void ensureDataExists() throws NoDataException, DatabaseException {
537 1 final CveDB cve = new CveDB();
538 536 1 final CveDB cve = new CveDB();
537 try {539 1 cve.open();
540 1 if (!cve.dataExists()) {541 0 throw new NoDataException("No documents exist");542 538 1 cve.open();
539 1 if (!cve.dataExists()) {540 0 throw new NoDataException("No documents exist");541 }
543 0 } catch (DatabaseException ex) {544 0 throw new NoDataException(ex.getMessage(), ex);545 542 0 } catch (DatabaseException ex) {543 0 throw new NoDataException(ex.getMessage(), ex);544 } finally {546 1 cve.close();
547 1 }
548 1 }
549 545 1 cve.close();
546 1 }
547 1 }
548 }
Classes in this File Line Coverage Branch Coverage Complexity DependencyCheckScanAgent 0% 0% 1.8571428571428572;1.857 DependencyCheckScanAgent 0% 0% 1.8472222222222223;1.847 @@ -417,70 +417,69 @@212 /**213 * The report format to be generated (HTML, XML, VULN, ALL). This configuration option has no affect if using this* flag indicating whether or not to generate a report of findings.214 * within the Site plugin unless the externalReport is set to true. Default is HTML.215 */216 0 private ReportGenerator.Format reportFormat = ReportGenerator.Format.HTML;215 0 private boolean generateReport = true;216 217 /**218 /*** Get the value of generateReport.219 * Get the value of reportFormat.*220 ** @return the value of generateReport221 * @return the value of reportFormat*/222 */223 public ReportGenerator.Format getReportFormat() {224 0 return reportFormat;225 public boolean isGenerateReport() {
223 0 return generateReport;224 }
225 226 /**227 /*** Set the value of generateReport.228 * Set the value of reportFormat.229 *229 * @param generateReport new value of generateReport230 * @param reportFormat new value of reportFormat231 */232 public void setReportFormat(ReportGenerator.Format reportFormat) {
233 0 this.reportFormat = reportFormat;234 0 }235 231 public void setGenerateReport(boolean generateReport) {
232 0 this.generateReport = generateReport;233 0 }234 236 235 /**236 * The report format to be generated (HTML, XML, VULN, ALL). This configuration option has no affect if using this237 * The Proxy Server.* within the Site plugin unless the externalReport is set to true. Default is HTML.238 */239 private String proxyServer;239 0 private ReportGenerator.Format reportFormat = ReportGenerator.Format.HTML;240 241 /**242 * Get the value of proxyServer.* Get the value of reportFormat.243 *244 * @return the value of proxyServer* @return the value of reportFormat245 */246 public String getProxyServer() {247 0 return proxyServer;public ReportGenerator.Format getReportFormat() {247 0 return reportFormat;248 }
249 250 /**251 * Set the value of proxyServer.* Set the value of reportFormat.252 *253 * @param proxyServer new value of proxyServer* @param reportFormat new value of reportFormat254 */255 public void setProxyServer(String proxyServer) {
256 0 this.proxyServer = proxyServer;public void setReportFormat(ReportGenerator.Format reportFormat) {
256 0 this.reportFormat = reportFormat;257 0 }258 259 /**260 * Get the value of proxyServer.* The Proxy Server.261 **/262 * @return the value of proxyServerprivate String proxyServer;263 * @deprecated use {@link org.owasp.dependencycheck.agent.DependencyCheckScanAgent#getProxyServer()} instead264 */265 @Deprecated
266 public String getProxyUrl() {267 0 return proxyServer;268 }
269 270 264 /**271 * Set the value of proxyServer.272 265 * Get the value of proxyServer.266 *273 * @param proxyUrl new value of proxyServer274 * @deprecated use {@link org.owasp.dependencycheck.agent.DependencyCheckScanAgent#setProxyServer(java.lang.String)275 * } instead276 267 * @return the value of proxyServer268 */269 public String getProxyServer() {270 0 return proxyServer;271 }
272 273 /**274 * Set the value of proxyServer.275 *276 * @param proxyServer new value of proxyServer277 @Deprecated
*/278 public void setProxyUrl(String proxyUrl) {
279 0 this.proxyServer = proxyUrl;public void setProxyServer(String proxyServer) {
279 0 this.proxyServer = proxyServer;280 0 }281 282 /**283 * The Proxy Port.* Get the value of proxyServer.284 */*285 private String proxyPort;* @return the value of proxyServer286 * @deprecated use {@link org.owasp.dependencycheck.agent.DependencyCheckScanAgent#getProxyServer()} instead287 /***/288 * Get the value of proxyPort.@Deprecated
289 *290 * @return the value of proxyPortpublic String getProxyUrl() {290 0 return proxyServer;291 */292 public String getProxyPort() {293 0 return proxyPort;294 }
295 292 296 293 /**297 * Set the value of proxyPort.298 294 * Set the value of proxyServer.295 *296 * @param proxyUrl new value of proxyServer297 * @deprecated use {@link org.owasp.dependencycheck.agent.DependencyCheckScanAgent#setProxyServer(java.lang.String)298 * } instead299 * @param proxyPort new value of proxyPort300 */300 @Deprecated
301 public void setProxyPort(String proxyPort) {
302 0 this.proxyPort = proxyPort;public void setProxyUrl(String proxyUrl) {
302 0 this.proxyServer = proxyUrl;303 0 }304 305 /**306 * The Proxy username.* The Proxy Port.307 */308 private String proxyUsername;private String proxyPort;309 310 /**311 * Get the value of proxyUsername.* Get the value of proxyPort.312 *313 * @return the value of proxyUsername* @return the value of proxyPort314 */315 public String getProxyUsername() {316 0 return proxyUsername;public String getProxyPort() {316 0 return proxyPort;317 }
318 319 /**320 * Set the value of proxyUsername.* Set the value of proxyPort.321 *322 * @param proxyUsername new value of proxyUsername* @param proxyPort new value of proxyPort323 */324 public void setProxyUsername(String proxyUsername) {
325 0 this.proxyUsername = proxyUsername;public void setProxyPort(String proxyPort) {
325 0 this.proxyPort = proxyPort;326 0 }327 328 /**329 * The Proxy password.* The Proxy username.330 */331 private String proxyPassword;private String proxyUsername;332 333 /**334 * Get the value of proxyPassword.* Get the value of proxyUsername.335 *336 * @return the value of proxyPassword* @return the value of proxyUsername337 */338 public String getProxyPassword() {339 0 return proxyPassword;public String getProxyUsername() {339 0 return proxyUsername;340 }
341 342 /**343 * Set the value of proxyPassword.* Set the value of proxyUsername.344 *345 * @param proxyPassword new value of proxyPassword* @param proxyUsername new value of proxyUsername346 */347 public void setProxyPassword(String proxyPassword) {
348 0 this.proxyPassword = proxyPassword;public void setProxyUsername(String proxyUsername) {
348 0 this.proxyUsername = proxyUsername;349 0 }350 351 /**352 * The Connection Timeout.* The Proxy password.353 */354 private String connectionTimeout;private String proxyPassword;355 356 /**357 * Get the value of connectionTimeout.* Get the value of proxyPassword.358 *359 * @return the value of connectionTimeout* @return the value of proxyPassword360 */361 public String getConnectionTimeout() {362 0 return connectionTimeout;public String getProxyPassword() {362 0 return proxyPassword;363 }
364 365 /**366 * Set the value of connectionTimeout.* Set the value of proxyPassword.367 *368 * @param connectionTimeout new value of connectionTimeout* @param proxyPassword new value of proxyPassword369 */370 public void setConnectionTimeout(String connectionTimeout) {
371 0 this.connectionTimeout = connectionTimeout;public void setProxyPassword(String proxyPassword) {
371 0 this.proxyPassword = proxyPassword;372 0 }373 374 /**375 * The file path used for verbose logging.* The Connection Timeout.376 */377 0 private String logFile = null;377 private String connectionTimeout;378 379 /**380 * Get the value of logFile.* Get the value of connectionTimeout.381 *382 * @return the value of logFile* @return the value of connectionTimeout383 */384 public String getLogFile() {385 0 return logFile;public String getConnectionTimeout() {385 0 return connectionTimeout;386 }
387 388 /**389 * Set the value of logFile.* Set the value of connectionTimeout.390 *391 * @param logFile new value of logFile* @param connectionTimeout new value of connectionTimeout392 */393 public void setLogFile(String logFile) {
394 0 this.logFile = logFile;public void setConnectionTimeout(String connectionTimeout) {
394 0 this.connectionTimeout = connectionTimeout;395 0 }396 397 /**398 * The path to the suppression file.* The file path used for verbose logging.399 */400 private String suppressionFile;400 0 private String logFile = null;401 402 /**403 * Get the value of suppressionFile.* Get the value of logFile.404 *405 * @return the value of suppressionFile* @return the value of logFile406 */407 public String getSuppressionFile() {408 0 return suppressionFile;public String getLogFile() {408 0 return logFile;409 }
410 411 /**412 * Set the value of suppressionFile.* Set the value of logFile.413 *414 * @param suppressionFile new value of suppressionFile* @param logFile new value of logFile415 */416 public void setSuppressionFile(String suppressionFile) {
417 0 this.suppressionFile = suppressionFile;public void setLogFile(String logFile) {
417 0 this.logFile = logFile;418 0 }419 420 /**421 * flag indicating whether or not to show a summary of findings.* The path to the suppression file.422 */423 0 private boolean showSummary = true;423 private String suppressionFile;424 425 /**426 * Get the value of showSummary.* Get the value of suppressionFile.427 *428 * @return the value of showSummary* @return the value of suppressionFile429 */430 public boolean isShowSummary() {
431 0 return showSummary;public String getSuppressionFile() {431 0 return suppressionFile;432 }
433 434 /**435 * Set the value of showSummary.* Set the value of suppressionFile.436 *437 * @param showSummary new value of showSummary* @param suppressionFile new value of suppressionFile438 */439 public void setShowSummary(boolean showSummary) {
440 0 this.showSummary = showSummary;public void setSuppressionFile(String suppressionFile) {
440 0 this.suppressionFile = suppressionFile;441 0 }442 443 /**444 * Whether or not the Maven Central analyzer is enabled.* flag indicating whether or not to show a summary of findings.445 */446 0 private boolean centralAnalyzerEnabled = true;446 0 private boolean showSummary = true;447 448 /**449 * Get the value of centralAnalyzerEnabled.* Get the value of showSummary.450 *451 * @return the value of centralAnalyzerEnabled* @return the value of showSummary452 */453 public boolean isCentralAnalyzerEnabled() {
454 0 return centralAnalyzerEnabled;public boolean isShowSummary() {
454 0 return showSummary;455 }
456 457 /**458 * Set the value of centralAnalyzerEnabled.* Set the value of showSummary.459 *460 * @param centralAnalyzerEnabled new value of centralAnalyzerEnabled* @param showSummary new value of showSummary461 */462 public void setCentralAnalyzerEnabled(boolean centralAnalyzerEnabled) {
463 0 this.centralAnalyzerEnabled = centralAnalyzerEnabled;public void setShowSummary(boolean showSummary) {
463 0 this.showSummary = showSummary;464 0 }465 466 /**467 * The URL of Maven Central.* Whether or not the Maven Central analyzer is enabled.468 */469 private String centralUrl;469 0 private boolean centralAnalyzerEnabled = true;470 471 /**472 * Get the value of centralUrl.* Get the value of centralAnalyzerEnabled.473 *474 * @return the value of centralUrl* @return the value of centralAnalyzerEnabled475 */476 public String getCentralUrl() {477 0 return centralUrl;public boolean isCentralAnalyzerEnabled() {
477 0 return centralAnalyzerEnabled;478 }
479 480 /**481 * Set the value of centralUrl.* Set the value of centralAnalyzerEnabled.482 *483 * @param centralUrl new value of centralUrl* @param centralAnalyzerEnabled new value of centralAnalyzerEnabled484 */485 public void setCentralUrl(String centralUrl) {
486 0 this.centralUrl = centralUrl;public void setCentralAnalyzerEnabled(boolean centralAnalyzerEnabled) {
486 0 this.centralAnalyzerEnabled = centralAnalyzerEnabled;487 0 }488 489 /**490 * Whether or not the nexus analyzer is enabled.* The URL of Maven Central.491 */492 0 private boolean nexusAnalyzerEnabled = true;492 private String centralUrl;493 494 /**495 * Get the value of nexusAnalyzerEnabled.* Get the value of centralUrl.496 *497 * @return the value of nexusAnalyzerEnabled* @return the value of centralUrl498 */499 public boolean isNexusAnalyzerEnabled() {
500 0 return nexusAnalyzerEnabled;public String getCentralUrl() {500 0 return centralUrl;501 }
502 503 /**504 * Set the value of nexusAnalyzerEnabled.* Set the value of centralUrl.505 *506 * @param nexusAnalyzerEnabled new value of nexusAnalyzerEnabled* @param centralUrl new value of centralUrl507 */508 public void setNexusAnalyzerEnabled(boolean nexusAnalyzerEnabled) {
509 0 this.nexusAnalyzerEnabled = nexusAnalyzerEnabled;public void setCentralUrl(String centralUrl) {
509 0 this.centralUrl = centralUrl;510 0 }511 512 /**513 * The URL of the Nexus server.* Whether or not the nexus analyzer is enabled.514 */515 private String nexusUrl;515 0 private boolean nexusAnalyzerEnabled = true;516 517 /**518 * Get the value of nexusUrl.* Get the value of nexusAnalyzerEnabled.519 *520 * @return the value of nexusUrl* @return the value of nexusAnalyzerEnabled521 */522 public String getNexusUrl() {523 0 return nexusUrl;public boolean isNexusAnalyzerEnabled() {
523 0 return nexusAnalyzerEnabled;524 }
525 526 /**527 * Set the value of nexusUrl.* Set the value of nexusAnalyzerEnabled.528 *529 * @param nexusUrl new value of nexusUrl* @param nexusAnalyzerEnabled new value of nexusAnalyzerEnabled530 */531 public void setNexusUrl(String nexusUrl) {
532 0 this.nexusUrl = nexusUrl;public void setNexusAnalyzerEnabled(boolean nexusAnalyzerEnabled) {
532 0 this.nexusAnalyzerEnabled = nexusAnalyzerEnabled;533 0 }534 535 /**536 * Whether or not the defined proxy should be used when connecting to Nexus.* The URL of the Nexus server.537 */538 0 private boolean nexusUsesProxy = true;538 private String nexusUrl;539 540 /**541 * Get the value of nexusUsesProxy.* Get the value of nexusUrl.542 *543 * @return the value of nexusUsesProxy* @return the value of nexusUrl544 */545 public boolean isNexusUsesProxy() {
546 0 return nexusUsesProxy;public String getNexusUrl() {546 0 return nexusUrl;547 }
548 549 /**550 * Set the value of nexusUsesProxy.* Set the value of nexusUrl.551 *552 * @param nexusUsesProxy new value of nexusUsesProxy* @param nexusUrl new value of nexusUrl553 */554 public void setNexusUsesProxy(boolean nexusUsesProxy) {
555 0 this.nexusUsesProxy = nexusUsesProxy;public void setNexusUrl(String nexusUrl) {
555 0 this.nexusUrl = nexusUrl;556 0 }557 558 /**559 * The database driver name; such as org.h2.Driver.* Whether or not the defined proxy should be used when connecting to Nexus.560 */561 private String databaseDriverName;561 0 private boolean nexusUsesProxy = true;562 563 /**564 * Get the value of databaseDriverName.* Get the value of nexusUsesProxy.565 *566 * @return the value of databaseDriverName* @return the value of nexusUsesProxy567 */568 public String getDatabaseDriverName() {569 0 return databaseDriverName;public boolean isNexusUsesProxy() {
569 0 return nexusUsesProxy;570 }
571 572 /**573 * Set the value of databaseDriverName.* Set the value of nexusUsesProxy.574 *575 * @param databaseDriverName new value of databaseDriverName* @param nexusUsesProxy new value of nexusUsesProxy576 */577 public void setDatabaseDriverName(String databaseDriverName) {
578 0 this.databaseDriverName = databaseDriverName;public void setNexusUsesProxy(boolean nexusUsesProxy) {
578 0 this.nexusUsesProxy = nexusUsesProxy;579 0 }580 581 /**582 * The path to the database driver JAR file if it is not on the class path.* The database driver name; such as org.h2.Driver.583 */584 private String databaseDriverPath;private String databaseDriverName;585 586 /**587 * Get the value of databaseDriverPath.* Get the value of databaseDriverName.588 *589 * @return the value of databaseDriverPath* @return the value of databaseDriverName590 */591 public String getDatabaseDriverPath() {592 0 return databaseDriverPath;public String getDatabaseDriverName() {592 0 return databaseDriverName;593 }
594 595 /**596 * Set the value of databaseDriverPath.* Set the value of databaseDriverName.597 *598 * @param databaseDriverPath new value of databaseDriverPath* @param databaseDriverName new value of databaseDriverName599 */600 public void setDatabaseDriverPath(String databaseDriverPath) {
601 0 this.databaseDriverPath = databaseDriverPath;public void setDatabaseDriverName(String databaseDriverName) {
601 0 this.databaseDriverName = databaseDriverName;602 0 }603 604 /**605 * The database connection string.* The path to the database driver JAR file if it is not on the class path.606 */607 private String connectionString;private String databaseDriverPath;608 609 /**610 * Get the value of connectionString.* Get the value of databaseDriverPath.611 *612 * @return the value of connectionString* @return the value of databaseDriverPath613 */614 public String getConnectionString() {615 0 return connectionString;public String getDatabaseDriverPath() {615 0 return databaseDriverPath;616 }
617 618 /**619 * Set the value of connectionString.* Set the value of databaseDriverPath.620 *621 * @param connectionString new value of connectionString* @param databaseDriverPath new value of databaseDriverPath622 */623 public void setConnectionString(String connectionString) {
624 0 this.connectionString = connectionString;public void setDatabaseDriverPath(String databaseDriverPath) {
624 0 this.databaseDriverPath = databaseDriverPath;625 0 }626 627 /**628 * The user name for connecting to the database.* The database connection string.629 */630 private String databaseUser;private String connectionString;631 632 /**633 * Get the value of databaseUser.* Get the value of connectionString.634 *635 * @return the value of databaseUser* @return the value of connectionString636 */637 public String getDatabaseUser() {638 0 return databaseUser;public String getConnectionString() {638 0 return connectionString;639 }
640 641 /**642 * Set the value of databaseUser.* Set the value of connectionString.643 *644 * @param databaseUser new value of databaseUser* @param connectionString new value of connectionString645 */646 public void setDatabaseUser(String databaseUser) {
647 0 this.databaseUser = databaseUser;public void setConnectionString(String connectionString) {
647 0 this.connectionString = connectionString;648 0 }649 650 /**651 * The password to use when connecting to the database.* The user name for connecting to the database.652 */653 private String databasePassword;private String databaseUser;654 655 /**656 * Get the value of databasePassword.* Get the value of databaseUser.657 *658 * @return the value of databasePassword* @return the value of databaseUser659 */660 public String getDatabasePassword() {661 0 return databasePassword;public String getDatabaseUser() {661 0 return databaseUser;662 }
663 664 /**665 * Set the value of databasePassword.* Set the value of databaseUser.666 *667 * @param databasePassword new value of databasePassword* @param databaseUser new value of databaseUser668 */669 public void setDatabasePassword(String databasePassword) {
670 0 this.databasePassword = databasePassword;public void setDatabaseUser(String databaseUser) {
670 0 this.databaseUser = databaseUser;671 0 }672 673 /**674 * Additional ZIP File extensions to add analyze. This should be a comma-separated list of file extensions to treat* The password to use when connecting to the database.675 * like ZIP files.*/676 */private String databasePassword;677 private String zipExtensions;678 /**679 /*** Get the value of databasePassword.680 * Get the value of zipExtensions.*681 ** @return the value of databasePassword682 * @return the value of zipExtensions*/683 */684 public String getZipExtensions() {685 0 return zipExtensions;686 public String getDatabasePassword() {684 0 return databasePassword;685 }
686 687 /**688 /*** Set the value of databasePassword.689 * Set the value of zipExtensions.690 *690 * @param databasePassword new value of databasePassword691 * @param zipExtensions new value of zipExtensions692 */693 public void setZipExtensions(String zipExtensions) {
694 0 this.zipExtensions = zipExtensions;695 0 }696 692 public void setDatabasePassword(String databasePassword) {
693 0 this.databasePassword = databasePassword;694 0 }695 697 696 /**697 * Additional ZIP File extensions to add analyze. This should be a comma-separated list of file extensions to treat698 * The url for the modified NVD CVE (1.2 schema).* like ZIP files.699 */700 private String cveUrl12Modified;private String zipExtensions;701 702 /**703 * Get the value of cveUrl12Modified.* Get the value of zipExtensions.704 *705 * @return the value of cveUrl12Modified* @return the value of zipExtensions706 */707 public String getCveUrl12Modified() {708 0 return cveUrl12Modified;public String getZipExtensions() {708 0 return zipExtensions;709 }
710 711 /**712 * Set the value of cveUrl12Modified.* Set the value of zipExtensions.713 *714 * @param cveUrl12Modified new value of cveUrl12Modified* @param zipExtensions new value of zipExtensions715 */716 public void setCveUrl12Modified(String cveUrl12Modified) {
717 0 this.cveUrl12Modified = cveUrl12Modified;public void setZipExtensions(String zipExtensions) {
717 0 this.zipExtensions = zipExtensions;718 0 }719 720 /**721 * The url for the modified NVD CVE (2.0 schema).* The url for the modified NVD CVE (1.2 schema).722 */723 private String cveUrl20Modified;private String cveUrl12Modified;724 725 /**726 * Get the value of cveUrl20Modified.* Get the value of cveUrl12Modified.727 *728 * @return the value of cveUrl20Modified* @return the value of cveUrl12Modified729 */730 public String getCveUrl20Modified() {731 0 return cveUrl20Modified;public String getCveUrl12Modified() {731 0 return cveUrl12Modified;732 }
733 734 /**735 * Set the value of cveUrl20Modified.* Set the value of cveUrl12Modified.736 *737 * @param cveUrl20Modified new value of cveUrl20Modified* @param cveUrl12Modified new value of cveUrl12Modified738 */739 public void setCveUrl20Modified(String cveUrl20Modified) {
740 0 this.cveUrl20Modified = cveUrl20Modified;public void setCveUrl12Modified(String cveUrl12Modified) {
740 0 this.cveUrl12Modified = cveUrl12Modified;741 0 }742 743 /**744 * Base Data Mirror URL for CVE 1.2.* The url for the modified NVD CVE (2.0 schema).745 */746 private String cveUrl12Base;private String cveUrl20Modified;747 748 /**749 * Get the value of cveUrl12Base.* Get the value of cveUrl20Modified.750 *751 * @return the value of cveUrl12Base* @return the value of cveUrl20Modified752 */753 public String getCveUrl12Base() {754 0 return cveUrl12Base;public String getCveUrl20Modified() {754 0 return cveUrl20Modified;755 }
756 757 /**758 * Set the value of cveUrl12Base.* Set the value of cveUrl20Modified.759 *760 * @param cveUrl12Base new value of cveUrl12Base* @param cveUrl20Modified new value of cveUrl20Modified761 */762 public void setCveUrl12Base(String cveUrl12Base) {
763 0 this.cveUrl12Base = cveUrl12Base;public void setCveUrl20Modified(String cveUrl20Modified) {
763 0 this.cveUrl20Modified = cveUrl20Modified;764 0 }765 766 /**767 * Data Mirror URL for CVE 2.0.* Base Data Mirror URL for CVE 1.2.768 */769 private String cveUrl20Base;private String cveUrl12Base;770 771 /**772 * Get the value of cveUrl20Base.* Get the value of cveUrl12Base.773 *774 * @return the value of cveUrl20Base* @return the value of cveUrl12Base775 */776 public String getCveUrl20Base() {777 0 return cveUrl20Base;public String getCveUrl12Base() {777 0 return cveUrl12Base;778 }
779 780 /**781 * Set the value of cveUrl20Base.* Set the value of cveUrl12Base.782 *783 * @param cveUrl20Base new value of cveUrl20Base* @param cveUrl12Base new value of cveUrl12Base784 */785 public void setCveUrl20Base(String cveUrl20Base) {
786 0 this.cveUrl20Base = cveUrl20Base;public void setCveUrl12Base(String cveUrl12Base) {
786 0 this.cveUrl12Base = cveUrl12Base;787 0 }788 789 /**790 * The path to Mono for .NET assembly analysis on non-windows systems.* Data Mirror URL for CVE 2.0.791 */792 private String pathToMono;private String cveUrl20Base;793 794 /**795 * Get the value of pathToMono.* Get the value of cveUrl20Base.796 *797 * @return the value of pathToMono* @return the value of cveUrl20Base798 */799 public String getPathToMono() {800 0 return pathToMono;public String getCveUrl20Base() {800 0 return cveUrl20Base;801 }
802 803 /**804 * Set the value of pathToMono.* Set the value of cveUrl20Base.805 *806 * @param pathToMono new value of pathToMono* @param cveUrl20Base new value of cveUrl20Base807 */808 public void setPathToMono(String pathToMono) {
809 0 this.pathToMono = pathToMono;public void setCveUrl20Base(String cveUrl20Base) {
809 0 this.cveUrl20Base = cveUrl20Base;810 0 }811 812 /**813 * Executes the Dependency-Check on the dependent libraries.* The path to Mono for .NET assembly analysis on non-windows systems.814 **/815 * @return the Engine used to scan the dependencies.private String pathToMono;816 * @throws org.owasp.dependencycheck.data.nvdcve.DatabaseException thrown if there is an exception connecting to the817 * database/**818 */* Get the value of pathToMono.819 private Engine executeDependencyCheck() throws DatabaseException {
820 0 populateSettings();821 0 Engine engine = null;822 0 engine = new Engine();823 0 engine.setDependencies(this.dependencies);824 0 engine.analyzeDependencies();825 0 return engine;826 }
827 828 /**829 * Generates the reports for a given dependency-check engine.830 *831 * @param engine a dependency-check engine832 * @param outDirectory the directory to write the reports to833 820 * @return the value of pathToMono821 */834 private void generateExternalReports(Engine engine, File outDirectory) {
835 0 DatabaseProperties prop = null;836 0 CveDB cve = null;837 try {838 0 cve = new CveDB();839 0 cve.open();840 0 prop = cve.getDatabaseProperties();841 0 } catch (DatabaseException ex) {842 0 LOGGER.log(Level.FINE, "Unable to retrieve DB Properties", ex);843 } finally {844 0 if (cve != null) {845 0 cve.close();846 }
847 }
848 0 final ReportGenerator r = new ReportGenerator(this.applicationName, engine.getDependencies(), engine.getAnalyzers(), prop);849 try {850 0 r.generateReports(outDirectory.getCanonicalPath(), this.reportFormat.name());851 0 } catch (IOException ex) {852 0 LOGGER.log(Level.SEVERE,853 "Unexpected exception occurred during analysis; please see the verbose error log for more details.");854 0 LOGGER.log(Level.FINE, null, ex);855 0 } catch (Throwable ex) {856 0 LOGGER.log(Level.SEVERE,857 "Unexpected exception occurred during analysis; please see the verbose error log for more details.");858 0 LOGGER.log(Level.FINE, null, ex);859 0 }860 0 }861 822 public String getPathToMono() {823 0 return pathToMono;824 }
825 862 826 /**863 * Takes the properties supplied and updates the dependency-check settings. Additionally, this sets the system864 * properties required to change the proxy server, port, and connection timeout.865 827 * Set the value of pathToMono.828 *829 * @param pathToMono new value of pathToMono830 */831 public void setPathToMono(String pathToMono) {
832 0 this.pathToMono = pathToMono;833 0 }834 835 /**836 * Executes the Dependency-Check on the dependent libraries.837 *838 * @return the Engine used to scan the dependencies.839 * @throws org.owasp.dependencycheck.data.nvdcve.DatabaseException thrown if there is an exception connecting to the840 * database841 */842 private Engine executeDependencyCheck() throws DatabaseException {
843 0 populateSettings();844 0 Engine engine = null;845 0 engine = new Engine();846 0 engine.setDependencies(this.dependencies);847 0 engine.analyzeDependencies();848 0 return engine;849 }
850 851 /**852 * Generates the reports for a given dependency-check engine.853 *854 * @param engine a dependency-check engine855 * @param outDirectory the directory to write the reports to856 */857 private void generateExternalReports(Engine engine, File outDirectory) {
858 0 DatabaseProperties prop = null;859 0 CveDB cve = null;860 try {861 0 cve = new CveDB();862 0 cve.open();863 0 prop = cve.getDatabaseProperties();864 0 } catch (DatabaseException ex) {865 0 LOGGER.log(Level.FINE, "Unable to retrieve DB Properties", ex);866 private void populateSettings() {
867 0 Settings.initialize();868 0 if (dataDirectory != null) {869 0 Settings.setString(Settings.KEYS.DATA_DIRECTORY, dataDirectory);} finally {867 0 if (cve != null) {868 0 cve.close();869 }
870 } else {871 0 final File jarPath = new File(DependencyCheckScanAgent.class.getProtectionDomain().getCodeSource().getLocation().getPath());872 0 final File base = jarPath.getParentFile();873 0 final String sub = Settings.getString(Settings.KEYS.DATA_DIRECTORY);874 0 final File dataDir = new File(base, sub);875 0 Settings.setString(Settings.KEYS.DATA_DIRECTORY, dataDir.getAbsolutePath());}
871 0 final ReportGenerator r = new ReportGenerator(this.applicationName, engine.getDependencies(), engine.getAnalyzers(), prop);872 try {873 0 r.generateReports(outDirectory.getCanonicalPath(), this.reportFormat.name());874 0 } catch (IOException ex) {875 0 LOGGER.log(Level.SEVERE,876 }
877 "Unexpected exception occurred during analysis; please see the verbose error log for more details.");877 0 LOGGER.log(Level.FINE, null, ex);878 0 } catch (Throwable ex) {879 0 LOGGER.log(Level.SEVERE,880 "Unexpected exception occurred during analysis; please see the verbose error log for more details.");881 0 LOGGER.log(Level.FINE, null, ex);882 0 }883 0 }884 878 0 Settings.setBoolean(Settings.KEYS.AUTO_UPDATE, autoUpdate);879 880 0 if (proxyServer != null && !proxyServer.isEmpty()) {881 0 Settings.setString(Settings.KEYS.PROXY_SERVER, proxyServer);882 }
883 0 if (proxyPort != null && !proxyPort.isEmpty()) {884 0 Settings.setString(Settings.KEYS.PROXY_PORT, proxyPort);885 }
886 0 if (proxyUsername != null && !proxyUsername.isEmpty()) {887 0 Settings.setString(Settings.KEYS.PROXY_USERNAME, proxyUsername);/**886 * Takes the properties supplied and updates the dependency-check settings. Additionally, this sets the system887 * properties required to change the proxy server, port, and connection timeout.888 */889 private void populateSettings() {
890 0 Settings.initialize();891 0 if (dataDirectory != null) {892 0 Settings.setString(Settings.KEYS.DATA_DIRECTORY, dataDirectory);893 } else {894 0 final File jarPath = new File(DependencyCheckScanAgent.class.getProtectionDomain().getCodeSource().getLocation().getPath());895 0 final File base = jarPath.getParentFile();896 0 final String sub = Settings.getString(Settings.KEYS.DATA_DIRECTORY);897 0 final File dataDir = new File(base, sub);898 0 Settings.setString(Settings.KEYS.DATA_DIRECTORY, dataDir.getAbsolutePath());899 }
889 0 if (proxyPassword != null && !proxyPassword.isEmpty()) {890 0 Settings.setString(Settings.KEYS.PROXY_PASSWORD, proxyPassword);891 }
892 0 if (connectionTimeout != null && !connectionTimeout.isEmpty()) {893 0 Settings.setString(Settings.KEYS.CONNECTION_TIMEOUT, connectionTimeout);894 }
895 0 if (suppressionFile != null && !suppressionFile.isEmpty()) {896 0 Settings.setString(Settings.KEYS.SUPPRESSION_FILE, suppressionFile);897 }
898 0 Settings.setBoolean(Settings.KEYS.ANALYZER_CENTRAL_ENABLED, centralAnalyzerEnabled);899 0 if (centralUrl != null && !centralUrl.isEmpty()) {900 0 Settings.setString(Settings.KEYS.ANALYZER_CENTRAL_URL, centralUrl);901 }
902 0 Settings.setBoolean(Settings.KEYS.ANALYZER_NEXUS_ENABLED, nexusAnalyzerEnabled);903 0 if (nexusUrl != null && !nexusUrl.isEmpty()) {904 0 Settings.setString(Settings.KEYS.ANALYZER_NEXUS_URL, nexusUrl);900 901 0 Settings.setBoolean(Settings.KEYS.AUTO_UPDATE, autoUpdate);902 903 0 if (proxyServer != null && !proxyServer.isEmpty()) {904 0 Settings.setString(Settings.KEYS.PROXY_SERVER, proxyServer);905 }
906 0 Settings.setBoolean(Settings.KEYS.ANALYZER_NEXUS_PROXY, nexusUsesProxy);907 0 if (databaseDriverName != null && !databaseDriverName.isEmpty()) {908 0 Settings.setString(Settings.KEYS.DB_DRIVER_NAME, databaseDriverName);909 906 0 if (proxyPort != null && !proxyPort.isEmpty()) {907 0 Settings.setString(Settings.KEYS.PROXY_PORT, proxyPort);908 }
910 0 if (databaseDriverPath != null && !databaseDriverPath.isEmpty()) {911 0 Settings.setString(Settings.KEYS.DB_DRIVER_PATH, databaseDriverPath);912 909 0 if (proxyUsername != null && !proxyUsername.isEmpty()) {910 0 Settings.setString(Settings.KEYS.PROXY_USERNAME, proxyUsername);911 }
913 0 if (connectionString != null && !connectionString.isEmpty()) {914 0 Settings.setString(Settings.KEYS.DB_CONNECTION_STRING, connectionString);915 912 0 if (proxyPassword != null && !proxyPassword.isEmpty()) {913 0 Settings.setString(Settings.KEYS.PROXY_PASSWORD, proxyPassword);914 }
916 0 if (databaseUser != null && !databaseUser.isEmpty()) {917 0 Settings.setString(Settings.KEYS.DB_USER, databaseUser);918 915 0 if (connectionTimeout != null && !connectionTimeout.isEmpty()) {916 0 Settings.setString(Settings.KEYS.CONNECTION_TIMEOUT, connectionTimeout);917 }
919 0 if (databasePassword != null && !databasePassword.isEmpty()) {920 0 Settings.setString(Settings.KEYS.DB_PASSWORD, databasePassword);921 918 0 if (suppressionFile != null && !suppressionFile.isEmpty()) {919 0 Settings.setString(Settings.KEYS.SUPPRESSION_FILE, suppressionFile);920 }
922 0 if (zipExtensions != null && !zipExtensions.isEmpty()) {923 0 Settings.setString(Settings.KEYS.ADDITIONAL_ZIP_EXTENSIONS, zipExtensions);921 0 Settings.setBoolean(Settings.KEYS.ANALYZER_CENTRAL_ENABLED, centralAnalyzerEnabled);922 0 if (centralUrl != null && !centralUrl.isEmpty()) {923 0 Settings.setString(Settings.KEYS.ANALYZER_CENTRAL_URL, centralUrl);924 }
925 0 if (cveUrl12Modified != null && !cveUrl12Modified.isEmpty()) {926 0 Settings.setString(Settings.KEYS.CVE_MODIFIED_12_URL, cveUrl12Modified);927 925 0 Settings.setBoolean(Settings.KEYS.ANALYZER_NEXUS_ENABLED, nexusAnalyzerEnabled);926 0 if (nexusUrl != null && !nexusUrl.isEmpty()) {927 0 Settings.setString(Settings.KEYS.ANALYZER_NEXUS_URL, nexusUrl);928 }
928 0 if (cveUrl20Modified != null && !cveUrl20Modified.isEmpty()) {929 0 Settings.setString(Settings.KEYS.CVE_MODIFIED_20_URL, cveUrl20Modified);930 929 0 Settings.setBoolean(Settings.KEYS.ANALYZER_NEXUS_PROXY, nexusUsesProxy);930 0 if (databaseDriverName != null && !databaseDriverName.isEmpty()) {931 0 Settings.setString(Settings.KEYS.DB_DRIVER_NAME, databaseDriverName);932 }
931 0 if (cveUrl12Base != null && !cveUrl12Base.isEmpty()) {932 0 Settings.setString(Settings.KEYS.CVE_SCHEMA_1_2, cveUrl12Base);933 933 0 if (databaseDriverPath != null && !databaseDriverPath.isEmpty()) {934 0 Settings.setString(Settings.KEYS.DB_DRIVER_PATH, databaseDriverPath);935 }
934 0 if (cveUrl20Base != null && !cveUrl20Base.isEmpty()) {935 0 Settings.setString(Settings.KEYS.CVE_SCHEMA_2_0, cveUrl20Base);936 936 0 if (connectionString != null && !connectionString.isEmpty()) {937 0 Settings.setString(Settings.KEYS.DB_CONNECTION_STRING, connectionString);938 }
937 0 if (pathToMono != null && !pathToMono.isEmpty()) {938 0 Settings.setString(Settings.KEYS.ANALYZER_ASSEMBLY_MONO_PATH, pathToMono);939 }
940 0 }939 0 if (databaseUser != null && !databaseUser.isEmpty()) {940 0 Settings.setString(Settings.KEYS.DB_USER, databaseUser);941 942 /**943 * Executes the dependency-check and generates the report.}
942 0 if (databasePassword != null && !databasePassword.isEmpty()) {943 0 Settings.setString(Settings.KEYS.DB_PASSWORD, databasePassword);944 *945 * @throws org.owasp.dependencycheck.exception.ScanAgentException thrown if there is an exception executing the946 * scan.}
945 0 if (zipExtensions != null && !zipExtensions.isEmpty()) {946 0 Settings.setString(Settings.KEYS.ADDITIONAL_ZIP_EXTENSIONS, zipExtensions);947 */948 public void execute() throws ScanAgentException {
949 0 Engine engine = null;}
948 0 if (cveUrl12Modified != null && !cveUrl12Modified.isEmpty()) {949 0 Settings.setString(Settings.KEYS.CVE_MODIFIED_12_URL, cveUrl12Modified);950 try {951 0 engine = executeDependencyCheck();952 0 generateExternalReports(engine, new File(this.reportOutputDirectory));953 0 if (this.showSummary) {954 0 showSummary(engine.getDependencies());955 }
956 0 if (this.failBuildOnCVSS <= 10) {957 0 checkForFailure(engine.getDependencies());958 }
959 0 } catch (DatabaseException ex) {960 0 LOGGER.log(Level.SEVERE,961 "Unable to connect to the dependency-check database; analysis has stopped");962 0 LOGGER.log(Level.FINE, "", ex);963 } finally {964 0 Settings.cleanup(true);965 0 if (engine != null) {966 0 engine.cleanup();}
951 0 if (cveUrl20Modified != null && !cveUrl20Modified.isEmpty()) {952 0 Settings.setString(Settings.KEYS.CVE_MODIFIED_20_URL, cveUrl20Modified);953 }
954 0 if (cveUrl12Base != null && !cveUrl12Base.isEmpty()) {955 0 Settings.setString(Settings.KEYS.CVE_SCHEMA_1_2, cveUrl12Base);956 }
957 0 if (cveUrl20Base != null && !cveUrl20Base.isEmpty()) {958 0 Settings.setString(Settings.KEYS.CVE_SCHEMA_2_0, cveUrl20Base);959 }
960 0 if (pathToMono != null && !pathToMono.isEmpty()) {961 0 Settings.setString(Settings.KEYS.ANALYZER_ASSEMBLY_MONO_PATH, pathToMono);962 }
963 0 }964 965 /**966 * Executes the dependency-check and generates the report.967 }
*968 }
969 0 }970 971 /**972 * Checks to see if a vulnerability has been identified with a CVSS score that is above the threshold set in the973 * configuration.974 *975 * @param dependencies the list of dependency objects976 * @throws org.owasp.dependencycheck.exception.ScanAgentException thrown if there is an exception executing the977 969 * scan.978 970 */979 private void checkForFailure(List<Dependency> dependencies) throws ScanAgentException {
980 0 final StringBuilder ids = new StringBuilder();981 0 for (Dependency d : dependencies) {982 0 boolean addName = true;983 0 for (Vulnerability v : d.getVulnerabilities()) {984 0 if (v.getCvssScore() >= failBuildOnCVSS) {985 0 if (addName) {986 0 addName = false;987 0 ids.append(NEW_LINE).append(d.getFileName()).append(": ");988 0 ids.append(v.getName());989 } else {990 0 ids.append(", ").append(v.getName());991 }
992 }
993 0 }994 0 }995 0 if (ids.length() > 0) {996 0 final String msg = String.format("%n%nDependency-Check Failure:%n"997 + "One or more dependencies were identified with vulnerabilities that have a CVSS score greater then '%.1f': %s%n"998 + "See the dependency-check report for more details.%n%n", failBuildOnCVSS, ids.toString());999 1000 0 throw new ScanAgentException(msg);1001 }
1002 0 }1003 1004 /**1005 * Generates a warning message listing a summary of dependencies and their associated CPE and CVE entries.1006 *1007 * @param dependencies a list of dependency objects1008 */1009 private void showSummary(List<Dependency> dependencies) {
1010 0 final StringBuilder summary = new StringBuilder();1011 0 for (Dependency d : dependencies) {1012 0 boolean firstEntry = true;1013 0 final StringBuilder ids = new StringBuilder();1014 0 for (Vulnerability v : d.getVulnerabilities()) {1015 0 if (firstEntry) {1016 0 firstEntry = false;1017 } else {1018 0 ids.append(", ");1019 }
1020 0 ids.append(v.getName());1021 0 }1022 0 if (ids.length() > 0) {1023 0 summary.append(d.getFileName()).append(" (");1024 0 firstEntry = true;1025 0 for (Identifier id : d.getIdentifiers()) {1026 0 if (firstEntry) {1027 0 firstEntry = false;1028 } else {1029 0 summary.append(", ");1030 }
1031 0 summary.append(id.getValue());1032 0 }1033 0 summary.append(") : ").append(ids).append(NEW_LINE);1034 971 public Engine execute() throws ScanAgentException {
972 0 Engine engine = null;973 try {974 0 engine = executeDependencyCheck();975 0 if (this.generateReport) {976 0 generateExternalReports(engine, new File(this.reportOutputDirectory));977 }
1035 0 }1036 0 if (summary.length() > 0) {1037 0 final String msg = String.format("%n%n"1038 + "One or more dependencies were identified with known vulnerabilities:%n%n%s"1039 + "%n%nSee the dependency-check report for more details.%n%n", summary.toString());1040 0 LOGGER.log(Level.WARNING, msg);1041 978 0 if (this.showSummary) {979 0 showSummary(engine.getDependencies());980 }
981 0 if (this.failBuildOnCVSS <= 10) {982 0 checkForFailure(engine.getDependencies());983 }
984 0 } catch (DatabaseException ex) {985 0 LOGGER.log(Level.SEVERE,986 "Unable to connect to the dependency-check database; analysis has stopped");987 0 LOGGER.log(Level.FINE, "", ex);988 } finally {989 0 Settings.cleanup(true);990 0 if (engine != null) {991 0 engine.cleanup();992 }
993 }
1042 0 }1043 994 0 return engine;995 }
996 1044 997 /**998 * Checks to see if a vulnerability has been identified with a CVSS score that is above the threshold set in the999 * configuration.1000 *1001 * @param dependencies the list of dependency objects1002 * @throws org.owasp.dependencycheck.exception.ScanAgentException thrown if there is an exception executing the1003 * scan.1004 */1005 private void checkForFailure(List<Dependency> dependencies) throws ScanAgentException {
1006 0 final StringBuilder ids = new StringBuilder();1007 0 for (Dependency d : dependencies) {1008 0 boolean addName = true;1009 0 for (Vulnerability v : d.getVulnerabilities()) {1010 0 if (v.getCvssScore() >= failBuildOnCVSS) {1011 0 if (addName) {1012 0 addName = false;1013 0 ids.append(NEW_LINE).append(d.getFileName()).append(": ");1014 0 ids.append(v.getName());1015 } else {1016 0 ids.append(", ").append(v.getName());1017 }
1018 }
1019 0 }1020 0 }1021 0 if (ids.length() > 0) {1022 0 final String msg = String.format("%n%nDependency-Check Failure:%n"1023 + "One or more dependencies were identified with vulnerabilities that have a CVSS score greater then '%.1f': %s%n"1024 + "See the dependency-check report for more details.%n%n", failBuildOnCVSS, ids.toString());1025 1026 0 throw new ScanAgentException(msg);1027 }
1028 0 }1029 1030 /**1031 * Generates a warning message listing a summary of dependencies and their associated CPE and CVE entries.1032 *1033 * @param dependencies a list of dependency objects1034 */1035 private void showSummary(List<Dependency> dependencies) {
1036 0 final StringBuilder summary = new StringBuilder();1037 0 for (Dependency d : dependencies) {1038 0 boolean firstEntry = true;1039 0 final StringBuilder ids = new StringBuilder();1040 0 for (Vulnerability v : d.getVulnerabilities()) {1041 0 if (firstEntry) {1042 0 firstEntry = false;1043 } else {1044 0 ids.append(", ");1045 }
1046 0 ids.append(v.getName());1047 0 }1048 0 if (ids.length() > 0) {1049 0 summary.append(d.getFileName()).append(" (");1050 0 firstEntry = true;1051 0 for (Identifier id : d.getIdentifiers()) {1052 0 if (firstEntry) {1053 0 firstEntry = false;1054 } else {1055 0 summary.append(", ");1056 }
1057 0 summary.append(id.getValue());1058 0 }1059 0 summary.append(") : ").append(ids).append(NEW_LINE);1060 }
1061 0 }1062 0 if (summary.length() > 0) {1063 0 final String msg = String.format("%n%n"1064 + "One or more dependencies were identified with known vulnerabilities:%n%n%s"1065 + "%n%nSee the dependency-check report for more details.%n%n", summary.toString());1066 0 LOGGER.log(Level.WARNING, msg);1067 }
1068 0 }1069 1070 }
21 *22 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long23 */24 62 public abstract class AbstractAnalyzer implements Analyzer {
}
33 *34 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long35 */36 }
40 *41 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long42 */43 8 public abstract class AbstractSuppressionAnalyzer extends AbstractAnalyzer {
}
22 *23 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long24 */25 14 public enum AnalysisPhase {}
27 *28 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long29 */30 }
26 *27 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long28 */29 }
56 *57 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long58 */59 2 public class ArchiveAnalyzer extends AbstractFileTypeAnalyzer {
}
}
56 *57 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long58 */59 2 public class CPEAnalyzer implements Analyzer {
}
191 6 boolean identifierAdded = false;
192 6 for (IndexEntry e : entries) {
193 43 LOGGER.fine(String.format("Verifying entry: %s", e.toString()));194 43 if (verifyEntry(e, dependency)) {
193 47 LOGGER.fine(String.format("Verifying entry: %s", e.toString()));194 47 if (verifyEntry(e, dependency)) {
195 2 final String vendor = e.getVendor();196 2 final String product = e.getProduct();197 2 LOGGER.fine(String.format("identified vendor/product: %s/%s", vendor, product));198 2 identifierAdded |= determineIdentifiers(dependency, vendor, product, confidence);
199 }
200 43 }
200 47 }
201 6 if (identifierAdded) {
202 1 break;203 220 11 final StringBuilder sb = new StringBuilder(txt.length() + (20 * ec.size()));
221 11 sb.append(' ').append(txt).append(' ');
222 11 for (Evidence e : ec.iterator(confidenceFilter)) {
223 40 String value = e.getValue();
223 42 String value = e.getValue();
224 225 //hack to get around the fact that lucene does a really good job of recognizing domains and not226 // splitting them. TODO - put together a better lucene analyzer specific to the domain.227 40 if (value.startsWith("http://")) {
227 42 if (value.startsWith("http://")) {
228 2 value = value.substring(7).replaceAll("\\.", " ");
229 }
230 40 if (value.startsWith("https://")) {230 42 if (value.startsWith("https://")) {231 0 value = value.substring(8).replaceAll("\\.", " ");232 }
233 40 if (sb.indexOf(" " + value + " ") < 0) {
234 35 sb.append(value).append(' ');233 42 if (sb.indexOf(" " + value + " ") < 0) {
234 37 sb.append(value).append(' ');235 }
236 40 }
236 42 }
237 11 return sb.toString().trim();238 }
265 6 final TopDocs docs = cpe.search(searchString, MAX_QUERY_RESULTS);266 156 for (ScoreDoc d : docs.scoreDocs) {
267 150 if (d.score >= 0.08) {
268 43 final Document doc = cpe.getDocument(d.doc);269 43 final IndexEntry entry = new IndexEntry();
270 43 entry.setVendor(doc.get(Fields.VENDOR));
271 43 entry.setProduct(doc.get(Fields.PRODUCT));
272 43 entry.setSearchScore(d.score);
273 43 if (!ret.contains(entry)) {274 43 ret.add(entry);
268 47 final Document doc = cpe.getDocument(d.doc);269 47 final IndexEntry entry = new IndexEntry();
270 47 entry.setVendor(doc.get(Fields.VENDOR));
271 47 entry.setProduct(doc.get(Fields.PRODUCT));
272 47 entry.setSearchScore(d.score);
273 47 if (!ret.contains(entry)) {274 47 ret.add(entry);
275 }
276 343 } else {344 12 final StringTokenizer tokens = new StringTokenizer(cleanText);
345 111 while (tokens.hasMoreElements()) {
346 99 final String word = tokens.nextToken();347 99 String temp = null;348 99 for (String weighted : weightedText) {
349 221 final String weightedStr = cleanseText(weighted);350 221 if (equalsIgnoreCaseAndNonAlpha(word, weightedStr)) {
345 159 while (tokens.hasMoreElements()) {
346 147 final String word = tokens.nextToken();347 147 String temp = null;348 147 for (String weighted : weightedText) {
349 341 final String weightedStr = cleanseText(weighted);350 341 if (equalsIgnoreCaseAndNonAlpha(word, weightedStr)) {
351 22 temp = LuceneUtils.escapeLuceneQuery(word) + WEIGHTING_BOOST;
352 22 if (!word.equalsIgnoreCase(weightedStr)) {353 0 temp += " " + LuceneUtils.escapeLuceneQuery(weightedStr) + WEIGHTING_BOOST;}
355 }
356 221 }
357 99 if (temp == null) {
358 77 temp = LuceneUtils.escapeLuceneQuery(word);
356 341 }
357 147 if (temp == null) {
358 125 temp = LuceneUtils.escapeLuceneQuery(word);
359 }
360 99 sb.append(" ").append(temp);361 99 }
360 147 sb.append(" ").append(temp);361 147 }
362 }
363 12 sb.append(" ) ");*/373 private String cleanseText(String text) {374 233 return text.replaceAll(CLEANSE_CHARACTER_RX, " ");
374 353 return text.replaceAll(CLEANSE_CHARACTER_RX, " ");
375 }
376 */384 private boolean equalsIgnoreCaseAndNonAlpha(String l, String r) {
385 221 if (l == null || r == null) {385 341 if (l == null || r == null) {386 0 return false;387 }
388 389 221 final String left = l.replaceAll(CLEANSE_NONALPHA_RX, "");
390 221 final String right = r.replaceAll(CLEANSE_NONALPHA_RX, "");
391 221 return left.equalsIgnoreCase(right);389 341 final String left = l.replaceAll(CLEANSE_NONALPHA_RX, "");
390 341 final String right = r.replaceAll(CLEANSE_NONALPHA_RX, "");
391 341 return left.equalsIgnoreCase(right);392 }
393 */402 private boolean verifyEntry(final IndexEntry entry, final Dependency dependency) {
403 43 boolean isValid = false;
403 47 boolean isValid = false;
404 405 43 if (collectionContainsString(dependency.getProductEvidence(), entry.getProduct())405 47 if (collectionContainsString(dependency.getProductEvidence(), entry.getProduct())406 && collectionContainsString(dependency.getVendorEvidence(), entry.getVendor())) {407 408 2 isValid = true;409 }
410 43 return isValid;410 47 return isValid;411 }
412 //</editor-fold>432 //TODO - likely need to change the split... not sure if this will work for CPE with special chars433 45 if (text == null) {433 49 if (text == null) {434 0 return false;435 }
436 45 final String[] words = text.split("[\\s_-]");
437 45 final List<String> list = new ArrayList<String>();
438 45 String tempWord = null;439 167 for (String word : words) {
436 49 final String[] words = text.split("[\\s_-]");
437 49 final List<String> list = new ArrayList<String>();
438 49 String tempWord = null;439 187 for (String word : words) {
440 /*441 so { "m", "core", "sample" } -> { "mcore", "sample" }443 */444 122 if (tempWord != null) {
445 2 list.add(tempWord + word);
446 2 tempWord = null;447 120 } else if (word.length() <= 2) {
448 2 tempWord = word;
444 138 if (tempWord != null) {
445 6 list.add(tempWord + word);
446 6 tempWord = null;447 132 } else if (word.length() <= 2) {
448 6 tempWord = word;
449 } else {450 118 list.add(word);
450 126 list.add(word);
451 }
452 }
453 45 if (tempWord != null && !list.isEmpty()) {453 49 if (tempWord != null && !list.isEmpty()) {454 0 final String tmp = list.get(list.size() - 1) + tempWord;455 0 list.add(tmp);456 }
457 45 boolean contains = true;
458 45 for (String word : list) {
459 120 contains &= ec.containsUsedString(word);
460 120 }
461 45 return contains;457 49 boolean contains = true;
458 49 for (String word : list) {
459 132 contains &= ec.containsUsedString(word);
460 132 }
461 49 return contains;462 }
463 }
Classes in this File Line Coverage Branch Coverage Complexity CentralAnalyzer 26% 13% 3.625;3.625 CentralAnalyzer 25% 13% 3.625;3.625 @@ -88,7 +88,7 @@35 import org.owasp.dependencycheck.dependency.Evidence;36 import org.owasp.dependencycheck.jaxb.pom.PomUtils;import org.owasp.dependencycheck.xml.pom.PomUtils;37 import org.owasp.dependencycheck.utils.DownloadFailedException;38 79 /**80 * Utility to read POM files.* Field indicating if the analyzer is enabled.81 */82 2 private PomUtils pomUtil = new PomUtils();
82 2 private final boolean enabled = checkEnabled();
83 /**84 * Field indicating if the analyzer is enabled./**85 */86 2 private final boolean enabled = checkEnabled();
87 88 /**89 * Determine whether to enable this analyzer or not.90 86 *91 87 * @return whether the analyzer should be enabled92 88 */93 89 @Override
94 90 public boolean isEnabled() {
95 0 return enabled;96 91 0 return enabled;92 }
97 93 98 94 /**99 95 * Determines if this analyzer is enabled.100 96 *101 97 * @return <code>true</code> if the analyzer is enabled; otherwise <code>false</code>102 98 */103 99 private boolean checkEnabled() {
104 2 boolean retval = false;
100 2 boolean retval = false;
101 102 try {103 2 if (Settings.getBoolean(Settings.KEYS.ANALYZER_CENTRAL_ENABLED)) {
104 1 if (!Settings.getBoolean(Settings.KEYS.ANALYZER_NEXUS_ENABLED)105 106 try {107 2 if (Settings.getBoolean(Settings.KEYS.ANALYZER_CENTRAL_ENABLED)) {
108 1 if (!Settings.getBoolean(Settings.KEYS.ANALYZER_NEXUS_ENABLED)109 || NexusAnalyzer.DEFAULT_URL.equals(Settings.getString(Settings.KEYS.ANALYZER_NEXUS_URL))) {110 1 LOGGER.fine("Enabling the Central analyzer");111 1 retval = true;112 106 1 LOGGER.fine("Enabling the Central analyzer");107 1 retval = true;108 } else {113 0 LOGGER.info("Nexus analyzer is enabled, disabling the Central Analyzer");114 109 0 LOGGER.info("Nexus analyzer is enabled, disabling the Central Analyzer");110 }
115 111 } else {116 1 LOGGER.info("Central analyzer disabled");117 112 1 LOGGER.info("Central analyzer disabled");113 }
118 0 } catch (InvalidSettingException ise) {119 0 LOGGER.warning("Invalid setting. Disabling the Central analyzer");120 2 }
121 2 return retval;122 114 0 } catch (InvalidSettingException ise) {115 0 LOGGER.warning("Invalid setting. Disabling the Central analyzer");116 2 }
117 2 return retval;118 }
123 119 124 120 /**125 121 * Initializes the analyzer once before any analysis is performed.126 122 *127 123 * @throws Exception if there's an error during initialization128 124 */129 125 @Override
130 126 public void initializeFileTypeAnalyzer() throws Exception {
131 0 LOGGER.fine("Initializing Central analyzer");132 0 LOGGER.fine(String.format("Central analyzer enabled: %s", isEnabled()));133 0 if (isEnabled()) {134 0 final String searchUrl = Settings.getString(Settings.KEYS.ANALYZER_CENTRAL_URL);135 0 LOGGER.fine(String.format("Central Analyzer URL: %s", searchUrl));136 0 searcher = new CentralSearch(new URL(searchUrl));127 0 LOGGER.fine("Initializing Central analyzer");128 0 LOGGER.fine(String.format("Central analyzer enabled: %s", isEnabled()));129 0 if (isEnabled()) {130 0 final String searchUrl = Settings.getString(Settings.KEYS.ANALYZER_CENTRAL_URL);131 0 LOGGER.fine(String.format("Central Analyzer URL: %s", searchUrl));132 0 searcher = new CentralSearch(new URL(searchUrl));133 }
134 0 }135 136 /**137 }
138 0 }139 140 /**141 * Returns the analyzer's name.142 138 *143 139 * @return the name of the analyzer144 140 */145 141 @Override
146 142 public String getName() {147 4 return ANALYZER_NAME;148 143 4 return ANALYZER_NAME;144 }
149 145 150 146 /**151 147 * Returns the key used in the properties file to to reference the analyzer's enabled property.152 148 *153 149 * @return the analyzer's enabled property setting key.154 150 */155 151 @Override
156 152 protected String getAnalyzerEnabledSettingKey() {157 2 return Settings.KEYS.ANALYZER_CENTRAL_ENABLED;158 153 2 return Settings.KEYS.ANALYZER_CENTRAL_ENABLED;154 }
159 155 160 156 /**161 157 * Returns the analysis phase under which the analyzer runs.162 158 *163 159 * @return the phase under which the analyzer runs164 160 */165 161 @Override
166 162 public AnalysisPhase getAnalysisPhase() {167 1 return ANALYSIS_PHASE;168 163 1 return ANALYSIS_PHASE;164 }
169 165 170 166 /**171 167 * Returns the extensions for which this Analyzer runs.172 168 *173 169 * @return the extensions for which this Analyzer runs174 170 */175 171 @Override
176 172 public Set<String> getSupportedExtensions() {177 0 return SUPPORTED_EXTENSIONS;178 173 0 return SUPPORTED_EXTENSIONS;174 }
179 175 180 176 /**181 177 * Performs the analysis.182 178 *183 179 * @param dependency the dependency to analyze184 180 * @param engine the engine185 181 * @throws AnalysisException when there's an exception during analysis186 182 */187 183 @Override
188 184 public void analyzeFileType(Dependency dependency, Engine engine) throws AnalysisException {
189 0 if (errorFlag || !isEnabled()) {190 0 return;191 185 0 if (errorFlag || !isEnabled()) {186 0 return;187 }
192 188 193 189 try {194 0 final List<MavenArtifact> mas = searcher.searchSha1(dependency.getSha1sum());195 0 final Confidence confidence = mas.size() > 1 ? Confidence.HIGH : Confidence.HIGHEST;196 0 for (MavenArtifact ma : mas) {197 0 LOGGER.fine(String.format("Central analyzer found artifact (%s) for dependency (%s)", ma.toString(), dependency.getFileName()));198 0 dependency.addAsEvidence("central", ma, confidence);199 0 boolean pomAnalyzed = false;200 0 for (Evidence e : dependency.getVendorEvidence()) {201 0 if ("pom".equals(e.getSource())) {202 0 pomAnalyzed = true;203 0 break;190 0 final List<MavenArtifact> mas = searcher.searchSha1(dependency.getSha1sum());191 0 final Confidence confidence = mas.size() > 1 ? Confidence.HIGH : Confidence.HIGHEST;192 0 for (MavenArtifact ma : mas) {193 0 LOGGER.fine(String.format("Central analyzer found artifact (%s) for dependency (%s)", ma.toString(), dependency.getFileName()));194 0 dependency.addAsEvidence("central", ma, confidence);195 0 boolean pomAnalyzed = false;196 0 for (Evidence e : dependency.getVendorEvidence()) {197 0 if ("pom".equals(e.getSource())) {198 0 pomAnalyzed = true;199 0 break;200 }
201 0 }202 0 if (!pomAnalyzed && ma.getPomUrl() != null) {203 0 File pomFile = null;204 }
205 0 }206 0 if (!pomAnalyzed && ma.getPomUrl() != null) {207 0 File pomFile = null;208 try {209 0 final File baseDir = Settings.getTempDirectory();210 0 pomFile = File.createTempFile("pom", ".xml", baseDir);211 0 if (!pomFile.delete()) {212 0 final String msg = String.format("Unable to fetch pom.xml for %s from Central; "213 205 0 final File baseDir = Settings.getTempDirectory();206 0 pomFile = File.createTempFile("pom", ".xml", baseDir);207 0 if (!pomFile.delete()) {208 0 final String msg = String.format("Unable to fetch pom.xml for %s from Central; "209 + "this could result in undetected CPE/CVEs.", dependency.getFileName());214 0 LOGGER.warning(msg);215 0 LOGGER.fine("Unable to delete temp file");210 0 LOGGER.warning(msg);211 0 LOGGER.fine("Unable to delete temp file");212 }
213 0 LOGGER.fine(String.format("Downloading %s", ma.getPomUrl()));214 0 Downloader.fetchFile(new URL(ma.getPomUrl()), pomFile);215 0 PomUtils.analyzePOM(dependency, pomFile);216 }
217 0 LOGGER.fine(String.format("Downloading %s", ma.getPomUrl()));218 0 Downloader.fetchFile(new URL(ma.getPomUrl()), pomFile);219 0 pomUtil.analyzePOM(dependency, pomFile);220 221 0 } catch (DownloadFailedException ex) {222 0 final String msg = String.format("Unable to download pom.xml for %s from Central; "223 217 0 } catch (DownloadFailedException ex) {218 0 final String msg = String.format("Unable to download pom.xml for %s from Central; "219 + "this could result in undetected CPE/CVEs.", dependency.getFileName());224 0 LOGGER.warning(msg);225 220 0 LOGGER.warning(msg);221 } finally {226 0 if (pomFile != null && !FileUtils.deleteQuietly(pomFile)) {227 0 pomFile.deleteOnExit();228 222 0 if (pomFile != null && !FileUtils.deleteQuietly(pomFile)) {223 0 pomFile.deleteOnExit();224 }
229 225 }
230 226 }
231 227 232 0 }233 0 } catch (IllegalArgumentException iae) {234 0 LOGGER.info(String.format("invalid sha1-hash on %s", dependency.getFileName()));235 0 } catch (FileNotFoundException fnfe) {236 0 LOGGER.fine(String.format("Artifact not found in repository: '%s", dependency.getFileName()));237 0 } catch (IOException ioe) {238 0 LOGGER.log(Level.FINE, "Could not connect to Central search", ioe);239 0 errorFlag = true;240 0 }241 0 }242 228 0 }229 0 } catch (IllegalArgumentException iae) {230 0 LOGGER.info(String.format("invalid sha1-hash on %s", dependency.getFileName()));231 0 } catch (FileNotFoundException fnfe) {232 0 LOGGER.fine(String.format("Artifact not found in repository: '%s", dependency.getFileName()));233 0 } catch (IOException ioe) {234 0 LOGGER.log(Level.FINE, "Could not connect to Central search", ioe);235 0 errorFlag = true;236 0 }237 0 }238 243 239 }
28 *29 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long30 */31 2 public class CpeSuppressionAnalyzer extends AbstractSuppressionAnalyzer {
}
44 *45 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long46 */47 6 public class DependencyBundlingAnalyzer extends AbstractAnalyzer implements Analyzer {
}
40 *41 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long42 */43 5 public class FalsePositiveAnalyzer extends AbstractAnalyzer {
}
31 *32 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long33 */34 7 public class FileNameAnalyzer extends AbstractAnalyzer implements Analyzer {
}
22 *23 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long24 */25 }
31 *32 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long33 */34 5 public class HintAnalyzer extends AbstractAnalyzer implements Analyzer {
//sun/oracle problem119 2 final Iterator<Evidence> itr = dependency.getVendorEvidence().iterator();120 2 final List<Evidence> newEntries = new ArrayList<Evidence>();
121 27 while (itr.hasNext()) {
122 25 final Evidence e = itr.next();123 25 if ("sun".equalsIgnoreCase(e.getValue(false))) {121 28 while (itr.hasNext()) {
122 26 final Evidence e = itr.next();123 26 if ("sun".equalsIgnoreCase(e.getValue(false))) {124 0 final Evidence newEvidence = new Evidence(e.getSource() + " (hint)", e.getName(), "oracle", e.getConfidence());125 0 newEntries.add(newEvidence);126 0 } else if ("oracle".equalsIgnoreCase(e.getValue(false))) {128 0 newEntries.add(newEvidence);129 }
130 25 }
130 26 }
131 2 for (Evidence e : newEntries) {132 0 dependency.getVendorEvidence().addEvidence(e);133 0 }}
Classes in this File Line Coverage Branch Coverage Complexity JarAnalyzer 58% 50% 7.393939393939394;7.394 JarAnalyzer$ClassNameInformation 80% 80% 7.393939393939394;7.394 JarAnalyzer 62% 50% 7.15625;7.156 JarAnalyzer$ClassNameInformation 80% 80% 7.15625;7.156 @@ -129,19 +129,19 @@55 import org.owasp.dependencycheck.dependency.EvidenceCollection;56 import org.owasp.dependencycheck.jaxb.pom.PomUtils;import org.owasp.dependencycheck.xml.pom.License;57 import org.owasp.dependencycheck.jaxb.pom.generated.License;import org.owasp.dependencycheck.xml.pom.PomUtils;58 import org.owasp.dependencycheck.jaxb.pom.generated.Model;import org.owasp.dependencycheck.xml.pom.Model;59 import org.owasp.dependencycheck.jaxb.pom.generated.Organization;60 import org.owasp.dependencycheck.utils.FileUtils;61 60 import org.owasp.dependencycheck.utils.NonClosingStream;62 61 import org.owasp.dependencycheck.utils.Settings;62 import org.owasp.dependencycheck.xml.pom.PomParser;63 import org.xml.sax.InputSource;64 67 *68 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long69 */70 151 152 /**//</editor-fold>153 * The POM Utility for parsing POM files./**154 */155 7 private PomUtils pomUtils = null;
156 //</editor-fold>157 158 /**159 * Constructs a new JarAnalyzer.160 155 */161 7 public JarAnalyzer() {162 7 pomUtils = new PomUtils();163 7 }
164 156 7 public JarAnalyzer() {157 7 }
158 165 159 //<editor-fold defaultstate="collapsed" desc="All standard implmentation details of Analyzer">166 160 /**167 161 * The name of the analyzer.168 162 */169 163 private static final String ANALYZER_NAME = "Jar Analyzer";
170 164 /**171 165 * The phase that this analyzer is intended to run in.172 166 */173 1 private static final AnalysisPhase ANALYSIS_PHASE = AnalysisPhase.INFORMATION_COLLECTION;
174 167 1 private static final AnalysisPhase ANALYSIS_PHASE = AnalysisPhase.INFORMATION_COLLECTION;
168 /**175 169 * The set of file extensions supported by this analyzer.176 170 */177 1 private static final Set<String> EXTENSIONS = newHashSet("jar", "war");
178 171 1 private static final Set<String> EXTENSIONS = newHashSet("jar", "war");
172 179 173 /**180 174 * Returns a list of file EXTENSIONS supported by this analyzer.181 175 *182 176 * @return a list of file EXTENSIONS supported by this analyzer.183 177 */184 178 @Override
185 179 public Set<String> getSupportedExtensions() {186 852 return EXTENSIONS;187 180 852 return EXTENSIONS;181 }
188 182 189 183 /**190 184 * Returns the name of the analyzer.191 185 *192 186 * @return the name of the analyzer.193 187 */194 188 @Override
195 189 public String getName() {196 5 return ANALYZER_NAME;197 190 5 return ANALYZER_NAME;191 }
198 192 199 193 /**200 194 * Returns the phase that the analyzer is intended to run in.201 195 *202 196 * @return the phase that the analyzer is intended to run in.203 197 */204 198 public AnalysisPhase getAnalysisPhase() {205 1 return ANALYSIS_PHASE;206 199 1 return ANALYSIS_PHASE;200 }
207 201 //</editor-fold>208 202 209 203 /**210 204 * Returns the key used in the properties file to reference the analyzer's enabled property.211 205 *212 206 * @return the analyzer's enabled property setting key213 207 */214 208 @Override
215 209 protected String getAnalyzerEnabledSettingKey() {216 7 return Settings.KEYS.ANALYZER_JAR_ENABLED;217 210 7 return Settings.KEYS.ANALYZER_JAR_ENABLED;211 }
218 212 219 213 /**220 214 * Loads a specified JAR file and collects information from the manifest and checksums to identify the correct CPE221 215 * information.222 216 *223 217 * @param dependency the dependency to analyze.224 218 * @param engine the engine that is scanning the dependencies225 219 * @throws AnalysisException is thrown if there is an error reading the JAR file.226 220 */227 221 @Override
228 222 public void analyzeFileType(Dependency dependency, Engine engine) throws AnalysisException {
229 223 try {230 5 final List<ClassNameInformation> classNames = collectClassNames(dependency);231 5 final String fileName = dependency.getFileName().toLowerCase();232 5 if (classNames.isEmpty()233 224 5 final List<ClassNameInformation> classNames = collectClassNames(dependency);225 5 final String fileName = dependency.getFileName().toLowerCase();226 5 if (classNames.isEmpty()227 && (fileName.endsWith("-sources.jar")234 228 || fileName.endsWith("-javadoc.jar")235 229 || fileName.endsWith("-src.jar")236 230 || fileName.endsWith("-doc.jar"))) {237 0 engine.getDependencies().remove(dependency);238 231 0 engine.getDependencies().remove(dependency);232 }
239 5 final boolean hasManifest = parseManifest(dependency, classNames);
240 5 final boolean hasPOM = analyzePOM(dependency, classNames, engine);
241 5 final boolean addPackagesAsEvidence = !(hasManifest && hasPOM);
242 5 analyzePackageNames(classNames, dependency, addPackagesAsEvidence);
243 0 } catch (IOException ex) {244 0 throw new AnalysisException("Exception occurred reading the JAR file.", ex);245 5 }
246 5 }
247 233 5 final boolean hasManifest = parseManifest(dependency, classNames);
234 5 final boolean hasPOM = analyzePOM(dependency, classNames, engine);
235 5 final boolean addPackagesAsEvidence = !(hasManifest && hasPOM);
236 5 analyzePackageNames(classNames, dependency, addPackagesAsEvidence);
237 0 } catch (IOException ex) {238 0 throw new AnalysisException("Exception occurred reading the JAR file.", ex);239 5 }
240 5 }
241 248 242 /**249 243 * Attempts to find a pom.xml within the JAR file. If found it extracts information and adds it to the evidence. This will250 244 * attempt to interpolate the strings contained within the pom.properties if one exists.251 245 *252 246 * @param dependency the dependency being analyzed253 247 * @param classes a collection of class name information254 248 * @param engine the analysis engine, used to add additional dependencies255 249 * @throws AnalysisException is thrown if there is an exception parsing the pom256 250 * @return whether or not evidence was added to the dependency257 251 */258 252 protected boolean analyzePOM(Dependency dependency, List<ClassNameInformation> classes, Engine engine) throws AnalysisException {
259 5 boolean foundSomething = false;
260 253 5 boolean foundSomething = false;
254 final JarFile jar;261 255 try {262 5 jar = new JarFile(dependency.getActualFilePath());263 0 } catch (IOException ex) {264 0 final String msg = String.format("Unable to read JarFile '%s'.", dependency.getActualFilePath());265 256 5 jar = new JarFile(dependency.getActualFilePath());257 0 } catch (IOException ex) {258 0 final String msg = String.format("Unable to read JarFile '%s'.", dependency.getActualFilePath());259 //final AnalysisException ax = new AnalysisException(msg, ex);266 0 LOGGER.log(Level.WARNING, msg);267 0 LOGGER.log(Level.FINE, "", ex);268 0 return false;269 5 }
270 260 0 LOGGER.log(Level.WARNING, msg);261 0 LOGGER.log(Level.FINE, "", ex);262 0 return false;263 5 }
264 List<String> pomEntries;
271 265 try {272 5 pomEntries = retrievePomListing(jar);
273 0 } catch (IOException ex) {274 0 final String msg = String.format("Unable to read Jar file entries in '%s'.", dependency.getActualFilePath());275 266 5 pomEntries = retrievePomListing(jar);
267 0 } catch (IOException ex) {268 0 final String msg = String.format("Unable to read Jar file entries in '%s'.", dependency.getActualFilePath());269 //final AnalysisException ax = new AnalysisException(msg, ex);276 0 LOGGER.log(Level.WARNING, msg);277 0 LOGGER.log(Level.FINE, msg, ex);278 0 return false;279 5 }
280 5 File externalPom = null;281 5 if (pomEntries.isEmpty()) {
282 4 String pomPath = dependency.getActualFilePath();
283 4 pomPath = pomPath.substring(0, pomPath.lastIndexOf('.')) + ".pom";
284 4 externalPom = new File(pomPath);285 4 if (externalPom.isFile()) {286 0 pomEntries.add(pomPath);287 270 0 LOGGER.log(Level.WARNING, msg);271 0 LOGGER.log(Level.FINE, msg, ex);272 0 return false;273 5 }
274 5 File externalPom = null;275 5 if (pomEntries.isEmpty()) {
276 4 String pomPath = dependency.getActualFilePath();
277 4 pomPath = pomPath.substring(0, pomPath.lastIndexOf('.')) + ".pom";
278 4 externalPom = new File(pomPath);279 4 if (externalPom.isFile()) {280 0 pomEntries.add(pomPath);281 } else {288 4 return false;
289 282 4 return false;
283 }
290 284 }
291 1 for (String path : pomEntries) {
292 1 Properties pomProperties = null;293 285 1 for (String path : pomEntries) {
286 1 LOGGER.fine(String.format("Reading pom entry: %s", path));287 1 Properties pomProperties = null;288 try {294 1 if (externalPom == null) {295 1 pomProperties = retrievePomProperties(path, jar);
289 1 if (externalPom == null) {290 1 pomProperties = retrievePomProperties(path, jar);
291 }
292 0 } catch (IOException ex) {293 0 LOGGER.log(Level.FINEST, "ignore this, failed reading a non-existent pom.properties", ex);294 1 }
295 1 Model pom = null;296 }
297 0 } catch (IOException ex) {298 0 LOGGER.log(Level.FINEST, "ignore this, failed reading a non-existent pom.properties", ex);299 1 }
300 1 Model pom = null;301 try {302 1 if (pomEntries.size() > 1) {303 297 1 if (pomEntries.size() > 1) {298 //extract POM to its own directory and add it as its own dependency304 0 final Dependency newDependency = new Dependency();305 0 pom = extractPom(path, jar, newDependency);306 299 0 final Dependency newDependency = new Dependency();300 0 pom = extractPom(path, jar, newDependency);301 307 0 final String displayPath = String.format("%s%s%s",308 302 0 final String displayPath = String.format("%s%s%s",303 dependency.getFilePath(),
309 304 File.separator,
310 305 path);
311 0 final String displayName = String.format("%s%s%s",312 306 0 final String displayName = String.format("%s%s%s",307 dependency.getFileName(),
313 308 File.separator,
314 309 path);
315 310 316 0 newDependency.setFileName(displayName);317 0 newDependency.setFilePath(displayPath);318 0 setPomEvidence(newDependency, pom, pomProperties, null);319 0 engine.getDependencies().add(newDependency);320 0 Collections.sort(engine.getDependencies());321 0 } else {322 1 if (externalPom == null) {323 1 pom = retrievePom(path, jar);
324 311 0 newDependency.setFileName(displayName);312 0 newDependency.setFilePath(displayPath);313 0 setPomEvidence(newDependency, pom, pomProperties, null);314 0 engine.getDependencies().add(newDependency);315 0 Collections.sort(engine.getDependencies());316 0 } else {317 1 if (externalPom == null) {318 1 pom = PomUtils.readPom(path, jar);
319 } else {325 0 pom = pomUtils.readPom(externalPom);326 320 0 pom = PomUtils.readPom(externalPom);321 }
327 1 foundSomething |= setPomEvidence(dependency, pom, pomProperties, classes);
328 322 1 foundSomething |= setPomEvidence(dependency, pom, pomProperties, classes);
323 }
329 0 } catch (AnalysisException ex) {330 0 final String msg = String.format("An error occured while analyzing '%s'.", dependency.getActualFilePath());331 0 LOGGER.log(Level.WARNING, msg);332 0 LOGGER.log(Level.FINE, "", ex);333 1 }
334 1 }
335 1 return foundSomething;336 324 0 } catch (AnalysisException ex) {325 0 final String msg = String.format("An error occured while analyzing '%s'.", dependency.getActualFilePath());326 0 LOGGER.log(Level.WARNING, msg);327 0 LOGGER.log(Level.FINE, "", ex);328 1 }
329 1 }
330 1 return foundSomething;331 }
337 332 338 333 /**339 334 * Given a path to a pom.xml within a JarFile, this method attempts to load a sibling pom.properties if one exists.340 335 *341 336 * @param path the path to the pom.xml within the JarFile342 337 * @param jar the JarFile to load the pom.properties from343 338 * @return a Properties object or null if no pom.properties was found344 339 * @throws IOException thrown if there is an exception reading the pom.properties345 340 */346 341 private Properties retrievePomProperties(String path, final JarFile jar) throws IOException {
347 1 Properties pomProperties = null;348 1 final String propPath = path.substring(0, path.length() - 7) + "pom.properies";
349 1 final ZipEntry propEntry = jar.getEntry(propPath);350 1 if (propEntry != null) {351 0 Reader reader = null;342 1 Properties pomProperties = null;343 1 final String propPath = path.substring(0, path.length() - 7) + "pom.properies";
344 1 final ZipEntry propEntry = jar.getEntry(propPath);345 1 if (propEntry != null) {346 0 Reader reader = null;347 try {348 0 reader = new InputStreamReader(jar.getInputStream(propEntry), "UTF-8");349 0 pomProperties = new Properties();350 0 pomProperties.load(reader);351 0 LOGGER.fine(String.format("Read pom.properties: %s", propPath));352 try {353 0 reader = new InputStreamReader(jar.getInputStream(propEntry), "UTF-8");354 0 pomProperties = new Properties();355 0 pomProperties.load(reader);356 } finally {357 0 if (reader != null) {358 353 0 if (reader != null) {354 try {359 0 reader.close();360 0 } catch (IOException ex) {361 0 LOGGER.log(Level.FINEST, "close error", ex);362 0 }363 355 0 reader.close();356 0 } catch (IOException ex) {357 0 LOGGER.log(Level.FINEST, "close error", ex);358 0 }359 }
360 }
361 }
362 1 return pomProperties;363 }
364 }
365 }
366 1 return pomProperties;367 }
368 369 /**370 366 * Searches a JarFile for pom.xml entries and returns a listing of these entries.371 367 *372 368 * @param jar the JarFile to search373 369 * @return a list of pom.xml entries374 370 * @throws IOException thrown if there is an exception reading a JarEntry375 371 */376 372 private List<String> retrievePomListing(final JarFile jar) throws IOException {
377 5 final List<String> pomEntries = new ArrayList<String>();
378 5 final Enumeration<JarEntry> entries = jar.entries();379 1848 while (entries.hasMoreElements()) {
380 1843 final JarEntry entry = entries.nextElement();381 1843 final String entryName = (new File(entry.getName())).getName().toLowerCase();
382 1843 if (!entry.isDirectory() && "pom.xml".equals(entryName)) {
383 1 pomEntries.add(entry.getName());
373 5 final List<String> pomEntries = new ArrayList<String>();
374 5 final Enumeration<JarEntry> entries = jar.entries();375 1848 while (entries.hasMoreElements()) {
376 1843 final JarEntry entry = entries.nextElement();377 1843 final String entryName = (new File(entry.getName())).getName().toLowerCase();
378 1843 if (!entry.isDirectory() && "pom.xml".equals(entryName)) {
379 1 LOGGER.fine(String.format("POM Entry found: %s", entry.getName()));380 1 pomEntries.add(entry.getName());
381 }
382 1843 }
383 5 return pomEntries;384 }
385 1843 }
386 5 return pomEntries;}
385 386 /**387 }
* Retrieves the specified POM from a jar file and converts it to a Model.388 *389 /*** @param path the path to the pom.xml file within the jar file390 * Retrieves the specified POM from a jar file and converts it to a Model.* @param jar the jar file to extract the pom from391 *392 * @param path the path to the pom.xml file within the jar file393 * @param jar the jar file to extract the pom from394 * @param dependency the dependency being analyzed395 392 * @return returns the POM object393 * @throws AnalysisException is thrown if there is an exception extracting or parsing the POM394 * {@link org.owasp.dependencycheck.jaxb.pom.generated.Model} object395 */396 * @throws AnalysisException is thrown if there is an exception extracting or parsing the POM397 * {@link org.owasp.dependencycheck.jaxb.pom.generated.Model} object398 */399 private Model extractPom(String path, JarFile jar, Dependency dependency) throws AnalysisException {
400 0 InputStream input = null;401 0 FileOutputStream fos = null;402 0 BufferedOutputStream bos = null;403 0 final File tmpDir = getNextTempDirectory();404 0 final File file = new File(tmpDir, "pom.xml");405 397 0 InputStream input = null;398 0 FileOutputStream fos = null;399 0 BufferedOutputStream bos = null;400 0 final File tmpDir = getNextTempDirectory();401 0 final File file = new File(tmpDir, "pom.xml");402 try {406 0 final ZipEntry entry = jar.getEntry(path);407 0 input = jar.getInputStream(entry);408 0 fos = new FileOutputStream(file);409 0 bos = new BufferedOutputStream(fos, BUFFER_SIZE);410 403 0 final ZipEntry entry = jar.getEntry(path);404 0 input = jar.getInputStream(entry);405 0 fos = new FileOutputStream(file);406 0 bos = new BufferedOutputStream(fos, BUFFER_SIZE);407 int count;411 0 final byte[] data = new byte[BUFFER_SIZE];412 0 while ((count = input.read(data, 0, BUFFER_SIZE)) != -1) {413 0 bos.write(data, 0, count);414 408 0 final byte[] data = new byte[BUFFER_SIZE];409 0 while ((count = input.read(data, 0, BUFFER_SIZE)) != -1) {410 0 bos.write(data, 0, count);411 }
415 0 bos.flush();416 0 dependency.setActualFilePath(file.getAbsolutePath());417 0 } catch (IOException ex) {418 0 final String msg = String.format("An error occurred reading '%s' from '%s'.", path, dependency.getFilePath());419 0 LOGGER.warning(msg);420 0 LOGGER.log(Level.SEVERE, "", ex);421 412 0 bos.flush();413 0 dependency.setActualFilePath(file.getAbsolutePath());414 0 } catch (IOException ex) {415 0 final String msg = String.format("An error occurred reading '%s' from '%s'.", path, dependency.getFilePath());416 0 LOGGER.warning(msg);417 0 LOGGER.log(Level.SEVERE, "", ex);418 } finally {422 0 closeStream(bos);423 0 closeStream(fos);424 0 closeStream(input);425 0 }426 0 Model model = null;427 0 FileInputStream fis = null;419 0 closeStream(bos);420 0 closeStream(fos);421 0 closeStream(input);422 0 }423 0 Model model = PomUtils.readPom(file);424 0 return model;425 }
426 427 /**428 try {429 0 fis = new FileInputStream(file);430 0 final InputStreamReader reader = new InputStreamReader(fis, "UTF-8");431 0 final InputSource xml = new InputSource(reader);432 0 final SAXSource source = new SAXSource(xml);433 0 model = pomUtils.readPom(source);434 0 } catch (FileNotFoundException ex) {435 0 final String msg = String.format("Unable to parse pom '%s' in jar '%s' (File Not Found)", path, jar.getName());436 0 LOGGER.log(Level.WARNING, msg);437 0 LOGGER.log(Level.FINE, "", ex);438 0 throw new AnalysisException(ex);439 0 } catch (UnsupportedEncodingException ex) {440 0 final String msg = String.format("Unable to parse pom '%s' in jar '%s' (IO Exception)", path, jar.getName());441 0 LOGGER.log(Level.WARNING, msg);442 0 LOGGER.log(Level.FINE, "", ex);443 0 throw new AnalysisException(ex);444 0 } catch (AnalysisException ex) {445 0 final String msg = String.format("Unable to parse pom '%s' in jar '%s'", path, jar.getName());446 0 LOGGER.log(Level.WARNING, msg);447 0 LOGGER.log(Level.FINE, "", ex);448 0 throw ex;449 } finally {450 0 closeStream(fis);451 0 }452 0 return model;453 }
454 455 /**456 * Silently closes an input stream ignoring errors.457 429 *458 430 * @param stream an input stream to close459 431 */460 432 private void closeStream(InputStream stream) {
461 0 if (stream != null) {462 433 0 if (stream != null) {434 try {463 0 stream.close();464 0 } catch (IOException ex) {465 0 LOGGER.log(Level.FINEST, null, ex);466 0 }467 435 0 stream.close();436 0 } catch (IOException ex) {437 0 LOGGER.log(Level.FINEST, null, ex);438 0 }439 }
468 0 }469 440 0 }441 470 442 /**471 443 * Silently closes an output stream ignoring errors.472 444 *473 445 * @param stream an output stream to close474 446 */475 447 private void closeStream(OutputStream stream) {
476 0 if (stream != null) {477 448 0 if (stream != null) {449 try {478 0 stream.close();479 0 } catch (IOException ex) {480 0 LOGGER.log(Level.FINEST, null, ex);481 0 }482 450 0 stream.close();451 0 } catch (IOException ex) {452 0 LOGGER.log(Level.FINEST, null, ex);453 0 }454 }
483 0 }484 455 0 }456 485 457 /**486 * Retrieves the specified POM from a jar file and converts it to a Model.487 *488 * @param path the path to the pom.xml file within the jar file489 * @param jar the jar file to extract the pom from490 * @return returns a491 * @throws AnalysisException is thrown if there is an exception extracting or parsing the POM492 * {@link org.owasp.dependencycheck.jaxb.pom.generated.Model} object493 */494 private Model retrievePom(String path, JarFile jar) throws AnalysisException {
495 1 final ZipEntry entry = jar.getEntry(path);496 1 Model model = null;497 1 if (entry != null) { //should never be null498 try {499 1 final NonClosingStream stream = new NonClosingStream(jar.getInputStream(entry));
500 1 final InputStreamReader reader = new InputStreamReader(stream, "UTF-8");
501 1 final InputSource xml = new InputSource(reader);
502 1 final SAXSource source = new SAXSource(xml);
503 1 model = pomUtils.readPom(source);
504 0 } catch (SecurityException ex) {505 0 final String msg = String.format("Unable to parse pom '%s' in jar '%s'; invalid signature", path, jar.getName());506 0 LOGGER.log(Level.WARNING, msg);507 0 LOGGER.log(Level.FINE, null, ex);508 0 throw new AnalysisException(ex);509 0 } catch (IOException ex) {510 0 final String msg = String.format("Unable to parse pom '%s' in jar '%s' (IO Exception)", path, jar.getName());511 0 LOGGER.log(Level.WARNING, msg);512 0 LOGGER.log(Level.FINE, "", ex);513 0 throw new AnalysisException(ex);514 0 } catch (Throwable ex) {515 0 final String msg = String.format("Unexpected error during parsing of the pom '%s' in jar '%s'", path, jar.getName());516 0 LOGGER.log(Level.WARNING, msg);517 0 LOGGER.log(Level.FINE, "", ex);518 0 throw new AnalysisException(ex);519 1 }
520 }
521 1 return model;522 }
523 524 /**525 458 * Sets evidence from the pom on the supplied dependency.526 459 *527 460 * @param dependency the dependency to set data on528 461 * @param pom the information from the pom529 462 * @param pomProperties the pom properties file (null if none exists)530 463 * @param classes a collection of ClassNameInformation - containing data about the fully qualified class names within the JAR531 464 * file being analyzed532 465 * @return true if there was evidence within the pom that we could use; otherwise false533 466 */534 467 private boolean setPomEvidence(Dependency dependency, Model pom, Properties pomProperties, List<ClassNameInformation> classes) {
535 1 boolean foundSomething = false;
536 1 boolean addAsIdentifier = true;
537 1 if (pom == null) {538 0 return foundSomething;539 468 1 boolean foundSomething = false;
469 1 boolean addAsIdentifier = true;
470 1 if (pom == null) {471 0 return foundSomething;472 }
540 1 String groupid = interpolateString(pom.getGroupId(), pomProperties);
541 1 String parentGroupId = null;542 473 1 String groupid = interpolateString(pom.getGroupId(), pomProperties);
474 1 String parentGroupId = null;475 543 1 if (pom.getParent() != null) {544 1 parentGroupId = interpolateString(pom.getParent().getGroupId(), pomProperties);
545 1 if ((groupid == null || groupid.isEmpty()) && parentGroupId != null && !parentGroupId.isEmpty()) {546 0 groupid = parentGroupId;547 476 1 if (pom.getParentGroupId() != null) {477 1 parentGroupId = interpolateString(pom.getParentGroupId(), pomProperties);
478 1 if ((groupid == null || groupid.isEmpty()) && parentGroupId != null && !parentGroupId.isEmpty()) {479 0 groupid = parentGroupId;480 }
548 481 }
549 1 final String originalGroupID = groupid;550 482 1 final String originalGroupID = groupid;483 551 1 if (groupid != null && !groupid.isEmpty()) {552 1 foundSomething = true;553 1 dependency.getVendorEvidence().addEvidence("pom", "groupid", groupid, Confidence.HIGHEST);
554 1 dependency.getProductEvidence().addEvidence("pom", "groupid", groupid, Confidence.LOW);
555 1 addMatchingValues(classes, groupid, dependency.getVendorEvidence());
556 1 addMatchingValues(classes, groupid, dependency.getProductEvidence());
557 1 if (parentGroupId != null && !parentGroupId.isEmpty() && !parentGroupId.equals(groupid)) {558 0 dependency.getVendorEvidence().addEvidence("pom", "parent-groupid", parentGroupId, Confidence.MEDIUM);559 0 dependency.getProductEvidence().addEvidence("pom", "parent-groupid", parentGroupId, Confidence.LOW);560 0 addMatchingValues(classes, parentGroupId, dependency.getVendorEvidence());561 0 addMatchingValues(classes, parentGroupId, dependency.getProductEvidence());562 484 1 if (groupid != null && !groupid.isEmpty()) {485 1 foundSomething = true;486 1 dependency.getVendorEvidence().addEvidence("pom", "groupid", groupid, Confidence.HIGHEST);
487 1 dependency.getProductEvidence().addEvidence("pom", "groupid", groupid, Confidence.LOW);
488 1 addMatchingValues(classes, groupid, dependency.getVendorEvidence());
489 1 addMatchingValues(classes, groupid, dependency.getProductEvidence());
490 1 if (parentGroupId != null && !parentGroupId.isEmpty() && !parentGroupId.equals(groupid)) {491 0 dependency.getVendorEvidence().addEvidence("pom", "parent-groupid", parentGroupId, Confidence.MEDIUM);492 0 dependency.getProductEvidence().addEvidence("pom", "parent-groupid", parentGroupId, Confidence.LOW);493 0 addMatchingValues(classes, parentGroupId, dependency.getVendorEvidence());494 0 addMatchingValues(classes, parentGroupId, dependency.getProductEvidence());495 }
563 496 } else {564 0 addAsIdentifier = false;565 497 0 addAsIdentifier = false;498 }
566 499 567 1 String artifactid = interpolateString(pom.getArtifactId(), pomProperties);
568 1 String parentArtifactId = null;569 500 1 String artifactid = interpolateString(pom.getArtifactId(), pomProperties);
501 1 String parentArtifactId = null;502 570 1 if (pom.getParent() != null) {571 1 parentArtifactId = interpolateString(pom.getParent().getArtifactId(), pomProperties);
572 1 if ((artifactid == null || artifactid.isEmpty()) && parentArtifactId != null && !parentArtifactId.isEmpty()) {573 0 artifactid = parentArtifactId;574 503 1 if (pom.getParentArtifactId() != null) {504 1 parentArtifactId = interpolateString(pom.getParentArtifactId(), pomProperties);
505 1 if ((artifactid == null || artifactid.isEmpty()) && parentArtifactId != null && !parentArtifactId.isEmpty()) {506 0 artifactid = parentArtifactId;507 }
575 508 }
576 1 final String originalArtifactID = artifactid;577 1 if (artifactid != null && !artifactid.isEmpty()) {578 1 if (artifactid.startsWith("org.") || artifactid.startsWith("com.")) {579 0 artifactid = artifactid.substring(4);580 509 1 final String originalArtifactID = artifactid;510 1 if (artifactid != null && !artifactid.isEmpty()) {511 1 if (artifactid.startsWith("org.") || artifactid.startsWith("com.")) {512 0 artifactid = artifactid.substring(4);513 }
581 1 foundSomething = true;582 1 dependency.getProductEvidence().addEvidence("pom", "artifactid", artifactid, Confidence.HIGHEST);
583 1 dependency.getVendorEvidence().addEvidence("pom", "artifactid", artifactid, Confidence.LOW);
584 1 addMatchingValues(classes, artifactid, dependency.getVendorEvidence());
585 1 addMatchingValues(classes, artifactid, dependency.getProductEvidence());
586 1 if (parentArtifactId != null && !parentArtifactId.isEmpty() && !parentArtifactId.equals(artifactid)) {587 1 dependency.getProductEvidence().addEvidence("pom", "parent-artifactid", parentArtifactId, Confidence.MEDIUM);
588 1 dependency.getVendorEvidence().addEvidence("pom", "parent-artifactid", parentArtifactId, Confidence.LOW);
589 1 addMatchingValues(classes, parentArtifactId, dependency.getVendorEvidence());
590 1 addMatchingValues(classes, parentArtifactId, dependency.getProductEvidence());
591 514 1 foundSomething = true;515 1 dependency.getProductEvidence().addEvidence("pom", "artifactid", artifactid, Confidence.HIGHEST);
516 1 dependency.getVendorEvidence().addEvidence("pom", "artifactid", artifactid, Confidence.LOW);
517 1 addMatchingValues(classes, artifactid, dependency.getVendorEvidence());
518 1 addMatchingValues(classes, artifactid, dependency.getProductEvidence());
519 1 if (parentArtifactId != null && !parentArtifactId.isEmpty() && !parentArtifactId.equals(artifactid)) {520 1 dependency.getProductEvidence().addEvidence("pom", "parent-artifactid", parentArtifactId, Confidence.MEDIUM);
521 1 dependency.getVendorEvidence().addEvidence("pom", "parent-artifactid", parentArtifactId, Confidence.LOW);
522 1 addMatchingValues(classes, parentArtifactId, dependency.getVendorEvidence());
523 1 addMatchingValues(classes, parentArtifactId, dependency.getProductEvidence());
524 }
592 525 } else {593 0 addAsIdentifier = false;594 526 0 addAsIdentifier = false;527 }
595 528 //version596 1 String version = interpolateString(pom.getVersion(), pomProperties);
597 1 String parentVersion = null;598 529 1 String version = interpolateString(pom.getVersion(), pomProperties);
530 1 String parentVersion = null;531 599 1 if (pom.getParent() != null) {600 1 parentVersion = interpolateString(pom.getParent().getVersion(), pomProperties);
601 1 if ((version == null || version.isEmpty()) && parentVersion != null && !parentVersion.isEmpty()) {602 1 version = parentVersion;
603 532 1 if (pom.getParentVersion() != null) {533 1 parentVersion = interpolateString(pom.getParentVersion(), pomProperties);
534 1 if ((version == null || version.isEmpty()) && parentVersion != null && !parentVersion.isEmpty()) {535 1 version = parentVersion;
536 }
604 537 }
605 538 606 1 if (version != null && !version.isEmpty()) {607 1 foundSomething = true;608 1 dependency.getVersionEvidence().addEvidence("pom", "version", version, Confidence.HIGHEST);
609 1 if (parentVersion != null && !parentVersion.isEmpty() && !parentVersion.equals(version)) {610 0 dependency.getVersionEvidence().addEvidence("pom", "parent-version", version, Confidence.LOW);611 539 1 if (version != null && !version.isEmpty()) {540 1 foundSomething = true;541 1 dependency.getVersionEvidence().addEvidence("pom", "version", version, Confidence.HIGHEST);
542 1 if (parentVersion != null && !parentVersion.isEmpty() && !parentVersion.equals(version)) {543 0 dependency.getVersionEvidence().addEvidence("pom", "parent-version", version, Confidence.LOW);544 }
612 545 } else {613 0 addAsIdentifier = false;614 546 0 addAsIdentifier = false;547 }
615 548 616 1 if (addAsIdentifier) {617 1 dependency.addIdentifier("maven", String.format("%s:%s:%s", originalGroupID, originalArtifactID, version), null, Confidence.LOW);
618 549 1 if (addAsIdentifier) {550 1 dependency.addIdentifier("maven", String.format("%s:%s:%s", originalGroupID, originalArtifactID, version), null, Confidence.LOW);
551 }
619 552 620 553 // org name621 1 final Organization org = pom.getOrganization();622 1 if (org != null && org.getName() != null) {623 0 foundSomething = true;624 0 final String orgName = interpolateString(org.getName(), pomProperties);625 0 if (orgName != null && !orgName.isEmpty()) {626 0 dependency.getVendorEvidence().addEvidence("pom", "organization name", orgName, Confidence.HIGH);627 0 addMatchingValues(classes, orgName, dependency.getVendorEvidence());628 554 1 final String org = pom.getOrganization();555 1 if (org != null) {556 0 foundSomething = true;557 0 final String orgName = interpolateString(org, pomProperties);558 0 if (orgName != null && !orgName.isEmpty()) {559 0 dependency.getVendorEvidence().addEvidence("pom", "organization name", orgName, Confidence.HIGH);560 0 addMatchingValues(classes, orgName, dependency.getVendorEvidence());561 }
629 562 }
630 563 //pom name631 1 final String pomName = interpolateString(pom.getName(), pomProperties);632 1 if (pomName != null && !pomName.isEmpty()) {633 1 foundSomething = true;634 1 dependency.getProductEvidence().addEvidence("pom", "name", pomName, Confidence.HIGH);
635 1 dependency.getVendorEvidence().addEvidence("pom", "name", pomName, Confidence.HIGH);
636 1 addMatchingValues(classes, pomName, dependency.getVendorEvidence());
637 1 addMatchingValues(classes, pomName, dependency.getProductEvidence());
638 564 1 final String pomName = interpolateString(pom.getName(), pomProperties);565 1 if (pomName != null && !pomName.isEmpty()) {566 1 foundSomething = true;567 1 dependency.getProductEvidence().addEvidence("pom", "name", pomName, Confidence.HIGH);
568 1 dependency.getVendorEvidence().addEvidence("pom", "name", pomName, Confidence.HIGH);
569 1 addMatchingValues(classes, pomName, dependency.getVendorEvidence());
570 1 addMatchingValues(classes, pomName, dependency.getProductEvidence());
571 }
639 572 640 573 //Description641 1 if (pom.getDescription() != null) {642 0 foundSomething = true;643 0 final String description = interpolateString(pom.getDescription(), pomProperties);644 0 if (description != null && !description.isEmpty()) {645 0 final String trimmedDescription = addDescription(dependency, description, "pom", "description");646 0 addMatchingValues(classes, trimmedDescription, dependency.getVendorEvidence());647 0 addMatchingValues(classes, trimmedDescription, dependency.getProductEvidence());648 574 1 if (pom.getDescription() != null) {575 0 foundSomething = true;576 0 final String description = interpolateString(pom.getDescription(), pomProperties);577 0 if (description != null && !description.isEmpty()) {578 0 final String trimmedDescription = addDescription(dependency, description, "pom", "description");579 0 addMatchingValues(classes, trimmedDescription, dependency.getVendorEvidence());580 0 addMatchingValues(classes, trimmedDescription, dependency.getProductEvidence());581 }
649 582 }
650 1 extractLicense(pom, pomProperties, dependency);
651 1 return foundSomething;652 583 1 extractLicense(pom, pomProperties, dependency);
584 1 return foundSomething;585 }
653 586 654 587 /**655 588 * Analyzes the path information of the classes contained within the JarAnalyzer to try and determine possible vendor or656 589 * product names. If any are found they are stored in the packageVendor and packageProduct hashSets.657 590 *658 591 * @param classNames a list of class names659 592 * @param dependency a dependency to analyze660 593 * @param addPackagesAsEvidence a flag indicating whether or not package names should be added as evidence.661 594 */662 595 protected void analyzePackageNames(List<ClassNameInformation> classNames,
663 596 Dependency dependency, boolean addPackagesAsEvidence) {664 5 final Map<String, Integer> vendorIdentifiers = new HashMap<String, Integer>();
665 5 final Map<String, Integer> productIdentifiers = new HashMap<String, Integer>();
666 5 analyzeFullyQualifiedClassNames(classNames, vendorIdentifiers, productIdentifiers);
597 5 final Map<String, Integer> vendorIdentifiers = new HashMap<String, Integer>();
598 5 final Map<String, Integer> productIdentifiers = new HashMap<String, Integer>();
599 5 analyzeFullyQualifiedClassNames(classNames, vendorIdentifiers, productIdentifiers);
600 601 5 final int classCount = classNames.size();
602 5 final EvidenceCollection vendor = dependency.getVendorEvidence();603 5 final EvidenceCollection product = dependency.getProductEvidence();604 605 5 for (Map.Entry<String, Integer> entry : vendorIdentifiers.entrySet()) {
606 48 final float ratio = entry.getValue() / (float) classCount;
607 48 if (ratio > 0.5) {
608 //TODO remove weighting609 10 vendor.addWeighting(entry.getKey());
610 10 if (addPackagesAsEvidence && entry.getKey().length() > 1) {611 8 vendor.addEvidence("jar", "package name", entry.getKey(), Confidence.LOW);
612 }
613 }
614 48 }
615 5 for (Map.Entry<String, Integer> entry : productIdentifiers.entrySet()) {
616 985 final float ratio = entry.getValue() / (float) classCount;
617 985 if (ratio > 0.5) {
618 5 product.addWeighting(entry.getKey());
619 5 if (addPackagesAsEvidence && entry.getKey().length() > 1) {620 4 product.addEvidence("jar", "package name", entry.getKey(), Confidence.LOW);
621 }
622 }
623 985 }
624 5 }
625 626 /**627 * <p>628 * Reads the manifest from the JAR file and collects the entries. Some vendorKey entries are:</p>629 * <ul><li>Implementation Title</li>630 * <li>Implementation Version</li> <li>Implementation Vendor</li>631 * <li>Implementation VendorId</li> <li>Bundle Name</li> <li>Bundle Version</li> <li>Bundle Vendor</li> <li>Bundle632 * Description</li> <li>Main Class</li> </ul>633 * However, all but a handful of specific entries are read in.634 *635 * @param dependency A reference to the dependency636 * @param classInformation a collection of class information637 * @return whether evidence was identified parsing the manifest638 * @throws IOException if there is an issue reading the JAR file639 */640 protected boolean parseManifest(Dependency dependency, List<ClassNameInformation> classInformation) throws IOException {
641 5 boolean foundSomething = false;
642 5 JarFile jar = null;643 try {644 5 jar = new JarFile(dependency.getActualFilePath());645 646 5 final Manifest manifest = jar.getManifest();647 648 5 if (manifest == null) {649 //don't log this for javadoc or sources jar files650 0 if (!dependency.getFileName().toLowerCase().endsWith("-sources.jar")651 && !dependency.getFileName().toLowerCase().endsWith("-javadoc.jar")652 && !dependency.getFileName().toLowerCase().endsWith("-src.jar")653 && !dependency.getFileName().toLowerCase().endsWith("-doc.jar")) {654 0 LOGGER.log(Level.FINE,655 String.format("Jar file '%s' does not contain a manifest.",656 dependency.getFileName()));
657 }
658 0 return false;659 }
660 5 final Attributes atts = manifest.getMainAttributes();661 662 5 final EvidenceCollection vendorEvidence = dependency.getVendorEvidence();663 5 final EvidenceCollection productEvidence = dependency.getProductEvidence();664 5 final EvidenceCollection versionEvidence = dependency.getVersionEvidence();665 666 5 final String source = "Manifest";
667 668 5 final int classCount = classNames.size();
669 5 final EvidenceCollection vendor = dependency.getVendorEvidence();670 5 final EvidenceCollection product = dependency.getProductEvidence();671 672 5 for (Map.Entry<String, Integer> entry : vendorIdentifiers.entrySet()) {
673 48 final float ratio = entry.getValue() / (float) classCount;
674 48 if (ratio > 0.5) {
675 //TODO remove weighting676 10 vendor.addWeighting(entry.getKey());
677 10 if (addPackagesAsEvidence && entry.getKey().length() > 1) {678 8 vendor.addEvidence("jar", "package name", entry.getKey(), Confidence.LOW);
679 668 5 for (Entry<Object, Object> entry : atts.entrySet()) {
669 65 String key = entry.getKey().toString();
670 65 String value = atts.getValue(key);
671 65 if (HTML_DETECTION_PATTERN.matcher(value).find()) {672 0 value = Jsoup.parse(value).text();673 }
680 }
681 48 }
682 5 for (Map.Entry<String, Integer> entry : productIdentifiers.entrySet()) {
683 985 final float ratio = entry.getValue() / (float) classCount;
684 985 if (ratio > 0.5) {
685 5 product.addWeighting(entry.getKey());
686 5 if (addPackagesAsEvidence && entry.getKey().length() > 1) {687 4 product.addEvidence("jar", "package name", entry.getKey(), Confidence.LOW);
688 }
689 }
690 985 }
691 5 }
692 693 /**674 65 if (IGNORE_VALUES.contains(value)) {675 0 continue;676 65 } else if (key.equalsIgnoreCase(Attributes.Name.IMPLEMENTATION_TITLE.toString())) {
677 1 foundSomething = true;678 1 productEvidence.addEvidence(source, key, value, Confidence.HIGH);
679 1 addMatchingValues(classInformation, value, productEvidence);
680 64 } else if (key.equalsIgnoreCase(Attributes.Name.IMPLEMENTATION_VERSION.toString())) {
681 2 foundSomething = true;682 2 versionEvidence.addEvidence(source, key, value, Confidence.HIGH);
683 62 } else if (key.equalsIgnoreCase(Attributes.Name.IMPLEMENTATION_VENDOR.toString())) {
684 1 foundSomething = true;685 1 vendorEvidence.addEvidence(source, key, value, Confidence.HIGH);
686 1 addMatchingValues(classInformation, value, vendorEvidence);
687 61 } else if (key.equalsIgnoreCase(Attributes.Name.IMPLEMENTATION_VENDOR_ID.toString())) {688 0 foundSomething = true;689 0 vendorEvidence.addEvidence(source, key, value, Confidence.MEDIUM);690 0 addMatchingValues(classInformation, value, vendorEvidence);691 61 } else if (key.equalsIgnoreCase(BUNDLE_DESCRIPTION)) {
692 2 foundSomething = true;693 2 addDescription(dependency, value, "manifest", key);694 * <p>695 * Reads the manifest from the JAR file and collects the entries. Some vendorKey entries are:</p>696 * <ul><li>Implementation Title</li>697 * <li>Implementation Version</li> <li>Implementation Vendor</li>698 * <li>Implementation VendorId</li> <li>Bundle Name</li> <li>Bundle Version</li> <li>Bundle Vendor</li> <li>Bundle699 * Description</li> <li>Main Class</li> </ul>700 * However, all but a handful of specific entries are read in.701 *702 * @param dependency A reference to the dependency703 * @param classInformation a collection of class information704 * @return whether evidence was identified parsing the manifest705 * @throws IOException if there is an issue reading the JAR file706 */707 protected boolean parseManifest(Dependency dependency, List<ClassNameInformation> classInformation) throws IOException {
708 5 boolean foundSomething = false;
709 5 JarFile jar = null;710 try {711 5 jar = new JarFile(dependency.getActualFilePath());712 713 5 final Manifest manifest = jar.getManifest();714 715 5 if (manifest == null) {716 //don't log this for javadoc or sources jar files717 0 if (!dependency.getFileName().toLowerCase().endsWith("-sources.jar")718 && !dependency.getFileName().toLowerCase().endsWith("-javadoc.jar")719 && !dependency.getFileName().toLowerCase().endsWith("-src.jar")720 && !dependency.getFileName().toLowerCase().endsWith("-doc.jar")) {721 0 LOGGER.log(Level.FINE,722 String.format("Jar file '%s' does not contain a manifest.",723 dependency.getFileName()));
724 }
725 0 return false;726 }
727 5 final Attributes atts = manifest.getMainAttributes();728 729 5 final EvidenceCollection vendorEvidence = dependency.getVendorEvidence();730 5 final EvidenceCollection productEvidence = dependency.getProductEvidence();731 5 final EvidenceCollection versionEvidence = dependency.getVersionEvidence();732 733 5 final String source = "Manifest";
734 735 5 for (Entry<Object, Object> entry : atts.entrySet()) {
736 65 String key = entry.getKey().toString();
737 65 String value = atts.getValue(key);
738 65 if (HTML_DETECTION_PATTERN.matcher(value).find()) {739 0 value = Jsoup.parse(value).text();740 }
741 65 if (IGNORE_VALUES.contains(value)) {742 0 continue;743 65 } else if (key.equalsIgnoreCase(Attributes.Name.IMPLEMENTATION_TITLE.toString())) {
744 1 foundSomething = true;745 1 productEvidence.addEvidence(source, key, value, Confidence.HIGH);
746 1 addMatchingValues(classInformation, value, productEvidence);
747 64 } else if (key.equalsIgnoreCase(Attributes.Name.IMPLEMENTATION_VERSION.toString())) {
748 2 foundSomething = true;749 2 versionEvidence.addEvidence(source, key, value, Confidence.HIGH);
750 62 } else if (key.equalsIgnoreCase(Attributes.Name.IMPLEMENTATION_VENDOR.toString())) {
751 1 foundSomething = true;752 1 vendorEvidence.addEvidence(source, key, value, Confidence.HIGH);
753 1 addMatchingValues(classInformation, value, vendorEvidence);
754 61 } else if (key.equalsIgnoreCase(Attributes.Name.IMPLEMENTATION_VENDOR_ID.toString())) {755 0 foundSomething = true;756 0 vendorEvidence.addEvidence(source, key, value, Confidence.MEDIUM);757 0 addMatchingValues(classInformation, value, vendorEvidence);758 61 } else if (key.equalsIgnoreCase(BUNDLE_DESCRIPTION)) {
759 2 foundSomething = true;760 2 addDescription(dependency, value, "manifest", key);761 //productEvidence.addEvidence(source, key, value, Confidence.MEDIUM);762 2 addMatchingValues(classInformation, value, productEvidence);
763 59 } else if (key.equalsIgnoreCase(BUNDLE_NAME)) {
764 3 foundSomething = true;765 3 productEvidence.addEvidence(source, key, value, Confidence.MEDIUM);
766 3 addMatchingValues(classInformation, value, productEvidence);
767 56 } else if (key.equalsIgnoreCase(BUNDLE_VENDOR)) {
768 3 foundSomething = true;769 3 vendorEvidence.addEvidence(source, key, value, Confidence.HIGH);
770 3 addMatchingValues(classInformation, value, vendorEvidence);
771 53 } else if (key.equalsIgnoreCase(BUNDLE_VERSION)) {
772 3 foundSomething = true;773 3 versionEvidence.addEvidence(source, key, value, Confidence.HIGH);
774 50 } else if (key.equalsIgnoreCase(Attributes.Name.MAIN_CLASS.toString())) {
775 2 continue;776 695 2 addMatchingValues(classInformation, value, productEvidence);
696 59 } else if (key.equalsIgnoreCase(BUNDLE_NAME)) {
697 3 foundSomething = true;698 3 productEvidence.addEvidence(source, key, value, Confidence.MEDIUM);
699 3 addMatchingValues(classInformation, value, productEvidence);
700 56 } else if (key.equalsIgnoreCase(BUNDLE_VENDOR)) {
701 3 foundSomething = true;702 3 vendorEvidence.addEvidence(source, key, value, Confidence.HIGH);
703 3 addMatchingValues(classInformation, value, vendorEvidence);
704 53 } else if (key.equalsIgnoreCase(BUNDLE_VERSION)) {
705 3 foundSomething = true;706 3 versionEvidence.addEvidence(source, key, value, Confidence.HIGH);
707 50 } else if (key.equalsIgnoreCase(Attributes.Name.MAIN_CLASS.toString())) {
708 2 continue;709 //skipping main class as if this has important information to add777 710 // it will be added during class name analysis... if other fields778 711 // have the information from the class name then they will get added...779 712 // foundSomething = true;780 713 // productEvidence.addEvidence(source, key, value, Confidence.MEDIUM);781 714 // vendorEvidence.addEvidence(source, key, value, Confidence.MEDIUM);782 715 // addMatchingValues(classInformation, value, vendorEvidence);783 716 // addMatchingValues(classInformation, value, productEvidence);784 717 } else {785 48 key = key.toLowerCase();
786 718 48 key = key.toLowerCase();
719 787 48 if (!IGNORE_KEYS.contains(key)788 720 48 if (!IGNORE_KEYS.contains(key)721 && !key.endsWith("jdk")789 722 && !key.contains("lastmodified")790 723 && !key.endsWith("package")791 724 && !key.endsWith("classpath")792 725 && !key.endsWith("class-path")793 726 && !key.endsWith("-scm") //todo change this to a regex?
794 727 && !key.startsWith("scm-")795 728 && !value.trim().startsWith("scm:")796 729 && !isImportPackage(key, value)
797 730 && !isPackage(key, value)) {798 731 799 14 foundSomething = true;800 14 if (key.contains("version")) {
801 1 if (key.contains("specification")) {802 1 versionEvidence.addEvidence(source, key, value, Confidence.LOW);
803 732 14 foundSomething = true;733 14 if (key.contains("version")) {
734 1 if (key.contains("specification")) {735 1 versionEvidence.addEvidence(source, key, value, Confidence.LOW);
736 } else {804 0 versionEvidence.addEvidence(source, key, value, Confidence.MEDIUM);805 737 0 versionEvidence.addEvidence(source, key, value, Confidence.MEDIUM);738 }
806 13 } else if ("build-id".equals(key)) {807 0 int pos = value.indexOf('(');808 0 if (pos >= 0) {809 0 value = value.substring(0, pos - 1);810 739 13 } else if ("build-id".equals(key)) {740 0 int pos = value.indexOf('(');741 0 if (pos >= 0) {742 0 value = value.substring(0, pos - 1);743 }
811 0 pos = value.indexOf('[');812 0 if (pos >= 0) {813 0 value = value.substring(0, pos - 1);814 744 0 pos = value.indexOf('[');745 0 if (pos >= 0) {746 0 value = value.substring(0, pos - 1);747 }
815 0 versionEvidence.addEvidence(source, key, value, Confidence.MEDIUM);816 0 } else if (key.contains("title")) {817 1 productEvidence.addEvidence(source, key, value, Confidence.MEDIUM);
818 1 addMatchingValues(classInformation, value, productEvidence);
819 12 } else if (key.contains("vendor")) {820 0 if (key.contains("specification")) {821 0 vendorEvidence.addEvidence(source, key, value, Confidence.LOW);822 748 0 versionEvidence.addEvidence(source, key, value, Confidence.MEDIUM);749 0 } else if (key.contains("title")) {750 1 productEvidence.addEvidence(source, key, value, Confidence.MEDIUM);
751 1 addMatchingValues(classInformation, value, productEvidence);
752 12 } else if (key.contains("vendor")) {753 0 if (key.contains("specification")) {754 0 vendorEvidence.addEvidence(source, key, value, Confidence.LOW);755 } else {823 0 vendorEvidence.addEvidence(source, key, value, Confidence.MEDIUM);824 0 addMatchingValues(classInformation, value, vendorEvidence);825 756 0 vendorEvidence.addEvidence(source, key, value, Confidence.MEDIUM);757 0 addMatchingValues(classInformation, value, vendorEvidence);758 }
826 12 } else if (key.contains("name")) {
827 3 productEvidence.addEvidence(source, key, value, Confidence.MEDIUM);
828 3 vendorEvidence.addEvidence(source, key, value, Confidence.MEDIUM);
829 3 addMatchingValues(classInformation, value, vendorEvidence);
830 3 addMatchingValues(classInformation, value, productEvidence);
831 9 } else if (key.contains("license")) {
832 2 addLicense(dependency, value);
833 759 12 } else if (key.contains("name")) {
760 3 productEvidence.addEvidence(source, key, value, Confidence.MEDIUM);
761 3 vendorEvidence.addEvidence(source, key, value, Confidence.MEDIUM);
762 3 addMatchingValues(classInformation, value, vendorEvidence);
763 3 addMatchingValues(classInformation, value, productEvidence);
764 9 } else if (key.contains("license")) {
765 2 addLicense(dependency, value);
766 } else {834 7 if (key.contains("description")) {835 0 addDescription(dependency, value, "manifest", key);836 767 7 if (key.contains("description")) {768 0 addDescription(dependency, value, "manifest", key);769 } else {837 7 productEvidence.addEvidence(source, key, value, Confidence.LOW);
838 7 vendorEvidence.addEvidence(source, key, value, Confidence.LOW);
839 7 addMatchingValues(classInformation, value, vendorEvidence);
840 7 addMatchingValues(classInformation, value, productEvidence);
841 7 if (value.matches(".*\\d.*")) {
842 3 final StringTokenizer tokenizer = new StringTokenizer(value, " ");
843 15 while (tokenizer.hasMoreElements()) {
844 12 final String s = tokenizer.nextToken();845 12 if (s.matches("^[0-9.]+$")) {
846 1 versionEvidence.addEvidence(source, key, s, Confidence.LOW);
847 770 7 productEvidence.addEvidence(source, key, value, Confidence.LOW);
771 7 vendorEvidence.addEvidence(source, key, value, Confidence.LOW);
772 7 addMatchingValues(classInformation, value, vendorEvidence);
773 7 addMatchingValues(classInformation, value, productEvidence);
774 7 if (value.matches(".*\\d.*")) {
775 3 final StringTokenizer tokenizer = new StringTokenizer(value, " ");
776 15 while (tokenizer.hasMoreElements()) {
777 12 final String s = tokenizer.nextToken();778 12 if (s.matches("^[0-9.]+$")) {
779 1 versionEvidence.addEvidence(source, key, s, Confidence.LOW);
780 }
848 12 }
849 781 12 }
782 }
850 783 }
851 784 }
852 785 }
853 786 }
854 63 }
855 787 63 }
788 } finally {856 5 if (jar != null) {857 5 jar.close();
858 789 5 if (jar != null) {790 5 jar.close();
791 }
859 792 }
860 5 return foundSomething;861 793 5 return foundSomething;794 }
862 795 863 796 /**864 797 * Adds a description to the given dependency. If the description contains one of the following strings beyond 100 characters,865 798 * then the description used will be trimmed to that position:866 799 * <ul><li>"such as"</li><li>"like "</li><li>"will use "</li><li>"* uses "</li></ul>867 800 *868 801 * @param dependency a dependency869 802 * @param description the description870 803 * @param source the source of the evidence871 804 * @param key the "name" of the evidence872 805 * @return if the description is trimmed, the trimmed version is returned; otherwise the original description is returned806 */807 public static String addDescription(Dependency dependency, String description, String source, String key) {
808 2 if (dependency.getDescription() == null) {809 2 dependency.setDescription(description);
810 }
811 String desc;
812 2 if (HTML_DETECTION_PATTERN.matcher(description).find()) {813 0 desc = Jsoup.parse(description).text();814 } else {815 2 desc = description;
816 }
817 2 dependency.setDescription(desc);
818 2 if (desc.length() > 100) {819 0 desc = desc.replaceAll("\\s\\s+", " ");820 0 final int posSuchAs = desc.toLowerCase().indexOf("such as ", 100);821 0 final int posLike = desc.toLowerCase().indexOf("like ", 100);822 0 final int posWillUse = desc.toLowerCase().indexOf("will use ", 100);823 0 final int posUses = desc.toLowerCase().indexOf(" uses ", 100);824 0 int pos = -1;825 0 pos = Math.max(pos, posSuchAs);826 0 if (pos >= 0 && posLike >= 0) {827 0 pos = Math.min(pos, posLike);828 } else {829 0 pos = Math.max(pos, posLike);830 }
831 0 if (pos >= 0 && posWillUse >= 0) {832 0 pos = Math.min(pos, posWillUse);833 } else {834 0 pos = Math.max(pos, posWillUse);835 }
836 0 if (pos >= 0 && posUses >= 0) {837 0 pos = Math.min(pos, posUses);838 } else {839 0 pos = Math.max(pos, posUses);840 }
841 842 0 if (pos > 0) {843 0 final StringBuilder sb = new StringBuilder(pos + 3);844 0 sb.append(desc.substring(0, pos));845 0 sb.append("...");846 0 desc = sb.toString();847 }
848 0 dependency.getProductEvidence().addEvidence(source, key, desc, Confidence.LOW);849 0 dependency.getVendorEvidence().addEvidence(source, key, desc, Confidence.LOW);850 0 } else {851 2 dependency.getProductEvidence().addEvidence(source, key, desc, Confidence.MEDIUM);
852 2 dependency.getVendorEvidence().addEvidence(source, key, desc, Confidence.MEDIUM);
853 }
854 2 return desc;855 }
856 857 /**858 * Adds a license to the given dependency.859 *860 * @param d a dependency861 * @param license the license862 */863 private void addLicense(Dependency d, String license) {
864 2 if (d.getLicense() == null) {865 2 d.setLicense(license);
866 0 } else if (!d.getLicense().contains(license)) {867 0 d.setLicense(d.getLicense() + NEWLINE + license);868 }
869 2 }
870 871 /**872 * The parent directory for the individual directories per archive.873 */874 public static String addDescription(Dependency dependency, String description, String source, String key) {
875 2 if (dependency.getDescription() == null) {876 2 dependency.setDescription(description);
874 7 private File tempFileLocation = null;
875 876 /**877 }
878 String desc;
879 2 if (HTML_DETECTION_PATTERN.matcher(description).find()) {880 0 desc = Jsoup.parse(description).text();881 } else {882 2 desc = description;
883 }
884 2 dependency.setDescription(desc);
885 2 if (desc.length() > 100) {886 0 desc = desc.replaceAll("\\s\\s+", " ");887 0 final int posSuchAs = desc.toLowerCase().indexOf("such as ", 100);888 0 final int posLike = desc.toLowerCase().indexOf("like ", 100);889 0 final int posWillUse = desc.toLowerCase().indexOf("will use ", 100);890 0 final int posUses = desc.toLowerCase().indexOf(" uses ", 100);891 0 int pos = -1;892 0 pos = Math.max(pos, posSuchAs);893 0 if (pos >= 0 && posLike >= 0) {894 0 pos = Math.min(pos, posLike);895 } else {896 0 pos = Math.max(pos, posLike);897 }
898 0 if (pos >= 0 && posWillUse >= 0) {899 0 pos = Math.min(pos, posWillUse);900 } else {901 0 pos = Math.max(pos, posWillUse);902 }
903 0 if (pos >= 0 && posUses >= 0) {904 0 pos = Math.min(pos, posUses);905 } else {906 0 pos = Math.max(pos, posUses);907 }
908 909 0 if (pos > 0) {910 0 final StringBuilder sb = new StringBuilder(pos + 3);911 0 sb.append(desc.substring(0, pos));912 0 sb.append("...");913 0 desc = sb.toString();914 }
915 0 dependency.getProductEvidence().addEvidence(source, key, desc, Confidence.LOW);916 0 dependency.getVendorEvidence().addEvidence(source, key, desc, Confidence.LOW);917 0 } else {918 2 dependency.getProductEvidence().addEvidence(source, key, desc, Confidence.MEDIUM);
919 2 dependency.getVendorEvidence().addEvidence(source, key, desc, Confidence.MEDIUM);
920 }
921 2 return desc;922 }
923 924 /**925 * Adds a license to the given dependency.926 *927 * @param d a dependency928 * @param license the license929 */930 private void addLicense(Dependency d, String license) {
931 2 if (d.getLicense() == null) {932 2 d.setLicense(license);
933 0 } else if (!d.getLicense().contains(license)) {934 0 d.setLicense(d.getLicense() + NEWLINE + license);935 }
936 2 }
937 938 /**939 * The parent directory for the individual directories per archive.940 */941 7 private File tempFileLocation = null;
942 943 /**944 * Initializes the JarAnalyzer.945 878 *946 879 * @throws Exception is thrown if there is an exception creating a temporary directory947 880 */948 881 @Override
949 882 public void initializeFileTypeAnalyzer() throws Exception {
950 1 final File baseDir = Settings.getTempDirectory();951 1 tempFileLocation = File.createTempFile("check", "tmp", baseDir);
952 1 if (!tempFileLocation.delete()) {953 0 final String msg = String.format("Unable to delete temporary file '%s'.", tempFileLocation.getAbsolutePath());954 0 throw new AnalysisException(msg);955 883 1 final File baseDir = Settings.getTempDirectory();884 1 tempFileLocation = File.createTempFile("check", "tmp", baseDir);
885 1 if (!tempFileLocation.delete()) {886 0 final String msg = String.format("Unable to delete temporary file '%s'.", tempFileLocation.getAbsolutePath());887 0 throw new AnalysisException(msg);888 }
956 1 if (!tempFileLocation.mkdirs()) {957 0 final String msg = String.format("Unable to create directory '%s'.", tempFileLocation.getAbsolutePath());958 0 throw new AnalysisException(msg);959 889 1 if (!tempFileLocation.mkdirs()) {890 0 final String msg = String.format("Unable to create directory '%s'.", tempFileLocation.getAbsolutePath());891 0 throw new AnalysisException(msg);892 }
960 1 }
961 893 1 }
894 962 895 /**963 896 * Deletes any files extracted from the JAR during analysis.964 897 */965 898 @Override
966 899 public void close() {
967 1 if (tempFileLocation != null && tempFileLocation.exists()) {968 1 LOGGER.log(Level.FINE, "Attempting to delete temporary files");969 1 final boolean success = FileUtils.delete(tempFileLocation);
970 1 if (!success) {971 0 LOGGER.log(Level.WARNING,972 900 1 if (tempFileLocation != null && tempFileLocation.exists()) {901 1 LOGGER.log(Level.FINE, "Attempting to delete temporary files");902 1 final boolean success = FileUtils.delete(tempFileLocation);
903 1 if (!success) {904 0 LOGGER.log(Level.WARNING,905 "Failed to delete some temporary files, see the log for more details");973 906 }
974 907 }
975 1 }
976 908 1 }
909 977 910 /**978 911 * <p>979 912 * A utility function that will interpolate strings based on values given in the properties file. It will also interpolate the980 913 * strings contained within the properties file so that properties can reference other properties.</p>981 914 * <p>982 915 * <b>Note:</b> if there is no property found the reference will be removed. In other words, if the interpolated string will983 916 * be replaced with an empty string.984 917 * </p>985 918 * <p>986 919 * Example:</p>987 920 * <code>988 921 * Properties p = new Properties();989 922 * p.setProperty("key", "value");990 923 * String s = interpolateString("'${key}' and '${nothing}'", p);991 924 * System.out.println(s);992 925 * </code>993 926 * <p>994 927 * Will result in:</p>995 928 * <code>996 929 * 'value' and ''997 930 * </code>998 931 *999 932 * @param text the string that contains references to properties.1000 933 * @param properties a collection of properties that may be referenced within the text.1001 934 * @return the interpolated text.1002 935 */1003 936 public static String interpolateString(String text, Properties properties) {
1004 14 final Properties props = properties;1005 14 if (text == null) {
1006 1 return text;1007 937 14 final Properties props = properties;938 14 if (text == null) {
939 1 return text;940 }
1008 13 if (props == null) {
1009 6 return text;1010 941 13 if (props == null) {
942 6 return text;943 }
1011 944 1012 7 final int pos = text.indexOf("${");
1013 7 if (pos < 0) {
1014 4 return text;1015 945 7 final int pos = text.indexOf("${");
946 7 if (pos < 0) {
947 4 return text;948 }
1016 3 final int end = text.indexOf("}");
1017 3 if (end < pos) {1018 0 return text;1019 949 3 final int end = text.indexOf("}");
950 3 if (end < pos) {951 0 return text;952 }
1020 953 1021 3 final String propName = text.substring(pos + 2, end);1022 3 String propValue = interpolateString(props.getProperty(propName), props);
1023 3 if (propValue == null) {1024 0 propValue = "";1025 954 3 final String propName = text.substring(pos + 2, end);955 3 String propValue = interpolateString(props.getProperty(propName), props);
956 3 if (propValue == null) {957 0 propValue = "";958 }
1026 3 final StringBuilder sb = new StringBuilder(propValue.length() + text.length());
1027 3 sb.append(text.subSequence(0, pos));
1028 3 sb.append(propValue);
1029 3 sb.append(text.substring(end + 1));
1030 3 return interpolateString(sb.toString(), props); //yes yes, this should be a loop...
1031 959 3 final StringBuilder sb = new StringBuilder(propValue.length() + text.length());
960 3 sb.append(text.subSequence(0, pos));
961 3 sb.append(propValue);
962 3 sb.append(text.substring(end + 1));
963 3 return interpolateString(sb.toString(), props); //yes yes, this should be a loop...
964 }
1032 965 1033 966 /**1034 967 * Determines if the key value pair from the manifest is for an "import" type entry for package names.1035 968 *1036 969 * @param key the key from the manifest1037 970 * @param value the value from the manifest1038 971 * @return true or false depending on if it is believed the entry is an "import" entry1039 972 */1040 973 private boolean isImportPackage(String key, String value) {
1041 15 final Pattern packageRx = Pattern.compile("^([a-zA-Z0-9_#\\$\\*\\.]+\\s*[,;]\\s*)+([a-zA-Z0-9_#\\$\\*\\.]+\\s*)?$");
1042 15 final boolean matches = packageRx.matcher(value).matches();
1043 15 return matches && (key.contains("import") || key.contains("include") || value.length() > 10);1044 974 15 final Pattern packageRx = Pattern.compile("^([a-zA-Z0-9_#\\$\\*\\.]+\\s*[,;]\\s*)+([a-zA-Z0-9_#\\$\\*\\.]+\\s*)?$");
975 15 final boolean matches = packageRx.matcher(value).matches();
976 15 return matches && (key.contains("import") || key.contains("include") || value.length() > 10);977 }
1045 978 1046 979 /**1047 980 * Cycles through an enumeration of JarEntries, contained within the dependency, and returns a list of the class names. This1048 981 * does not include core Java package names (i.e. java.* or javax.*).1049 982 *1050 983 * @param dependency the dependency being analyzed1051 984 * @return an list of fully qualified class names1052 985 */1053 986 private List<ClassNameInformation> collectClassNames(Dependency dependency) {1054 5 final List<ClassNameInformation> classNames = new ArrayList<ClassNameInformation>();
1055 5 JarFile jar = null;1056 987 5 final List<ClassNameInformation> classNames = new ArrayList<ClassNameInformation>();
988 5 JarFile jar = null;989 try {1057 5 jar = new JarFile(dependency.getActualFilePath());1058 5 final Enumeration entries = jar.entries();1059 1848 while (entries.hasMoreElements()) {
1060 1843 final JarEntry entry = (JarEntry) entries.nextElement();1061 1843 final String name = entry.getName().toLowerCase();1062 990 5 jar = new JarFile(dependency.getActualFilePath());991 5 final Enumeration entries = jar.entries();992 1848 while (entries.hasMoreElements()) {
993 1843 final JarEntry entry = (JarEntry) entries.nextElement();994 1843 final String name = entry.getName().toLowerCase();995 //no longer stripping "|com\\.sun" - there are some com.sun jar files with CVEs.1063 1843 if (name.endsWith(".class") && !name.matches("^javax?\\..*$")) {1064 1535 final ClassNameInformation className = new ClassNameInformation(name.substring(0, name.length() - 6));
1065 1535 classNames.add(className);
1066 996 1843 if (name.endsWith(".class") && !name.matches("^javax?\\..*$")) {997 1535 final ClassNameInformation className = new ClassNameInformation(name.substring(0, name.length() - 6));
998 1535 classNames.add(className);
999 }
1067 1843 }
1068 0 } catch (IOException ex) {1069 0 final String msg = String.format("Unable to open jar file '%s'.", dependency.getFileName());1070 0 LOGGER.log(Level.WARNING, msg);1071 0 LOGGER.log(Level.FINE, null, ex);1072 1000 1843 }
1001 0 } catch (IOException ex) {1002 0 final String msg = String.format("Unable to open jar file '%s'.", dependency.getFileName());1003 0 LOGGER.log(Level.WARNING, msg);1004 0 LOGGER.log(Level.FINE, null, ex);1005 } finally {1073 5 if (jar != null) {1074 1006 5 if (jar != null) {1007 try {1075 5 jar.close();
1076 0 } catch (IOException ex) {1077 0 LOGGER.log(Level.FINEST, null, ex);1078 5 }
1079 1008 5 jar.close();
1009 0 } catch (IOException ex) {1010 0 LOGGER.log(Level.FINEST, null, ex);1011 5 }
1012 }
1080 1013 }
1081 5 return classNames;1082 1014 5 return classNames;1015 }
1083 1016 1084 1017 /**1085 1018 * Cycles through the list of class names and places the package levels 0-3 into the provided maps for vendor and product.1086 1019 * This is helpful when analyzing vendor/product as many times this is included in the package name.1087 1020 *1088 1021 * @param classNames a list of class names1089 1022 * @param vendor HashMap of possible vendor names from package names (e.g. owasp)1090 1023 * @param product HashMap of possible product names from package names (e.g. dependencycheck)1091 1024 */1092 1025 private void analyzeFullyQualifiedClassNames(List<ClassNameInformation> classNames,
1093 1026 Map<String, Integer> vendor, Map<String, Integer> product) {1094 5 for (ClassNameInformation entry : classNames) {
1095 1535 final List<String> list = entry.getPackageStructure();1096 1535 addEntry(vendor, list.get(0));
1097 1027 5 for (ClassNameInformation entry : classNames) {
1028 1535 final List<String> list = entry.getPackageStructure();1029 1535 addEntry(vendor, list.get(0));
1030 1098 1535 if (list.size() == 2) {1099 0 addEntry(product, list.get(1));1100 1031 1535 if (list.size() == 2) {1032 0 addEntry(product, list.get(1));1033 }
1101 1535 if (list.size() == 3) {
1102 345 addEntry(vendor, list.get(1));
1103 345 addEntry(product, list.get(1));
1104 345 addEntry(product, list.get(2));
1105 1034 1535 if (list.size() == 3) {
1035 345 addEntry(vendor, list.get(1));
1036 345 addEntry(product, list.get(1));
1037 345 addEntry(product, list.get(2));
1038 }
1106 1535 if (list.size() >= 4) {
1107 1190 addEntry(vendor, list.get(1));
1108 1190 addEntry(vendor, list.get(2));
1109 1190 addEntry(product, list.get(1));
1110 1190 addEntry(product, list.get(2));
1111 1190 addEntry(product, list.get(3));
1112 1039 1535 if (list.size() >= 4) {
1040 1190 addEntry(vendor, list.get(1));
1041 1190 addEntry(vendor, list.get(2));
1042 1190 addEntry(product, list.get(1));
1043 1190 addEntry(product, list.get(2));
1044 1190 addEntry(product, list.get(3));
1045 }
1113 1535 }
1114 5 }
1115 1046 1535 }
1047 5 }
1048 1116 1049 /**1117 1050 * Adds an entry to the specified collection and sets the Integer (e.g. the count) to 1. If the entry already exists in the1118 1051 * collection then the Integer is incremented by 1.1119 1052 *1120 1053 * @param collection a collection of strings and their occurrence count1121 1054 * @param key the key to add to the collection1122 1055 */1123 1056 private void addEntry(Map<String, Integer> collection, String key) {
1124 8520 if (collection.containsKey(key)) {
1125 7487 collection.put(key, collection.get(key) + 1);
1126 1057 8520 if (collection.containsKey(key)) {
1058 7487 collection.put(key, collection.get(key) + 1);
1059 } else {1127 1033 collection.put(key, 1);
1128 1060 1033 collection.put(key, 1);
1061 }
1129 8520 }
1130 1062 8520 }
1063 1131 1064 /**1132 1065 * Cycles through the collection of class name information to see if parts of the package names are contained in the provided1133 1066 * value. If found, it will be added as the HIGHEST confidence evidence because we have more then one source corroborating the1134 1067 * value.1135 1068 *1136 1069 * @param classes a collection of class name information1137 1070 * @param value the value to check to see if it contains a package name1138 1071 * @param evidence the evidence collection to add new entries too1139 1072 */1140 1073 private void addMatchingValues(List<ClassNameInformation> classes, String value, EvidenceCollection evidence) {
1141 39 if (value == null || value.isEmpty() || classes == null || classes.isEmpty()) {1142 0 return;1143 1074 39 if (value == null || value.isEmpty() || classes == null || classes.isEmpty()) {1075 0 return;1076 }
1144 39 final String text = value.toLowerCase();1145 39 for (ClassNameInformation cni : classes) {
1146 15708 for (String key : cni.getPackageStructure()) {
1147 60662 if (text.contains(key)) { //note, package structure elements are already lowercase.
1148 14608 evidence.addEvidence("jar", "package name", key, Confidence.HIGHEST);
1149 1077 39 final String text = value.toLowerCase();1078 39 for (ClassNameInformation cni : classes) {
1079 15708 for (String key : cni.getPackageStructure()) {
1080 60662 if (text.contains(key)) { //note, package structure elements are already lowercase.
1081 14608 evidence.addEvidence("jar", "package name", key, Confidence.HIGHEST);
1082 }
1150 60662 }
1151 15708 }
1152 39 }
1153 1083 60662 }
1084 15708 }
1085 39 }
1086 1154 1087 /**1155 1088 * Simple check to see if the attribute from a manifest is just a package name.1156 1089 *1157 1090 * @param key the key of the value to check1158 1091 * @param value the value to check1159 1092 * @return true if the value looks like a java package name, otherwise false1160 1093 */1161 1094 private boolean isPackage(String key, String value) {
1162 1095 1163 15 return !key.matches(".*(version|title|vendor|name|license|description).*")
1164 1096 15 return !key.matches(".*(version|title|vendor|name|license|description).*")
1097 && value.matches("^([a-zA-Z_][a-zA-Z0-9_\\$]*(\\.[a-zA-Z_][a-zA-Z0-9_\\$]*)*)?$");1165 1098 1166 1099 }
1167 1100 1168 1101 /**1169 1102 * Extracts the license information from the pom and adds it to the dependency.1170 1103 *1171 1104 * @param pom the pom object1172 1105 * @param pomProperties the properties, used for string interpolation1173 1106 * @param dependency the dependency to add license information too1174 1107 */1175 1108 public static void extractLicense(Model pom, Properties pomProperties, Dependency dependency) {
1176 1109 //license1177 1 if (pom.getLicenses() != null) {1178 0 String license = null;1179 0 for (License lic : pom.getLicenses().getLicense()) {1180 0 String tmp = null;1181 0 if (lic.getName() != null) {1182 0 tmp = interpolateString(lic.getName(), pomProperties);1183 1110 1 if (pom.getLicenses() != null) {1111 1 String license = null;1112 1 for (License lic : pom.getLicenses()) {1113 0 String tmp = null;1114 0 if (lic.getName() != null) {1115 0 tmp = interpolateString(lic.getName(), pomProperties);1116 }
1184 0 if (lic.getUrl() != null) {1185 0 if (tmp == null) {1186 0 tmp = interpolateString(lic.getUrl(), pomProperties);1187 1117 0 if (lic.getUrl() != null) {1118 0 if (tmp == null) {1119 0 tmp = interpolateString(lic.getUrl(), pomProperties);1120 } else {1188 0 tmp += ": " + interpolateString(lic.getUrl(), pomProperties);1189 1121 0 tmp += ": " + interpolateString(lic.getUrl(), pomProperties);1122 }
1190 1123 }
1191 0 if (tmp == null) {1192 0 continue;1193 1124 0 if (tmp == null) {1125 0 continue;1126 }
1194 0 if (HTML_DETECTION_PATTERN.matcher(tmp).find()) {1195 0 tmp = Jsoup.parse(tmp).text();1196 1127 0 if (HTML_DETECTION_PATTERN.matcher(tmp).find()) {1128 0 tmp = Jsoup.parse(tmp).text();1129 }
1197 0 if (license == null) {1198 0 license = tmp;1199 1130 0 if (license == null) {1131 0 license = tmp;1132 } else {1200 0 license += "\n" + tmp;1201 1133 0 license += "\n" + tmp;1134 }
1202 0 }1203 0 if (license != null) {1204 0 dependency.setLicense(license);1205 1135 0 }1136 1 if (license != null) {1137 0 dependency.setLicense(license);1138 }
1206 1139 }
1207 1 }
1208 1140 1 }
1141 1209 1142 /**1210 1143 * Stores information about a class name.1211 1144 */1212 1145 protected static class ClassNameInformation {
1146 1147 /**1148 * <p>1149 * Stores information about a given class name. This class will keep the fully qualified class name and a list of the1150 * important parts of the package structure. Up to the first four levels of the package structure are stored, excluding a1151 * leading "org" or "com". Example:</p>1152 * <code>ClassNameInformation obj = new ClassNameInformation("org.owasp.dependencycheck.analyzer.JarAnalyzer");1153 * System.out.println(obj.getName());1154 * for (String p : obj.getPackageStructure())1155 * System.out.println(p);1156 * </code>1157 * <p>1158 * Would result in:</p>1159 * <code>org.owasp.dependencycheck.analyzer.JarAnalyzer1160 * owasp1161 * dependencycheck1162 * analyzer1163 * jaranalyzer</code>1164 *1165 * @param className a fully qualified class name1166 */1167 1535 ClassNameInformation(String className) {1168 1535 name = className;
1169 1535 if (name.contains("/")) {1170 1535 final String[] tmp = className.toLowerCase().split("/");
1171 1535 int start = 0;1172 1535 int end = 3;1173 1535 if ("com".equals(tmp[0]) || "org".equals(tmp[0])) {1174 1535 start = 1;
1175 1535 end = 4;
1176 }
1177 1535 if (tmp.length <= end) {
1178 345 end = tmp.length - 1;
1179 }
1180 7330 for (int i = start; i <= end; i++) {
1181 5795 packageStructure.add(tmp[i]);
1182 }
1183 1535 } else {1184 0 packageStructure.add(name);1185 }
1186 1535 }
1187 /**1188 * The fully qualified class name.1189 */1190 private String name;1191 1192 /**1193 * Get the value of name1194 *1195 * @return the value of name1196 */1197 public String getName() {1198 0 return name;1199 }
1200 1201 /**1202 * Set the value of name1203 *1204 * @param name new value of name1205 */1206 public void setName(String name) {
1207 0 this.name = name;1208 0 }1209 /**1210 * Up to the first four levels of the package structure, excluding a leading "org" or "com".1211 */1212 1535 private final ArrayList<String> packageStructure = new ArrayList<String>();
1213 1214 /**1215 * <p>1216 * Stores information about a given class name. This class will keep the fully qualified class name and a list of the1217 * important parts of the package structure. Up to the first four levels of the package structure are stored, excluding a1218 * leading "org" or "com". Example:</p>1219 * <code>ClassNameInformation obj = new ClassNameInformation("org.owasp.dependencycheck.analyzer.JarAnalyzer");1220 * System.out.println(obj.getName());1221 * for (String p : obj.getPackageStructure())1222 * System.out.println(p);1223 * </code>1224 * <p>1225 * Would result in:</p>1226 * <code>org.owasp.dependencycheck.analyzer.JarAnalyzer1227 * owasp1228 * dependencycheck1229 * analyzer1230 * jaranalyzer</code>1231 *1232 * @param className a fully qualified class name1233 */1234 1535 ClassNameInformation(String className) {1235 1535 name = className;
1236 1535 if (name.contains("/")) {1237 1535 final String[] tmp = className.toLowerCase().split("/");
1238 1535 int start = 0;1239 1535 int end = 3;1240 1535 if ("com".equals(tmp[0]) || "org".equals(tmp[0])) {1241 1535 start = 1;
1242 1535 end = 4;
1243 }
1244 1535 if (tmp.length <= end) {
1245 345 end = tmp.length - 1;
1246 }
1247 7330 for (int i = start; i <= end; i++) {
1248 5795 packageStructure.add(tmp[i]);
1249 }
1250 1535 } else {1251 0 packageStructure.add(name);1252 }
1253 1535 }
1254 /**1255 * The fully qualified class name.1256 */1257 private String name;1258 1259 /**1260 * Get the value of name1261 *1262 * @return the value of name1263 */1264 public String getName() {1265 0 return name;1266 }
1267 1268 /**1269 * Set the value of name1270 *1271 * @param name new value of name1272 */1273 public void setName(String name) {
1274 0 this.name = name;1275 0 }1276 /**1277 * Up to the first four levels of the package structure, excluding a leading "org" or "com".1278 */1279 1535 private final ArrayList<String> packageStructure = new ArrayList<String>();
1280 1281 /**1282 * Get the value of packageStructure1283 1216 *1284 1217 * @return the value of packageStructure1285 1218 */1286 1219 public ArrayList<String> getPackageStructure() {1287 17243 return packageStructure;1288 1220 17243 return packageStructure;1221 }
1289 1222 }
1290 1223 1291 1224 /**1292 1225 * Retrieves the next temporary directory to extract an archive too.1293 1226 *1294 1227 * @return a directory1295 1228 * @throws AnalysisException thrown if unable to create temporary directory1296 1229 */1297 1230 private File getNextTempDirectory() throws AnalysisException {
1298 0 dirCount += 1;1299 0 final File directory = new File(tempFileLocation, String.valueOf(dirCount));1300 1231 0 dirCount += 1;1232 0 final File directory = new File(tempFileLocation, String.valueOf(dirCount));1233 //getting an exception for some directories not being able to be created; might be because the directory already exists?1301 0 if (directory.exists()) {1302 0 return getNextTempDirectory();1303 1234 0 if (directory.exists()) {1235 0 return getNextTempDirectory();1236 }
1304 0 if (!directory.mkdirs()) {1305 0 final String msg = String.format("Unable to create temp directory '%s'.", directory.getAbsolutePath());1306 0 throw new AnalysisException(msg);1307 1237 0 if (!directory.mkdirs()) {1238 0 final String msg = String.format("Unable to create temp directory '%s'.", directory.getAbsolutePath());1239 0 throw new AnalysisException(msg);1240 }
1308 0 return directory;1309 1241 0 return directory;1242 }
1310 1243 }
37 *38 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long39 */40 5 public class JavaScriptAnalyzer extends AbstractFileTypeAnalyzer {
}
Classes in this File Line Coverage Branch Coverage Complexity NexusAnalyzer 20% 4% 3.375;3.375 NexusAnalyzer 18% 4% 3.375;3.375 @@ -88,7 +88,7 @@35 import org.owasp.dependencycheck.dependency.Evidence;36 import org.owasp.dependencycheck.jaxb.pom.PomUtils;import org.owasp.dependencycheck.xml.pom.PomUtils;37 import org.owasp.dependencycheck.utils.InvalidSettingException;38 47 * <ul>48 * <li>{@link org.owasp.dependencycheck.utils.Settings.KEYS#ANALYZER_NEXUS_ENABLED} determines whether this analyzer is* <li>{@link org.owasp.dependencycheck.utils.Settings.KEYS#ANALYZER_NEXUS_ENABLED} determines whether this analyzer is even49 * even enabled. This can be overridden by setting the system property.</li>* enabled. This can be overridden by setting the system property.</li>50 * <li>{@link org.owasp.dependencycheck.utils.Settings.KEYS#ANALYZER_NEXUS_URL} the URL to a Nexus service to search by* <li>{@link org.owasp.dependencycheck.utils.Settings.KEYS#ANALYZER_NEXUS_URL} the URL to a Nexus service to search by SHA-1.51 * SHA-1. There is an expected <code>%s</code> in this where the SHA-1 will get entered.</li>* There is an expected <code>%s</code> in this where the SHA-1 will get entered.</li>52 * </ul>53 */91 2 private final boolean enabled = checkEnabled();
92 /**93 * Field for doing POM work/**94 */95 2 private final PomUtils pomUtil = new PomUtils();
96 97 /**98 * Determines if this analyzer is enabled99 95 *100 96 * @return <code>true</code> if the analyzer is enabled; otherwise <code>false</code>101 97 */102 98 private boolean checkEnabled() {
103 99 /* Enable this analyzer ONLY if the Nexus URL has been set to something104 100 other than the default one (if it's the default one, we'll use the105 101 central one) and it's enabled by the user.106 102 */107 2 boolean retval = false;
108 103 2 boolean retval = false;
104 try {109 2 if ((!DEFAULT_URL.equals(Settings.getString(Settings.KEYS.ANALYZER_NEXUS_URL)))110 105 2 if ((!DEFAULT_URL.equals(Settings.getString(Settings.KEYS.ANALYZER_NEXUS_URL)))106 && Settings.getBoolean(Settings.KEYS.ANALYZER_NEXUS_ENABLED)) {111 0 LOGGER.info("Enabling Nexus analyzer");112 0 retval = true;113 107 0 LOGGER.info("Enabling Nexus analyzer");108 0 retval = true;109 } else {114 2 LOGGER.fine("Nexus analyzer disabled, using Central instead");110 2 LOGGER.fine("Nexus analyzer disabled, using Central instead");111 }
112 0 } catch (InvalidSettingException ise) {113 0 LOGGER.warning("Invalid setting. Disabling Nexus analyzer");114 2 }
115 }
116 0 } catch (InvalidSettingException ise) {117 0 LOGGER.warning("Invalid setting. Disabling Nexus analyzer");118 2 }
116 2 return retval;117 }
118 119 120 2 return retval;121 }
122 123 /**124 120 * Determine whether to enable this analyzer or not.125 121 *126 122 * @return whether the analyzer should be enabled127 123 */128 124 @Override
129 125 public boolean isEnabled() {
130 0 return enabled;131 126 0 return enabled;127 }
132 128 133 129 /**134 130 * Initializes the analyzer once before any analysis is performed.135 131 *136 132 * @throws Exception if there's an error during initialization137 133 */138 134 @Override
139 135 public void initializeFileTypeAnalyzer() throws Exception {
140 0 LOGGER.fine("Initializing Nexus Analyzer");141 0 LOGGER.fine(String.format("Nexus Analyzer enabled: %s", isEnabled()));142 0 if (isEnabled()) {143 0 final String searchUrl = Settings.getString(Settings.KEYS.ANALYZER_NEXUS_URL);144 0 LOGGER.fine(String.format("Nexus Analyzer URL: %s", searchUrl));145 136 0 LOGGER.fine("Initializing Nexus Analyzer");137 0 LOGGER.fine(String.format("Nexus Analyzer enabled: %s", isEnabled()));138 0 if (isEnabled()) {139 0 final String searchUrl = Settings.getString(Settings.KEYS.ANALYZER_NEXUS_URL);140 0 LOGGER.fine(String.format("Nexus Analyzer URL: %s", searchUrl));141 try {146 0 searcher = new NexusSearch(new URL(searchUrl));147 0 if (!searcher.preflightRequest()) {148 0 LOGGER.warning("There was an issue getting Nexus status. Disabling analyzer.");149 0 setEnabled(false);150 142 0 searcher = new NexusSearch(new URL(searchUrl));143 0 if (!searcher.preflightRequest()) {144 0 LOGGER.warning("There was an issue getting Nexus status. Disabling analyzer.");145 0 setEnabled(false);146 }
151 0 } catch (MalformedURLException mue) {152 147 0 } catch (MalformedURLException mue) {148 // I know that initialize can throw an exception, but we'll153 149 // just disable the analyzer if the URL isn't valid154 0 LOGGER.warning(String.format("Property %s not a valid URL. Nexus Analyzer disabled", searchUrl));155 0 setEnabled(false);156 0 }150 0 LOGGER.warning(String.format("Property %s not a valid URL. Nexus Analyzer disabled", searchUrl));151 0 setEnabled(false);152 0 }153 }
154 0 }155 156 /**157 }
158 0 }159 160 /**161 * Returns the analyzer's name.162 158 *163 159 * @return the name of the analyzer164 160 */165 161 @Override
166 162 public String getName() {167 4 return ANALYZER_NAME;168 163 4 return ANALYZER_NAME;164 }
169 165 170 166 /**171 167 * Returns the key used in the properties file to reference the analyzer's enabled property.172 168 *173 169 * @return the analyzer's enabled property setting key174 170 */175 171 @Override
176 172 protected String getAnalyzerEnabledSettingKey() {177 2 return Settings.KEYS.ANALYZER_NEXUS_ENABLED;178 173 2 return Settings.KEYS.ANALYZER_NEXUS_ENABLED;174 }
179 175 180 176 /**181 177 * Returns the analysis phase under which the analyzer runs.182 178 *183 179 * @return the phase under which this analyzer runs184 180 */185 181 @Override
186 182 public AnalysisPhase getAnalysisPhase() {187 1 return ANALYSIS_PHASE;188 183 1 return ANALYSIS_PHASE;184 }
189 185 190 186 /**191 187 * Returns the extensions for which this Analyzer runs.192 188 *193 189 * @return the extensions for which this Analyzer runs194 190 */195 191 @Override
196 192 public Set<String> getSupportedExtensions() {197 0 return SUPPORTED_EXTENSIONS;198 193 0 return SUPPORTED_EXTENSIONS;194 }
199 195 200 196 /**201 197 * Performs the analysis.202 198 *203 199 * @param dependency the dependency to analyze204 200 * @param engine the engine205 201 * @throws AnalysisException when there's an exception during analysis206 202 */207 203 @Override
208 204 public void analyzeFileType(Dependency dependency, Engine engine) throws AnalysisException {
209 0 if (!isEnabled()) {210 0 return;211 205 0 if (!isEnabled()) {206 0 return;207 }
212 208 try {213 0 final MavenArtifact ma = searcher.searchSha1(dependency.getSha1sum());214 0 dependency.addAsEvidence("nexus", ma, Confidence.HIGH);215 0 boolean pomAnalyzed = false;216 0 LOGGER.fine("POM URL " + ma.getPomUrl());217 0 for (Evidence e : dependency.getVendorEvidence()) {218 0 if ("pom".equals(e.getSource())) {219 0 pomAnalyzed = true;220 0 break;209 0 final MavenArtifact ma = searcher.searchSha1(dependency.getSha1sum());210 0 dependency.addAsEvidence("nexus", ma, Confidence.HIGH);211 0 boolean pomAnalyzed = false;212 0 LOGGER.fine("POM URL " + ma.getPomUrl());213 0 for (Evidence e : dependency.getVendorEvidence()) {214 0 if ("pom".equals(e.getSource())) {215 0 pomAnalyzed = true;216 0 break;217 }
218 0 }219 0 if (!pomAnalyzed && ma.getPomUrl() != null) {220 0 File pomFile = null;221 }
222 0 }223 0 if (!pomAnalyzed && ma.getPomUrl() != null) {224 0 File pomFile = null;225 try {226 0 final File baseDir = Settings.getTempDirectory();227 0 pomFile = File.createTempFile("pom", ".xml", baseDir);228 0 if (!pomFile.delete()) {229 0 final String msg = String.format("Unable to fetch pom.xml for %s from Nexus repository; "230 222 0 final File baseDir = Settings.getTempDirectory();223 0 pomFile = File.createTempFile("pom", ".xml", baseDir);224 0 if (!pomFile.delete()) {225 0 final String msg = String.format("Unable to fetch pom.xml for %s from Nexus repository; "226 + "this could result in undetected CPE/CVEs.", dependency.getFileName());231 0 LOGGER.warning(msg);232 0 LOGGER.fine("Unable to delete temp file");233 227 0 LOGGER.warning(msg);228 0 LOGGER.fine("Unable to delete temp file");229 }
234 0 LOGGER.fine(String.format("Downloading %s", ma.getPomUrl()));235 0 Downloader.fetchFile(new URL(ma.getPomUrl()), pomFile);236 0 pomUtil.analyzePOM(dependency, pomFile);237 0 } catch (DownloadFailedException ex) {238 0 final String msg = String.format("Unable to download pom.xml for %s from Nexus repository; "239 230 0 LOGGER.fine(String.format("Downloading %s", ma.getPomUrl()));231 0 Downloader.fetchFile(new URL(ma.getPomUrl()), pomFile);232 0 PomUtils.analyzePOM(dependency, pomFile);233 0 } catch (DownloadFailedException ex) {234 0 final String msg = String.format("Unable to download pom.xml for %s from Nexus repository; "235 + "this could result in undetected CPE/CVEs.", dependency.getFileName());240 0 LOGGER.warning(msg);241 236 0 LOGGER.warning(msg);237 } finally {242 0 if (pomFile != null && !FileUtils.deleteQuietly(pomFile)) {243 0 pomFile.deleteOnExit();244 238 0 if (pomFile != null && !FileUtils.deleteQuietly(pomFile)) {239 0 pomFile.deleteOnExit();240 }
245 241 }
246 242 }
247 0 } catch (IllegalArgumentException iae) {248 243 0 } catch (IllegalArgumentException iae) {244 //dependency.addAnalysisException(new AnalysisException("Invalid SHA-1"));249 0 LOGGER.info(String.format("invalid sha-1 hash on %s", dependency.getFileName()));250 0 } catch (FileNotFoundException fnfe) {251 245 0 LOGGER.info(String.format("invalid sha-1 hash on %s", dependency.getFileName()));246 0 } catch (FileNotFoundException fnfe) {247 //dependency.addAnalysisException(new AnalysisException("Artifact not found on repository"));252 0 LOGGER.fine(String.format("Artifact not found in repository '%s'", dependency.getFileName()));253 0 LOGGER.log(Level.FINE, fnfe.getMessage(), fnfe);254 0 } catch (IOException ioe) {255 248 0 LOGGER.fine(String.format("Artifact not found in repository '%s'", dependency.getFileName()));249 0 LOGGER.log(Level.FINE, fnfe.getMessage(), fnfe);250 0 } catch (IOException ioe) {251 //dependency.addAnalysisException(new AnalysisException("Could not connect to repository", ioe));256 0 LOGGER.log(Level.FINE, "Could not connect to nexus repository", ioe);257 0 }258 0 }259 252 0 LOGGER.log(Level.FINE, "Could not connect to nexus repository", ioe);253 0 }254 0 }255 }
}
34 *35 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long36 */37 2 public class NvdCveAnalyzer implements Analyzer {
}
28 *29 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long30 */31 2 public class VulnerabilitySuppressionAnalyzer extends AbstractSuppressionAnalyzer {
}
22 *23 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long24 */25 }
22 *23 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long24 */25 }
}
53 *54 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long55 */56 */185 public void saveEntry(String vendor, String product, IndexWriter indexWriter) throws CorruptIndexException, IOException {
186 24669 final Document doc = new Document();
187 24669 final Field v = new TextField(Fields.VENDOR, vendor, Field.Store.YES);
188 24669 final Field p = new TextField(Fields.PRODUCT, product, Field.Store.YES);
189 24669 doc.add(v);
190 24669 doc.add(p);
191 24669 indexWriter.addDocument(doc);
192 24669 }
186 24789 final Document doc = new Document();
187 24789 final Field v = new TextField(Fields.VENDOR, vendor, Field.Store.YES);
188 24789 final Field p = new TextField(Fields.PRODUCT, product, Field.Store.YES);
189 24789 doc.add(v);
190 24789 doc.add(p);
191 24789 indexWriter.addDocument(doc);
192 24789 }
193 194 try {233 1 final Set<Pair<String, String>> data = cve.getVendorProductList();234 1 for (Pair<String, String> pair : data) {
235 24669 saveEntry(pair.getLeft(), pair.getRight(), indexWriter);
236 24669 }
235 24789 saveEntry(pair.getLeft(), pair.getRight(), indexWriter);
236 24789 }
237 0 } catch (DatabaseException ex) {238 0 LOGGER.log(Level.FINE, null, ex);239 0 throw new IndexException("Error reading CPE data", ex);*/315 public Document getDocument(int documentId) throws IOException {
316 43 return indexSearcher.doc(documentId);316 47 return indexSearcher.doc(documentId);317 }
318 }
22 *23 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long24 */25 }
26 *27 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long28 */29 1377 public class IndexEntry implements Serializable {
29 1381 public class IndexEntry implements Serializable {
30 31 */79 public void setVendor(String vendor) {
80 1376 this.vendor = vendor;81 1376 }
80 1380 this.vendor = vendor;81 1380 }
82 /**83 */92 public String getProduct() {93 58 return product;93 62 return product;94 }
95 */101 public void setProduct(String product) {
102 1376 this.product = product;103 1376 }
102 1380 this.product = product;103 1380 }
104 /**105 */123 public void setSearchScore(float searchScore) {
124 43 this.searchScore = searchScore;125 43 }
124 47 this.searchScore = searchScore;125 47 }
126 127 @Override
164 public boolean equals(Object obj) {
165 139 if (obj == null) {165 171 if (obj == null) {166 0 return false;167 }
168 139 if (getClass() != obj.getClass()) {168 171 if (getClass() != obj.getClass()) {169 0 return false;170 }
171 139 final IndexEntry other = (IndexEntry) obj;172 139 if ((this.vendor == null) ? (other.vendor != null) : !this.vendor.equals(other.vendor)) {173 134 return false;
171 171 final IndexEntry other = (IndexEntry) obj;172 171 if ((this.vendor == null) ? (other.vendor != null) : !this.vendor.equals(other.vendor)) {173 166 return false;
174 }
175 5 if ((this.product == null) ? (other.product != null) : !this.product.equals(other.product)) {@Override
187 public String toString() {188 43 return "IndexEntry{" + "vendor=" + vendor + ", product=" + product + '}';
188 47 return "IndexEntry{" + "vendor=" + vendor + ", product=" + product + '}';
189 }
190 }
22 *23 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long24 */25 }
28 *29 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long30 */31 }
27 *28 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long29 */30 0 public class CweHandler extends DefaultHandler {}
27 *28 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long29 */30 * The char term attribute.34 */35 10 private final CharTermAttribute termAtt = addAttribute(CharTermAttribute.class);
35 9 private final CharTermAttribute termAtt = addAttribute(CharTermAttribute.class);
36 37 */42 protected CharTermAttribute getTermAtt() {43 25757 return termAtt;43 19600 return termAtt;44 }
45 */55 protected LinkedList<String> getTokens() {56 25758 return tokens;56 19490 return tokens;57 }
58 */64 public AbstractTokenizingFilter(TokenStream stream) {65 10 super(stream);66 10 tokens = new LinkedList<String>();67 10 }
65 9 super(stream);66 9 tokens = new LinkedList<String>();67 9 }
68 69 */74 protected boolean addTerm() {
75 25700 final boolean termAdded = !tokens.isEmpty();
76 25697 if (termAdded) {
77 17242 final String term = tokens.pop();78 17240 clearAttributes();
79 17239 termAtt.append(term);
75 19420 final boolean termAdded = !tokens.isEmpty();
76 19177 if (termAdded) {
77 12818 final String term = tokens.pop();78 12798 clearAttributes();
79 12919 termAtt.append(term);
80 }
81 25694 return termAdded;81 19203 return termAdded;82 }
83 }
26 *27 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long28 */29 @Override
59 protected boolean isTokenChar(int c) {
60 588397 return Character.isLetter(c) || Character.isDigit(c);
60 591571 return Character.isLetter(c) || Character.isDigit(c);
61 }
62 }
23 *24 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long25 */26 0 public class DependencySimilarity extends DefaultSimilarity {}
34 *35 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long36 */37 }
26 *27 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long28 */29 final CharSequence text) {55 56 102 if (text == null || buf == null) {56 150 if (text == null || buf == null) {57 1 return;58 }
59 60 991 for (int i = 0; i < text.length(); i++) {
61 890 final char c = text.charAt(i);
62 890 switch (c) {
60 1291 for (int i = 0; i < text.length(); i++) {
61 1142 final char c = text.charAt(i);
62 1142 switch (c) {
63 case '+':
64 81 58 buf.append('\\');82 default:83 890 buf.append(c);
83 1142 buf.append(c);
84 break;85 }
86 }
87 101 }
87 149 }
88 89 public static String escapeLuceneQuery(final CharSequence text) {
96 97 101 if (text == null) {
97 149 if (text == null) {
98 1 return null;
99 }
100 101 100 int size = text.length();102 100 size = size >> 1;
103 100 final StringBuilder buf = new StringBuilder(size);
101 148 int size = text.length();102 148 size = size >> 1;
103 148 final StringBuilder buf = new StringBuilder(size);
104 105 100 appendEscapedLuceneQuery(buf, text);
105 148 appendEscapedLuceneQuery(buf, text);
106 107 100 return buf.toString();107 148 return buf.toString();108 }
109 }
32 *33 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long34 */35 }
31 *32 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long33 */34 87 //collect all the terms into the words collection88 650 while (input.incrementToken()) {
89 184 final String word = new String(termAtt.buffer(), 0, termAtt.length());
90 184 words.add(word);
91 184 }
88 842 while (input.incrementToken()) {
89 232 final String word = new String(termAtt.buffer(), 0, termAtt.length());
90 232 words.add(word);
91 232 }
92 93 //if we have a previousTerm - write it out as its own token concatenated94 // with the current word (if one is available).95 466 if (previousWord != null && !words.isEmpty()) {
96 176 final String word = words.getFirst();97 176 clearAttributes();
98 176 termAtt.append(previousWord).append(word);
99 176 previousWord = null;100 176 return true;
95 610 if (previousWord != null && !words.isEmpty()) {
96 224 final String word = words.getFirst();97 224 clearAttributes();
98 224 termAtt.append(previousWord).append(word);
99 224 previousWord = null;100 224 return true;
101 }
102 //if we have words, write it out as a single token103 290 if (!words.isEmpty()) {
104 184 final String word = words.removeFirst();105 184 clearAttributes();
106 184 termAtt.append(word);
107 184 previousWord = word;
108 184 return true;
103 386 if (!words.isEmpty()) {
104 232 final String word = words.removeFirst();105 232 clearAttributes();
106 232 termAtt.append(word);
107 232 previousWord = word;
108 232 return true;
109 }
110 106 return false;
110 154 return false;
111 }
112 }
35 *36 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long37 */38 */48 public UrlTokenizingFilter(TokenStream stream) {49 10 super(stream);50 10 }
49 9 super(stream);50 9 }
51 52 @Override
60 public boolean incrementToken() throws IOException {
61 25752 final LinkedList<String> tokens = getTokens();62 25750 final CharTermAttribute termAtt = getTermAtt();63 25757 if (tokens.isEmpty() && input.incrementToken()) {
64 17235 final String text = new String(termAtt.buffer(), 0, termAtt.length());
65 17231 if (UrlStringUtils.containsUrl(text)) {
61 19218 final LinkedList<String> tokens = getTokens();62 19329 final CharTermAttribute termAtt = getTermAtt();63 19573 if (tokens.isEmpty() && input.incrementToken()) {
64 12952 final String text = new String(termAtt.buffer(), 0, termAtt.length());
65 12840 if (UrlStringUtils.containsUrl(text)) {
66 6 final String[] parts = text.split("\\s");
67 12 for (String part : parts) {
68 6 if (UrlStringUtils.isUrl(part)) {79 }
80 6 } else {81 17224 tokens.add(text);
81 12860 tokens.add(text);
82 }
83 }
84 25693 return addTerm();84 19288 return addTerm();85 }
86 }
// vim: cc=120:sw=4:ts=4:sts=4Classes in this File Line Coverage Branch Coverage Complexity NexusSearch 0% 0% 8.666666666666666;8.667 NexusSearch 0% 0% 8.666666666666666;8.667 @@ -102,7 +102,7 @@42 /**43 * The root URL for the Nexus repository service* The root URL for the Nexus repository service.44 */45 47 /**48 * Whether to use the Proxy when making requests* Whether to use the Proxy when making requests.49 */50 private boolean useProxy;
51 /**52 /*** The username to use if the Nexus requires authentication.53 * Used for logging.54 */55 0 private static final Logger LOGGER = Logger.getLogger(NexusSearch.class54 0 private String userName = null;55 /**56 .getName());
* The password to use if the Nexus requires authentication.57 */58 /**private char[] password;
59 * Creates a NexusSearch for the given repository URL.60 *61 * @param rootURL the root URL of the repository on which searches should execute. full URL's are calculated relative to this62 * URL, so it should end with a /63 */64 0 public NexusSearch(URL rootURL) {65 0 this.rootURL = rootURL;66 try {67 0 if (null != Settings.getString(Settings.KEYS.PROXY_SERVER)68 && Settings.getBoolean(Settings.KEYS.ANALYZER_NEXUS_PROXY)) {69 0 useProxy = true;70 0 LOGGER.fine("Using proxy");71 } else {72 0 useProxy = false;73 0 LOGGER.fine("Not using proxy");74 }
75 0 } catch (InvalidSettingException ise) {76 0 useProxy = false;77 0 }78 0 }79 80 /**81 * Searches the configured Nexus repository for the given sha1 hash. If the artifact is found, a <code>MavenArtifact</code> is82 * populated with the coordinate information.83 *84 * @param sha1 The SHA-1 hash string for which to search85 * @return the populated Maven coordinates86 * @throws IOException if it's unable to connect to the specified repository or if the specified artifact is not found.87 60 * Used for logging.61 */62 0 private static final Logger LOGGER = Logger.getLogger(NexusSearch.class.getName());63 64 /**65 * Creates a NexusSearch for the given repository URL.66 *67 * @param rootURL the root URL of the repository on which searches should execute. full URL's are calculated relative to this68 * URL, so it should end with a /69 */70 0 public NexusSearch(URL rootURL) {71 0 this.rootURL = rootURL;72 try {73 0 if (null != Settings.getString(Settings.KEYS.PROXY_SERVER)74 && Settings.getBoolean(Settings.KEYS.ANALYZER_NEXUS_PROXY)) {75 0 useProxy = true;76 0 LOGGER.fine("Using proxy");77 } else {78 0 useProxy = false;79 0 LOGGER.fine("Not using proxy");80 }
81 0 } catch (InvalidSettingException ise) {82 0 useProxy = false;83 0 }84 0 }85 86 /**87 * Searches the configured Nexus repository for the given sha1 hash. If the artifact is found, a <code>MavenArtifact</code> is88 public MavenArtifact searchSha1(String sha1) throws IOException {
89 0 if (null == sha1 || !sha1.matches("^[0-9A-Fa-f]{40}$")) {90 0 throw new IllegalArgumentException("Invalid SHA1 format");* populated with the coordinate information.89 *90 * @param sha1 The SHA-1 hash string for which to search91 }
* @return the populated Maven coordinates92 93 0 final URL url = new URL(rootURL, String.format("identify/sha1/%s",* @throws IOException if it's unable to connect to the specified repository or if the specified artifact is not found.93 */94 sha1.toLowerCase()));
95 96 0 LOGGER.fine(String.format("Searching Nexus url %s", url.toString()));public MavenArtifact searchSha1(String sha1) throws IOException {
95 0 if (null == sha1 || !sha1.matches("^[0-9A-Fa-f]{40}$")) {96 0 throw new IllegalArgumentException("Invalid SHA1 format");97 }
98 // Determine if we need to use a proxy. The rules:99 // 1) If the proxy is set, AND the setting is set to true, use the proxy99 0 final URL url = new URL(rootURL, String.format("identify/sha1/%s",100 // 2) Otherwise, don't use the proxy (either the proxy isn't configured,sha1.toLowerCase()));
101 // or proxy is specifically102 // set to false103 0 final HttpURLConnection conn = URLConnectionFactory.createHttpURLConnection(url, useProxy);102 0 LOGGER.fine(String.format("Searching Nexus url %s", url.toString()));103 104 105 0 conn.setDoOutput(true);// Determine if we need to use a proxy. The rules:105 // 1) If the proxy is set, AND the setting is set to true, use the proxy106 // 2) Otherwise, don't use the proxy (either the proxy isn't configured,107 // JSON would be more elegant, but there's not currently a dependency// or proxy is specifically set to false108 // on JSON, so don't want to add one just for this109 0 conn.addRequestProperty("Accept", "application/xml");110 0 conn.connect();HttpURLConnection conn;
109 0 conn = URLConnectionFactory.createHttpURLConnection(url, useProxy);110 0 conn.setDoOutput(true);111 112 0 if (conn.getResponseCode() == 200) {112 // JSON would be more elegant, but there's not currently a dependency113 // on JSON, so don't want to add one just for this114 0 conn.addRequestProperty("Accept", "application/xml");115 0 conn.connect();116 117 0 if (conn.getResponseCode() == 200) {118 try {114 0 final DocumentBuilder builder = DocumentBuilderFactory115 .newInstance().newDocumentBuilder();
116 0 final Document doc = builder.parse(conn.getInputStream());117 0 final XPath xpath = XPathFactory.newInstance().newXPath();118 0 final String groupId = xpath119 .evaluate(
119 0 final DocumentBuilder builder = DocumentBuilderFactory120 "/org.sonatype.nexus.rest.model.NexusArtifact/groupId",121 doc);
122 0 final String artifactId = xpath.evaluate(123 "/org.sonatype.nexus.rest.model.NexusArtifact/artifactId",.newInstance().newDocumentBuilder();
121 0 final Document doc = builder.parse(conn.getInputStream());122 0 final XPath xpath = XPathFactory.newInstance().newXPath();123 0 final String groupId = xpath124 doc);
125 0 final String version = xpath.evaluate(
125 "/org.sonatype.nexus.rest.model.NexusArtifact/groupId",126 .evaluate(
127 "/org.sonatype.nexus.rest.model.NexusArtifact/version",doc);
127 0 final String artifactId = xpath.evaluate(128 doc);
129 0 final String link = xpath130 .evaluate(
"/org.sonatype.nexus.rest.model.NexusArtifact/artifactId",129 doc);
130 0 final String version = xpath131 "/org.sonatype.nexus.rest.model.NexusArtifact/artifactLink",132 doc);
133 0 final String pomLink = xpath134 .evaluate(
135 "/org.sonatype.nexus.rest.model.NexusArtifact/pomLink",136 132 "/org.sonatype.nexus.rest.model.NexusArtifact/version",133 doc);
137 0 final MavenArtifact ma = new MavenArtifact(groupId, artifactId, version);138 0 if (link != null && !"".equals(link)) {139 0 ma.setArtifactUrl(link);134 0 final String link = xpath135 .evaluate(
136 "/org.sonatype.nexus.rest.model.NexusArtifact/artifactLink",137 doc);
138 0 final String pomLink = xpath139 .evaluate(
140 "/org.sonatype.nexus.rest.model.NexusArtifact/pomLink",141 doc);
142 0 final MavenArtifact ma = new MavenArtifact(groupId, artifactId, version);143 0 if (link != null && !"".equals(link)) {144 0 ma.setArtifactUrl(link);145 }
141 0 if (pomLink != null && !"".equals(pomLink)) {142 0 ma.setPomUrl(pomLink);143 146 0 if (pomLink != null && !"".equals(pomLink)) {147 0 ma.setPomUrl(pomLink);148 }
144 0 return ma;145 0 } catch (Throwable e) {146 149 0 return ma;150 0 } catch (Throwable e) {151 // Anything else is jacked-up XML stuff that we really can't recover147 // from well148 0 throw new IOException(e.getMessage(), e);149 }
150 0 } else if (conn.getResponseCode() == 404) {151 0 throw new FileNotFoundException("Artifact not found in Nexus");152 } else {153 0 final String msg = String.format("Could not connect to Nexus received response code: %d %s",// from well153 0 throw new IOException(e.getMessage(), e);154 conn.getResponseCode(), conn.getResponseMessage());
155 0 LOGGER.fine(msg);156 0 throw new IOException(msg);}
155 0 } else if (conn.getResponseCode() == 404) {156 0 throw new FileNotFoundException("Artifact not found in Nexus");157 }
158 }
} else {158 0 final String msg = String.format("Could not connect to Nexus received response code: %d %s",159 160 /**161 * Do a preflight request to see if the repository is actually working.conn.getResponseCode(), conn.getResponseMessage());
160 0 LOGGER.fine(msg);161 0 throw new IOException(msg);162 *}
163 * @return whether the repository is listening and returns the /status URL correctly164 */165 public boolean preflightRequest() {
166 try {167 0 final HttpURLConnection conn = URLConnectionFactory.createHttpURLConnection(new URL(rootURL, "status"), useProxy);168 0 conn.addRequestProperty("Accept", "application/xml");169 0 conn.connect();170 0 if (conn.getResponseCode() != 200) {171 0 LOGGER.log(Level.WARNING, "Expected 200 result from Nexus, got {0}", conn.getResponseCode());172 0 return false;173 }
174 0 final DocumentBuilder builder = DocumentBuilderFactory.newInstance().newDocumentBuilder();175 0 final Document doc = builder.parse(conn.getInputStream());176 0 if (!"status".equals(doc.getDocumentElement().getNodeName())) {177 0 LOGGER.log(Level.WARNING, "Expected root node name of status, got {0}", doc.getDocumentElement().getNodeName());178 0 return false;179 }
180 0 } catch (Throwable e) {181 0 return false;182 0 }183 184 0 return true;185 }
186 }
187 164 188 165 /**166 * Do a preflight request to see if the repository is actually working.167 *168 * @return whether the repository is listening and returns the /status URL correctly169 */170 public boolean preflightRequest() {
171 HttpURLConnection conn;
172 try {173 0 URL url = new URL(rootURL, "status");174 0 conn = URLConnectionFactory.createHttpURLConnection(url, useProxy);175 0 conn.addRequestProperty("Accept", "application/xml");176 0 conn.connect();177 0 if (conn.getResponseCode() != 200) {178 0 LOGGER.log(Level.WARNING, "Expected 200 result from Nexus, got {0}", conn.getResponseCode());179 0 return false;180 }
181 0 final DocumentBuilder builder = DocumentBuilderFactory.newInstance().newDocumentBuilder();182 0 final Document doc = builder.parse(conn.getInputStream());183 0 if (!"status".equals(doc.getDocumentElement().getNodeName())) {184 0 LOGGER.log(Level.WARNING, "Expected root node name of status, got {0}", doc.getDocumentElement().getNodeName());185 0 return false;186 }
187 0 } catch (Throwable e) {188 0 return false;189 0 }190 191 0 return true;192 }
193 }
194 195 // vim: cc=120:sw=4:ts=4:sts=4}
}
}
}
41 *42 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long43 */44 }
23 *24 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long25 */26 }
49 *50 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long51 */52 try {320 1 ps = getConnection().prepareStatement(SELECT_VENDOR_PRODUCT_LIST);
321 1 rs = ps.executeQuery();
322 24670 while (rs.next()) {
323 24669 data.add(new Pair<String, String>(rs.getString(1), rs.getString(2)));322 24790 while (rs.next()) {
323 24789 data.add(new Pair<String, String>(rs.getString(1), rs.getString(2)));324 }
325 0 } catch (SQLException ex) {}
22 *23 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long24 */25 }
34 *35 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long36 */37 }
22 *23 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long24 */25 }
36 *37 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long38 */39 84 2 final File[] files = file.listFiles();85 86 33 for (File f : files) {
86 34 for (File f : files) {
87 try {88 31 urls.add(f.toURI().toURL());
88 32 urls.add(f.toURI().toURL());
89 0 } catch (MalformedURLException ex) {90 0 final String msg = String.format("Unable to load database driver '%s'; invalid path provided '%s'",91 className, f.getAbsoluteFile());
92 0 LOGGER.log(Level.FINE, msg, ex);93 0 throw new DriverLoadException(msg, ex);94 31 }
94 32 }
95 }
96 2 } else if (file.exists()) {
}
36 *37 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long38 * @see java.sql.Driver39 }
25 *26 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long27 */28 }
39 *40 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long41 */42 2 public class EngineVersionCheck implements CachedWebDataSource {
}
22 *23 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long24 */25 15 public class NvdCveInfo {
}
29 *30 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long31 */32 0 public class NvdCveUpdater implements CachedWebDataSource {}
46 *47 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long48 */49 }
26 *27 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long28 */29 }
32 *33 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long34 */35 12 public class UpdateableNvdCve implements java.lang.Iterable<NvdCveInfo>, Iterator<NvdCveInfo> {
}
22 *23 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long24 */25 }
24 *25 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long26 */27 }
42 *43 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long44 */45 0 public class DownloadTask implements Callable<Future<ProcessTask>> {281 int len;282 1521 while ((len = cin.read(buffer)) > 0) {
283 1519 out.write(buffer, 0, len);
282 1200 while ((len = cin.read(buffer)) > 0) {
283 1198 out.write(buffer, 0, len);
284 }
285 }
44 *45 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long46 */47 0 public class ProcessTask implements Callable<ProcessTask> {}
34 *35 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long36 */37 1 public class NvdCve12Handler extends DefaultHandler {
}
38 *39 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long40 */41 1 public class NvdCve20Handler extends DefaultHandler {
}
22 *23 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long24 */25 9 public enum Confidence {}
40 *41 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long42 */43 2 public class Dependency implements Serializable, Comparable<Dependency> {
*/473 public EvidenceCollection getProductEvidence() {474 98 return this.productEvidence;
474 102 return this.productEvidence;
475 }
476 }
Classes in this File Line Coverage Branch Coverage Complexity Evidence 60% 36% 3.380952380952381;3.381 Evidence 65% 48% 3.272727272727273;3.273 @@ -66,10 +66,10 @@24 *25 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long26 */27 37353 public class Evidence implements Serializable, Comparable<Evidence> {
27 38725 public class Evidence implements Serializable, Comparable<Evidence> {
28 29 * @param confidence the confidence of the evidence.42 */43 14719 public Evidence(String source, String name, String value, Confidence confidence) {44 14719 this.source = source;45 14719 this.name = name;46 14719 this.value = value;47 14719 this.confidence = confidence;48 14719 }
43 14740 public Evidence(String source, String name, String value, Confidence confidence) {44 14740 this.source = source;45 14740 this.name = name;46 14740 this.value = value;47 14740 this.confidence = confidence;48 14740 }
49 /**50 */103 public String getValue() {104 709 used = true;105 709 return value;104 837 used = true;105 837 return value;106 }
107 */114 public String getValue(Boolean setUsed) {115 50 used = used || setUsed;116 50 return value;115 52 used = used || setUsed;116 52 return value;117 }
118 */137 public boolean isUsed() {
138 1059 return used;138 1279 return used;139 }
140 */159 public Confidence getConfidence() {160 233 return confidence;160 239 return confidence;161 }
162 @Override
194 public boolean equals(Object that) {
195 0 if (this == that) {195 9 if (this == that) {196 0 return true;197 }
198 0 if (!(that instanceof Evidence)) {198 9 if (!(that instanceof Evidence)) {199 0 return false;200 }
201 0 final Evidence e = (Evidence) that;201 9 final Evidence e = (Evidence) that;202 203 0 return testEquality(name, e.name) && testEquality(source, e.source) && testEquality(value, e.value)203 9 return testEquality(name, e.name) && testEquality(source, e.source) && testEquality(value, e.value)204 && (confidence == null ? e.confidence == null : confidence == e.confidence);
205 */214 private boolean testEquality(String l, String r) {
215 0 return l == null ? r == null : l.equalsIgnoreCase(r);215 11 return l == null ? r == null : l.equalsIgnoreCase(r);216 }
217 */224 public int compareTo(Evidence o) {
225 37353 if (o == null) {225 38735 if (o == null) {226 0 return 1;227 }
228 37353 if (equalsWithNullCheck(source, o.source)) {
229 23683 if (equalsWithNullCheck(name, o.name)) {
230 23576 if (equalsWithNullCheck(value, o.value)) {
231 14655 if (equalsWithNullCheck(confidence, o.confidence)) {
232 14642 return 0; //they are equal
228 38735 if (equalsWithNullCheck(source, o.source)) {
229 23706 if (equalsWithNullCheck(name, o.name)) {
230 23582 if (equalsWithNullCheck(value, o.value)) {
231 14657 if (equalsWithNullCheck(confidence, o.confidence)) {
232 14644 return 0; //they are equal
233 } else {234 13 return compareToWithNullCheck(confidence, o.confidence);}
236 } else {237 8921 return compareToIgnoreCaseWithNullCheck(value, o.value);237 8925 return compareToIgnoreCaseWithNullCheck(value, o.value);238 }
239 } else {240 107 return compareToIgnoreCaseWithNullCheck(name, o.name);240 124 return compareToIgnoreCaseWithNullCheck(name, o.name);241 }
242 } else {243 13670 return compareToIgnoreCaseWithNullCheck(source, o.source);243 15029 return compareToIgnoreCaseWithNullCheck(source, o.source);244 }
245 */254 private boolean equalsWithNullCheck(String me, String other) {
255 84612 if (me == null && other == null) {255 86023 if (me == null && other == null) {256 0 return true;257 84612 } else if (me == null || other == null) {257 86023 } else if (me == null || other == null) {258 0 return false;259 }
260 84612 return me.equals(other);260 86023 return me.equalsIgnoreCase(other);261 }
262 */270 private boolean equalsWithNullCheck(Confidence me, Confidence other) {
271 14655 if (me == null && other == null) {271 14657 if (me == null && other == null) {272 0 return true;273 14655 } else if (me == null || other == null) {273 14657 } else if (me == null || other == null) {274 0 return false;275 }
276 14655 return me.equals(other);276 14657 return me.equals(other);277 }
278 */287 private int compareToIgnoreCaseWithNullCheck(String me, String other) {
288 22698 if (me == null && other == null) {288 24078 if (me == null && other == null) {289 0 return 0;290 22698 } else if (me == null) {290 24078 } else if (me == null) {291 0 return -1; //the other string is greater then me292 22698 } else if (other == null) {292 24078 } else if (other == null) {293 0 return 1; //me is greater then the other string294 }
295 22698 return me.compareToIgnoreCase(other);295 24078 return me.compareToIgnoreCase(other);296 }
297 298 /**299 * Wrapper around {@link java.lang.Enum#compareTo(java.lang.Enum) Enum.compareTo} with an exhaustive, possibly* Wrapper around {@link java.lang.Enum#compareTo(java.lang.Enum) Enum.compareTo} with an exhaustive, possibly duplicative,300 * duplicative, check against nulls.* check against nulls.301 *302 315 }
316 317 /**318 * Standard toString() implementation.319 *320 * @return the string representation of the object321 */322 @Override
323 public String toString() {324 0 return "Evidence{" + "name=" + name + ", source=" + source + ", value=" + value + ", confidence=" + confidence + '}';325 }
326 }
37 *38 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long39 */40 * Used to iterate over highest confidence evidence contained in the collection.48 */49 59 private static final Filter<Evidence> HIGHEST_CONFIDENCE = new Filter<Evidence>() {
49 61 private static final Filter<Evidence> HIGHEST_CONFIDENCE = new Filter<Evidence>() {
50 public boolean passes(Evidence evidence) {
51 58 return evidence.getConfidence() == Confidence.HIGHEST;
51 60 return evidence.getConfidence() == Confidence.HIGHEST;
52 }
53 * Used to iterate over high confidence evidence contained in the collection.56 */57 49 private static final Filter<Evidence> HIGH_CONFIDENCE = new Filter<Evidence>() {
57 50 private static final Filter<Evidence> HIGH_CONFIDENCE = new Filter<Evidence>() {
58 public boolean passes(Evidence evidence) {
59 48 return evidence.getConfidence() == Confidence.HIGH;
59 49 return evidence.getConfidence() == Confidence.HIGH;
60 }
61 65 1 private static final Filter<Evidence> MEDIUM_CONFIDENCE = new Filter<Evidence>() {
66 public boolean passes(Evidence evidence) {
67 32 return evidence.getConfidence() == Confidence.MEDIUM;
67 34 return evidence.getConfidence() == Confidence.MEDIUM;
68 }
69 73 1 private static final Filter<Evidence> LOW_CONFIDENCE = new Filter<Evidence>() {
74 public boolean passes(Evidence evidence) {
75 32 return evidence.getConfidence() == Confidence.LOW;
75 34 return evidence.getConfidence() == Confidence.LOW;
76 }
77 81 1 private static final Filter<Evidence> EVIDENCE_USED = new Filter<Evidence>() {
82 public boolean passes(Evidence evidence) {
83 1057 return evidence.isUsed();83 1277 return evidence.isUsed();84 }
85 */221 public Iterator<Evidence> iterator() {222 126 return list.iterator();222 138 return list.iterator();223 }
224 */231 public boolean containsUsedString(String text) {
232 121 if (text == null) {232 133 if (text == null) {233 0 return false;234 }
235 121 final String textToTest = text.toLowerCase();235 133 final String textToTest = text.toLowerCase();236 237 121 for (Evidence e : EvidenceCollection.EVIDENCE_USED.filter(this)) {
237 133 for (Evidence e : EvidenceCollection.EVIDENCE_USED.filter(this)) {
238 //TODO consider changing the regex to only compare alpha-numeric (i.e. strip everything else)239 643 final String value = urlCorrection(e.getValue().toLowerCase()).replaceAll("[\\s_-]", "");
240 643 if (value.contains(textToTest)) {
239 768 final String value = urlCorrection(e.getValue().toLowerCase()).replaceAll("[\\s_-]", "");
240 768 if (value.contains(textToTest)) {
241 48 return true;
242 }
243 595 }
244 73 return false;
243 720 }
244 85 return false;
245 }
246 273 public boolean contains(Confidence confidence) {
274 14 for (Evidence e : list) {
275 63 if (e.getConfidence().equals(confidence)) {
275 62 if (e.getConfidence().equals(confidence)) {
276 12 return true;
277 }
278 51 }
278 50 }
279 2 return false;
280 }
public String toString() {342 3 final StringBuilder sb = new StringBuilder();
343 3 for (Evidence e : this.list) {
344 12 sb.append(e.getValue()).append(' ');345 12 }
344 13 sb.append(e.getValue()).append(' ');345 13 }
346 3 return sb.toString();347 }
*/376 private String urlCorrection(String value) {377 643 if (value == null || !UrlStringUtils.containsUrl(value)) {378 627 return value;377 768 if (value == null || !UrlStringUtils.containsUrl(value)) {378 749 return value;379 }
380 16 final StringBuilder sb = new StringBuilder(value.length());
381 16 final String[] parts = value.split("\\s");
382 32 for (String part : parts) {
383 16 if (UrlStringUtils.isUrl(part)) {380 19 final StringBuilder sb = new StringBuilder(value.length());
381 19 final String[] parts = value.split("\\s");
382 38 for (String part : parts) {
383 19 if (UrlStringUtils.isUrl(part)) {384 try {385 16 final List<String> data = UrlStringUtils.extractImportantUrlData(part);386 16 sb.append(' ').append(StringUtils.join(data, ' '));
385 19 final List<String> data = UrlStringUtils.extractImportantUrlData(part);386 19 sb.append(' ').append(StringUtils.join(data, ' '));
387 0 } catch (MalformedURLException ex) {388 0 LOGGER.log(Level.FINE, "error parsing " + part, ex);389 0 sb.append(' ').append(part);390 16 }
390 19 }
391 } else {392 0 sb.append(' ').append(part);}
394 }
395 16 return sb.toString().trim();395 19 return sb.toString().trim();396 }
397 }
23 *24 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long25 */26 27 public class Identifier implements Serializable, Comparable<Identifier> {
}
24 *25 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long26 */27 502 public class Reference implements Serializable, Comparable<Reference> {
}
27 *28 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long29 */30 36 public class Vulnerability implements Serializable, Comparable<Vulnerability> {
}
25 *26 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long27 */28 105 public class VulnerabilityComparator implements Comparator<Vulnerability>, Serializable {
}
29 *30 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long31 */32 11337 public class VulnerableSoftware extends IndexEntry implements Serializable, Comparable<VulnerableSoftware> {
}
24 *25 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long26 */27 }
}
29 *30 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long31 */32 0 public class EscapeTool {}
47 *48 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long49 */50 }
}
25 *26 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long27 */28 171 public class PropertyType {
}
28 *29 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long30 */31 9 public class SuppressionErrorHandler implements ErrorHandler {
}
28 *29 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long30 */31 9 public class SuppressionHandler extends DefaultHandler {
}
24 *25 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long26 */27 }
39 *40 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long41 */42 6 public class SuppressionParser {
}
28 *29 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long30 */31 91 public class SuppressionRule {
}
29 *30 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long31 */32 }
21 *22 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long23 */24 }
37 *38 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long39 */40 14 public class DependencyVersion implements Iterable, Comparable<DependencyVersion> {
}
28 *29 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long30 */31 }
35 *36 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long37 */38 }
19 public Iterator<T> filter(Iterator<T> iterator) {20 142 return new FilterIterator(iterator);
20 154 return new FilterIterator(iterator);
21 }
22 23 public Iterable<T> filter(final Iterable<T> iterable) {
24 142 return new Iterable<T>() {
24 154 return new Iterable<T>() {
25 26 public Iterator<T> iterator() {27 142 return filter(iterable.iterator());27 154 return filter(iterable.iterator());28 }
29 private T next;36 37 142 private FilterIterator(Iterator<T> iterator) {38 142 this.iterator = iterator;39 142 toNext();
40 142 }
37 154 private FilterIterator(Iterator<T> iterator) {38 154 this.iterator = iterator;39 154 toNext();
40 154 }
41 42 public boolean hasNext() {
43 788 return next != null;
43 927 return next != null;
44 }
45 46 public T next() {47 694 if (next == null) {47 821 if (next == null) {48 0 throw new NoSuchElementException();49 }
50 694 T returnValue = next;
51 694 toNext();
52 694 return returnValue;50 821 T returnValue = next;
51 821 toNext();
52 821 return returnValue;53 }
54 59 private void toNext() {
60 836 next = null;61 1325 while (iterator.hasNext()) {
62 1230 T item = iterator.next();
63 1230 if (item != null && passes(item)) {64 741 next = item;
65 741 break;60 975 next = null;61 1564 while (iterator.hasNext()) {
62 1457 T item = iterator.next();
63 1457 if (item != null && passes(item)) {64 868 next = item;
65 868 break;66 }
67 489 }
68 836 }
67 589 }
68 975 }
69 }
70 }
Classes in this File Line Coverage Branch Coverage Complexity NonClosingStream 100% N/A 1.0;1 NonClosingStream 0% N/A 1.0;1 @@ -70,7 +70,7 @@26 *27 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long28 */29 */36 public NonClosingStream(InputStream in) {37 1 super(in);38 1 }
37 0 super(in);38 0 }39 40 public void close() {
45 // don't close the stream.46 1 }
46 0 }47 }
25 *26 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long27 */28 * @param right the value for the right pair41 */42 24669 public Pair(L left, R right) {43 24669 this.left = left;44 24669 this.right = right;45 24669 }
42 24789 public Pair(L left, R right) {43 24789 this.left = left;44 24789 this.right = right;45 24789 }
46 /**47 * The left element of the pair.48 */49 24669 private L left = null;
49 24789 private L left = null;
50 51 */56 public L getLeft() {57 24669 return left;57 24789 return left;58 }
59 * The right element of the pair.70 */71 24669 private R right = null;
71 24789 private R right = null;
72 73 */78 public R getRight() {79 24669 return right;79 24789 return right;80 }
81 @Override
97 public int hashCode() {
98 24681 int hash = 3;99 24681 hash = 53 * hash + (this.left != null ? this.left.hashCode() : 0);100 24681 hash = 53 * hash + (this.right != null ? this.right.hashCode() : 0);101 24681 return hash;98 24801 int hash = 3;99 24801 hash = 53 * hash + (this.left != null ? this.left.hashCode() : 0);100 24801 hash = 53 * hash + (this.right != null ? this.right.hashCode() : 0);101 24801 return hash;102 }
103 }
30 *31 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long32 */33 */56 public static boolean containsUrl(String text) {
57 17880 return CONTAINS_URL_TEST.matcher(text).matches();57 13740 return CONTAINS_URL_TEST.matcher(text).matches();58 }
59 */66 public static boolean isUrl(String text) {
67 22 return IS_URL_TEST.matcher(text).matches();67 25 return IS_URL_TEST.matcher(text).matches();68 }
69 */89 public static List<String> extractImportantUrlData(String text) throws MalformedURLException {
90 22 final List<String> importantParts = new ArrayList<String>();
91 22 final URL url = new URL(text);
92 22 final String[] domain = url.getHost().split("\\.");
90 25 final List<String> importantParts = new ArrayList<String>();
91 25 final URL url = new URL(text);
92 25 final String[] domain = url.getHost().split("\\.");
93 //add the domain except www and the tld.94 63 for (int i = 0; i < domain.length - 1; i++) {
95 41 final String sub = domain[i];96 41 if (!IGNORE_LIST.contains(sub.toLowerCase())) {
97 38 importantParts.add(sub);
94 72 for (int i = 0; i < domain.length - 1; i++) {
95 47 final String sub = domain[i];96 47 if (!IGNORE_LIST.contains(sub.toLowerCase())) {
97 44 importantParts.add(sub);
98 }
99 }
100 22 final String document = url.getPath();101 22 final String[] pathParts = document.split("[\\//]");
102 38 for (int i = 0; i < pathParts.length - 2; i++) {
103 16 if (!pathParts[i].isEmpty()) {100 25 final String document = url.getPath();101 25 final String[] pathParts = document.split("[\\//]");
102 44 for (int i = 0; i < pathParts.length - 2; i++) {
103 19 if (!pathParts[i].isEmpty()) {104 0 importantParts.add(pathParts[i]);105 }
106 }
107 22 if (pathParts.length > 0 && !pathParts[pathParts.length - 1].isEmpty()) {108 19 final String fileNameNoExt = pathParts[pathParts.length - 1].replaceAll("\\..*{0,5}$", "");
109 19 importantParts.add(fileNameNoExt);
107 25 if (pathParts.length > 0 && !pathParts[pathParts.length - 1].isEmpty()) {108 22 final String fileNameNoExt = pathParts[pathParts.length - 1].replaceAll("\\..*{0,5}$", "");
109 22 importantParts.add(fileNameNoExt);
110 }
111 22 return importantParts;111 25 return importantParts;112 }
113 }
Coverage Report + + + + +Coverage Report - org.owasp.dependencycheck.xml.pom.License
+++
+Classes in this File Line Coverage Branch Coverage Complexity License 0% N/A 1.0;1 ++
+ + + + diff --git a/dependency-check-core/cobertura/org.owasp.dependencycheck.xml.pom.Model.html b/dependency-check-core/cobertura/org.owasp.dependencycheck.xml.pom.Model.html new file mode 100644 index 000000000..0a8afe885 --- /dev/null +++ b/dependency-check-core/cobertura/org.owasp.dependencycheck.xml.pom.Model.html @@ -0,0 +1,512 @@ + + + + +1 /*2 * Copyright 2015 OWASP.3 *4 * Licensed under the Apache License, Version 2.0 (the "License");5 * you may not use this file except in compliance with the License.6 * You may obtain a copy of the License at7 *8 * http://www.apache.org/licenses/LICENSE-2.09 *10 * Unless required by applicable law or agreed to in writing, software11 * distributed under the License is distributed on an "AS IS" BASIS,12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.13 * See the License for the specific language governing permissions and14 * limitations under the License.15 */16 package org.owasp.dependencycheck.xml.pom;17 18 /**19 *20 * @author jeremy21 */22 public class License {
23 24 0 public License() {25 0 }26 27 /**28 * Constructs a new license.29 *30 * @param name31 * @param url32 */33 0 public License(String name, String url) {34 0 this.url = url;35 0 this.name = name;36 37 0 }38 39 /**40 * The url to the license.41 */42 private String url;43 44 /**45 * Get the value of url.46 *47 * @return the value of url48 */49 public String getUrl() {50 0 return url;51 }
52 53 /**54 * Set the value of url.55 *56 * @param url new value of url57 */58 public void setUrl(String url) {
59 0 this.url = url;60 0 }61 62 /**63 * The name of the license.64 */65 private String name;66 67 /**68 * Get the value of name.69 *70 * @return the value of name71 */72 public String getName() {73 0 return name;74 }
75 76 /**77 * Set the value of name.78 *79 * @param name new value of name80 */81 public void setName(String name) {
82 0 this.name = name;83 0 }84 85 }
Coverage Report + + + + +Coverage Report - org.owasp.dependencycheck.xml.pom.Model
+++
+Classes in this File Line Coverage Branch Coverage Complexity Model 87% N/A 1.0;1 ++
+ + + + diff --git a/dependency-check-core/cobertura/org.owasp.dependencycheck.xml.pom.PomHandler.html b/dependency-check-core/cobertura/org.owasp.dependencycheck.xml.pom.PomHandler.html new file mode 100644 index 000000000..c3514f843 --- /dev/null +++ b/dependency-check-core/cobertura/org.owasp.dependencycheck.xml.pom.PomHandler.html @@ -0,0 +1,355 @@ + + + + +1 /*2 * This file is part of dependency-check-core.3 *4 * Licensed under the Apache License, Version 2.0 (the "License");5 * you may not use this file except in compliance with the License.6 * You may obtain a copy of the License at7 *8 * http://www.apache.org/licenses/LICENSE-2.09 *10 * Unless required by applicable law or agreed to in writing, software11 * distributed under the License is distributed on an "AS IS" BASIS,12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.13 * See the License for the specific language governing permissions and14 * limitations under the License.15 *16 * Copyright (c) 2015 Jeremy Long. All Rights Reserved.17 */18 package org.owasp.dependencycheck.xml.pom;19 20 import java.util.ArrayList;21 import java.util.List;22 23 /**24 * A simple pojo to hold data related to a Maven POM file.25 *26 * @author jeremy27 */28 2 public class Model {
29 30 /**31 * The name of the project.32 */33 private String name;34 35 /**36 * Get the value of name.37 *38 * @return the value of name39 */40 public String getName() {41 2 return name;42 }
43 44 /**45 * Set the value of name.46 *47 * @param name new value of name48 */49 public void setName(String name) {
50 2 this.name = name;51 2 }
52 53 /**54 * The organization name.55 */56 private String organization;57 58 /**59 * Get the value of organization.60 *61 * @return the value of organization62 */63 public String getOrganization() {64 1 return organization;65 }
66 67 /**68 * Set the value of organization.69 *70 * @param organization new value of organization71 */72 public void setOrganization(String organization) {
73 0 this.organization = organization;74 0 }75 76 /**77 * The description.78 */79 private String description;80 81 /**82 * Get the value of description.83 *84 * @return the value of description85 */86 public String getDescription() {87 1 return description;88 }
89 90 /**91 * Set the value of description.92 *93 * @param description new value of description94 */95 public void setDescription(String description) {
96 1 this.description = description;97 1 }
98 99 /**100 * The group id.101 */102 private String groupId;103 104 /**105 * Get the value of groupId.106 *107 * @return the value of groupId108 */109 public String getGroupId() {110 1 return groupId;111 }
112 113 /**114 * Set the value of groupId.115 *116 * @param groupId new value of groupId117 */118 public void setGroupId(String groupId) {
119 2 this.groupId = groupId;120 2 }
121 122 /**123 * The artifact id.124 */125 private String artifactId;126 127 /**128 * Get the value of artifactId.129 *130 * @return the value of artifactId131 */132 public String getArtifactId() {133 1 return artifactId;134 }
135 136 /**137 * Set the value of artifactId.138 *139 * @param artifactId new value of artifactId140 */141 public void setArtifactId(String artifactId) {
142 2 this.artifactId = artifactId;143 2 }
144 145 /**146 * The version number.147 */148 private String version;149 150 /**151 * Get the value of version.152 *153 * @return the value of version154 */155 public String getVersion() {156 1 return version;157 }
158 159 /**160 * Set the value of version.161 *162 * @param version new value of version163 */164 public void setVersion(String version) {
165 1 this.version = version;166 1 }
167 168 /**169 * The parent group id.170 */171 private String parentGroupId;172 173 /**174 * Get the value of parentGroupId.175 *176 * @return the value of parentGroupId177 */178 public String getParentGroupId() {179 2 return parentGroupId;180 }
181 182 /**183 * Set the value of parentGroupId.184 *185 * @param parentGroupId new value of parentGroupId186 */187 public void setParentGroupId(String parentGroupId) {
188 1 this.parentGroupId = parentGroupId;189 1 }
190 191 /**192 * The parent artifact id.193 */194 private String parentArtifactId;195 196 /**197 * Get the value of parentArtifactId.198 *199 * @return the value of parentArtifactId200 */201 public String getParentArtifactId() {202 2 return parentArtifactId;203 }
204 205 /**206 * Set the value of parentArtifactId.207 *208 * @param parentArtifactId new value of parentArtifactId209 */210 public void setParentArtifactId(String parentArtifactId) {
211 1 this.parentArtifactId = parentArtifactId;212 1 }
213 214 /**215 * The parent version number.216 */217 private String parentVersion;218 219 /**220 * Get the value of parentVersion.221 *222 * @return the value of parentVersion223 */224 public String getParentVersion() {225 2 return parentVersion;226 }
227 228 /**229 * Set the value of parentVersion.230 *231 * @param parentVersion new value of parentVersion232 */233 public void setParentVersion(String parentVersion) {
234 1 this.parentVersion = parentVersion;235 1 }
236 237 /**238 * The list of licenses.239 */240 2 private List<License> licenses = new ArrayList<License>();
241 242 /**243 * Returns the list of licenses.244 *245 * @return the list of licenses246 */247 public List<License> getLicenses() {248 2 return licenses;249 }
250 251 /**252 * Adds a new license to the list of licenses.253 *254 * @param license the license to add255 */256 public void addLicense(License license) {
257 0 licenses.add(license);258 0 }259 260 }
Coverage Report + + + + +Coverage Report - org.owasp.dependencycheck.xml.pom.PomHandler
+++
+Classes in this File Line Coverage Branch Coverage Complexity PomHandler 77% 60% 5.75;5.75 ++
+ + + + diff --git a/dependency-check-core/cobertura/org.owasp.dependencycheck.xml.pom.PomParseException.html b/dependency-check-core/cobertura/org.owasp.dependencycheck.xml.pom.PomParseException.html new file mode 100644 index 000000000..7a33ab71e --- /dev/null +++ b/dependency-check-core/cobertura/org.owasp.dependencycheck.xml.pom.PomParseException.html @@ -0,0 +1,144 @@ + + + + +1 /*2 * This file is part of dependency-check-core.3 *4 * Licensed under the Apache License, Version 2.0 (the "License");5 * you may not use this file except in compliance with the License.6 * You may obtain a copy of the License at7 *8 * http://www.apache.org/licenses/LICENSE-2.09 *10 * Unless required by applicable law or agreed to in writing, software11 * distributed under the License is distributed on an "AS IS" BASIS,12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.13 * See the License for the specific language governing permissions and14 * limitations under the License.15 *16 * Copyright (c) 2015 Jeremy Long. All Rights Reserved.17 */18 package org.owasp.dependencycheck.xml.pom;19 20 import java.util.ArrayDeque;21 import java.util.Deque;22 import org.xml.sax.Attributes;23 import org.xml.sax.SAXException;24 import org.xml.sax.helpers.DefaultHandler;25 26 /**27 * A handler to read the pom.xml model.28 *29 * @author Jeremy Long30 */31 2 public class PomHandler extends DefaultHandler {
32 33 /**34 * The project element.35 */36 public static final String PROJECT = "project";
37 /**38 * The artifactId element.39 */40 public static final String GROUPID = "groupId";
41 /**42 * The artifactId element.43 */44 public static final String ARTIFACTID = "artifactId";
45 /**46 * The version element.47 */48 public static final String VERSION = "version";
49 /**50 * The parent element.51 */52 public static final String PARENT = "parent";
53 /**54 * The name element.55 */56 public static final String NAME = "name";
57 /**58 * The organization element.59 */60 public static final String ORGANIZATION = "organization";
61 /**62 * The description element.63 */64 public static final String DESCRIPTION = "description";
65 /**66 * The licenses element.67 */68 public static final String LICENSES = "licenses";
69 /**70 * The license element.71 */72 public static final String LICENSE = "license";
73 /**74 * The url element.75 */76 public static final String URL = "url";
77 78 /**79 * The pom model.80 */81 2 private Model model = new Model();
82 83 /**84 * Returns the model obtained from the pom.xml.85 *86 * @return the model object87 */88 public Model getModel() {89 2 return model;90 }
91 /**92 * The stack of elements processed; used to determine the parent node.93 */94 2 private final Deque<String> stack = new ArrayDeque<String>();
95 /**96 * The license object.97 */98 2 private License license = null;
99 100 /**101 * The current node text being extracted from the element.102 */103 private StringBuffer currentText;104 105 /**106 * Handles the start element event.107 *108 * @param uri the uri of the element being processed109 * @param localName the local name of the element being processed110 * @param qName the qName of the element being processed111 * @param attributes the attributes of the element being processed112 * @throws SAXException thrown if there is an exception processing113 */114 @Override
115 public void startElement(String uri, String localName, String qName, Attributes attributes) throws SAXException {
116 471 currentText = new StringBuffer();117 471 stack.push(qName);
118 471 if (LICENSE.equals(qName)) {119 0 license = new License();120 }
121 471 }
122 123 /**124 * Handles the end element event.125 *126 * @param uri the URI of the element127 * @param localName the local name of the element128 * @param qName the qName of the element129 * @throws SAXException thrown if there is an exception processing130 */131 @Override
132 public void endElement(String uri, String localName, String qName) throws SAXException {
133 471 stack.pop();
134 471 final String parentNode = stack.peek();135 471 if (PROJECT.equals(parentNode)) {
136 29 if (GROUPID.equals(qName)) {
137 2 model.setGroupId(currentText.toString());
138 27 } else if (ARTIFACTID.equals(qName)) {
139 2 model.setArtifactId(currentText.toString());
140 25 } else if (VERSION.equals(qName)) {
141 1 model.setVersion(currentText.toString());
142 24 } else if (NAME.equals(qName)) {
143 2 model.setName(currentText.toString());
144 22 } else if (ORGANIZATION.equals(qName)) {145 0 model.setOrganization(currentText.toString());146 22 } else if (DESCRIPTION.equals(qName)) {
147 1 model.setDescription(currentText.toString());
148 }
149 442 } else if (PARENT.equals(parentNode)) {
150 3 if (GROUPID.equals(qName)) {
151 1 model.setParentGroupId(currentText.toString());
152 2 } else if (ARTIFACTID.equals(qName)) {
153 1 model.setParentArtifactId(currentText.toString());
154 1 } else if (VERSION.equals(qName)) {155 1 model.setParentVersion(currentText.toString());
156 }
157 439 } else if (LICENSE.equals(parentNode)) {158 0 if (license == null) {159 //TODO add error logging160 0 } else if (NAME.equals(qName)) {161 0 license.setName(currentText.toString());162 0 } else if (URL.equals(qName)) {163 0 license.setUrl(currentText.toString());164 }
165 439 } else if (LICENSES.equals(parentNode)) {166 0 if (LICENSE.equals(qName)) {167 0 if (license != null) {168 0 model.addLicense(license);169 } else {170 //TODO add error logging171 }
172 }
173 }
174 471 }
175 176 /**177 * Collects the body text of the node being processed.178 *179 * @param ch the char array of text180 * @param start the start position to copy text from in the char array181 * @param length the number of characters to copy from the char array182 * @throws SAXException thrown if there is a parsing exception183 */184 @Override
185 public void characters(char[] ch, int start, int length) throws SAXException {
186 953 currentText.append(ch, start, length);
187 953 }
188 }
Coverage Report + + + + +Coverage Report - org.owasp.dependencycheck.xml.pom.PomParseException
+++
+Classes in this File Line Coverage Branch Coverage Complexity PomParseException 0% N/A 1.0;1 ++
+ + + + diff --git a/dependency-check-core/cobertura/org.owasp.dependencycheck.xml.pom.PomParser.html b/dependency-check-core/cobertura/org.owasp.dependencycheck.xml.pom.PomParser.html new file mode 100644 index 000000000..35261ab5d --- /dev/null +++ b/dependency-check-core/cobertura/org.owasp.dependencycheck.xml.pom.PomParser.html @@ -0,0 +1,216 @@ + + + + +1 /*2 * This file is part of dependency-check-core.3 *4 * Licensed under the Apache License, Version 2.0 (the "License");5 * you may not use this file except in compliance with the License.6 * You may obtain a copy of the License at7 *8 * http://www.apache.org/licenses/LICENSE-2.09 *10 * Unless required by applicable law or agreed to in writing, software11 * distributed under the License is distributed on an "AS IS" BASIS,12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.13 * See the License for the specific language governing permissions and14 * limitations under the License.15 *16 * Copyright (c) 2015 Jeremy Long. All Rights Reserved.17 */18 package org.owasp.dependencycheck.xml.pom;19 20 import org.owasp.dependencycheck.suppression.*;21 import java.io.IOException;22 23 /**24 * An exception used when parsing a suppression rule file fails.25 *26 * @author Jeremy Long27 */28 public class PomParseException extends IOException {
29 30 /**31 * Creates a new SuppressionParseException.32 */33 public PomParseException() {34 0 super();35 0 }36 37 /**38 * Creates a new SuppressionParseException.39 *40 * @param msg a message for the exception.41 */42 public PomParseException(String msg) {43 0 super(msg);44 0 }45 46 /**47 * Creates a new SuppressionParseException.48 *49 * @param ex the cause of the parse exception50 */51 public PomParseException(Throwable ex) {52 0 super(ex);53 0 }54 55 /**56 * Creates a new SuppressionParseException.57 *58 * @param msg a message for the exception.59 * @param ex the cause of the parse exception60 */61 public PomParseException(String msg, Throwable ex) {62 0 super(msg, ex);63 0 }64 }
Coverage Report + + + + +Coverage Report - org.owasp.dependencycheck.xml.pom.PomParser
+++
+Classes in this File Line Coverage Branch Coverage Complexity PomParser 50% 50% 8.0;8 ++
+ + + + diff --git a/dependency-check-core/cobertura/org.owasp.dependencycheck.xml.pom.PomUtils.html b/dependency-check-core/cobertura/org.owasp.dependencycheck.xml.pom.PomUtils.html new file mode 100644 index 000000000..7d93ee98b --- /dev/null +++ b/dependency-check-core/cobertura/org.owasp.dependencycheck.xml.pom.PomUtils.html @@ -0,0 +1,328 @@ + + + + +1 /*2 * This file is part of dependency-check-core.3 *4 * Licensed under the Apache License, Version 2.0 (the "License");5 * you may not use this file except in compliance with the License.6 * You may obtain a copy of the License at7 *8 * http://www.apache.org/licenses/LICENSE-2.09 *10 * Unless required by applicable law or agreed to in writing, software11 * distributed under the License is distributed on an "AS IS" BASIS,12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.13 * See the License for the specific language governing permissions and14 * limitations under the License.15 *16 * Copyright (c) 2015 Jeremy Long. All Rights Reserved.17 */18 package org.owasp.dependencycheck.xml.pom;19 20 import java.io.File;21 import java.io.FileInputStream;22 import java.io.FileNotFoundException;23 import java.io.IOException;24 import java.io.InputStream;25 import java.io.InputStreamReader;26 import java.io.Reader;27 import java.util.List;28 import java.util.logging.Level;29 import java.util.logging.Logger;30 import javax.xml.parsers.ParserConfigurationException;31 import javax.xml.parsers.SAXParser;32 import javax.xml.parsers.SAXParserFactory;33 import org.xml.sax.InputSource;34 import org.xml.sax.SAXException;35 import org.xml.sax.XMLReader;36 37 /**38 * A parser for pom.xml files.39 *40 * @author Jeremy Long41 */42 2 public class PomParser {
43 44 /**45 * The logger.46 */47 1 private static final Logger LOGGER = Logger.getLogger(PomParser.class.getName());
48 49 /**50 * Parses the given xml file and returns a Model object containing only the fields dependency-check requires.51 *52 * @param file a pom.xml53 * @return a Model object containing only the fields dependency-check requires54 * @throws PomParseException thrown if the xml file cannot be parsed55 */56 public Model parse(File file) throws PomParseException {
57 1 FileInputStream fis = null;58 try {59 1 fis = new FileInputStream(file);60 1 return parse(fis);61 0 } catch (IOException ex) {62 0 LOGGER.log(Level.FINE, null, ex);63 0 throw new PomParseException(ex);64 } finally {65 1 if (fis != null) {66 try {67 1 fis.close();
68 0 } catch (IOException ex) {69 0 LOGGER.log(Level.FINE, "Unable to close stream", ex);70 2 }
71 }
72 }
73 }
74 75 /**76 * Parses the given xml file and returns a Model object containing only the fields dependency-check requires.77 *78 * @param inputStream an InputStream containing suppression rues79 * @return a list of suppression rules80 * @throws SuppressionParseException if the xml cannot be parsed81 */82 public Model parse(InputStream inputStream) throws PomParseException {
83 try {84 2 final PomHandler handler = new PomHandler();
85 2 final SAXParserFactory factory = SAXParserFactory.newInstance();86 // factory.setNamespaceAware(true);87 // factory.setValidating(true);88 2 final SAXParser saxParser = factory.newSAXParser();89 2 final XMLReader xmlReader = saxParser.getXMLReader();90 2 xmlReader.setContentHandler(handler);
91 92 2 final Reader reader = new InputStreamReader(inputStream, "UTF-8");
93 2 final InputSource in = new InputSource(reader);
94 //in.setEncoding("UTF-8");95 96 2 xmlReader.parse(in);
97 98 2 return handler.getModel();99 0 } catch (ParserConfigurationException ex) {100 0 LOGGER.log(Level.FINE, null, ex);101 0 throw new PomParseException(ex);102 0 } catch (SAXException ex) {103 0 LOGGER.log(Level.FINE, null, ex);104 0 throw new PomParseException(ex);105 0 } catch (FileNotFoundException ex) {106 0 LOGGER.log(Level.FINE, null, ex);107 0 throw new PomParseException(ex);108 0 } catch (IOException ex) {109 0 LOGGER.log(Level.FINE, null, ex);110 0 throw new PomParseException(ex);111 }
112 }
113 }
Coverage Report + + + + +Coverage Report - org.owasp.dependencycheck.xml.pom.PomUtils
+++
+Classes in this File Line Coverage Branch Coverage Complexity PomUtils 14% 1% 14.0;14 ++
+ + + + diff --git a/dependency-check-core/cpd.html b/dependency-check-core/cpd.html index a12127418..36c67f0d8 100644 --- a/dependency-check-core/cpd.html +++ b/dependency-check-core/cpd.html @@ -1,13 +1,13 @@ - +1 /*2 * This file is part of dependency-check-core.3 *4 * Licensed under the Apache License, Version 2.0 (the "License");5 * you may not use this file except in compliance with the License.6 * You may obtain a copy of the License at7 *8 * http://www.apache.org/licenses/LICENSE-2.09 *10 * Unless required by applicable law or agreed to in writing, software11 * distributed under the License is distributed on an "AS IS" BASIS,12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.13 * See the License for the specific language governing permissions and14 * limitations under the License.15 *16 * Copyright (c) 2015 Jeremy Long. All Rights Reserved.17 */18 package org.owasp.dependencycheck.xml.pom;19 20 import java.io.File;21 import java.io.IOException;22 import java.util.jar.JarFile;23 import java.util.logging.Level;24 import java.util.logging.Logger;25 import java.util.zip.ZipEntry;26 import org.owasp.dependencycheck.analyzer.JarAnalyzer;27 import org.owasp.dependencycheck.analyzer.exception.AnalysisException;28 import org.owasp.dependencycheck.dependency.Confidence;29 import org.owasp.dependencycheck.dependency.Dependency;30 31 /**32 *33 * @author jeremy34 */35 public final class PomUtils {
36 37 /**38 * empty private constructor for utility class.39 */40 0 private PomUtils() {41 0 }42 /**43 * The logger.44 */45 1 private static final Logger LOGGER = Logger.getLogger(PomUtils.class.getName());
46 47 /**48 * Reads in the specified POM and converts it to a Model.49 *50 * @param file the pom.xml file51 * @return returns a52 * @throws AnalysisException is thrown if there is an exception extracting or parsing the POM53 * {@link org.owasp.dependencycheck.jaxb.pom.generated.Model} object54 */55 public static Model readPom(File file) throws AnalysisException {
56 1 Model model = null;57 try {58 1 PomParser parser = new PomParser();59 1 model = parser.parse(file);
60 0 } catch (PomParseException ex) {61 0 final String msg = String.format("Unable to parse pom '%s'", file.getPath());62 0 LOGGER.log(Level.WARNING, msg);63 0 LOGGER.log(Level.FINE, "", ex);64 0 throw new AnalysisException(ex);65 0 } catch (IOException ex) {66 0 final String msg = String.format("Unable to parse pom '%s'(IO Exception)", file.getPath());67 0 LOGGER.log(Level.WARNING, msg);68 0 LOGGER.log(Level.FINE, "", ex);69 0 throw new AnalysisException(ex);70 0 } catch (Throwable ex) {71 0 final String msg = String.format("Unexpected error during parsing of the pom '%s'", file.getPath());72 0 LOGGER.log(Level.WARNING, msg);73 0 LOGGER.log(Level.FINE, "", ex);74 0 throw new AnalysisException(ex);75 1 }
76 1 return model;77 }
78 79 /**80 * Retrieves the specified POM from a jar file and converts it to a Model.81 *82 * @param path the path to the pom.xml file within the jar file83 * @param jar the jar file to extract the pom from84 * @return returns a85 * @throws AnalysisException is thrown if there is an exception extracting or parsing the POM86 * {@link org.owasp.dependencycheck.jaxb.pom.generated.Model} object87 */88 public static Model readPom(String path, JarFile jar) throws AnalysisException {
89 1 final ZipEntry entry = jar.getEntry(path);90 1 Model model = null;91 1 if (entry != null) { //should never be null92 try {93 // final NonClosingStream stream = new NonClosingStream(jar.getInputStream(entry));94 // final InputStreamReader reader = new InputStreamReader(stream, "UTF-8");95 // final InputSource xml = new InputSource(reader);96 // final SAXSource source = new SAXSource(xml);97 1 final PomParser parser = new PomParser();
98 1 model = parser.parse(jar.getInputStream(entry));
99 1 LOGGER.fine(String.format("Read POM %s", path));100 0 } catch (SecurityException ex) {101 0 final String msg = String.format("Unable to parse pom '%s' in jar '%s'; invalid signature", path, jar.getName());102 0 LOGGER.log(Level.WARNING, msg);103 0 LOGGER.log(Level.FINE, null, ex);104 0 throw new AnalysisException(ex);105 0 } catch (IOException ex) {106 0 final String msg = String.format("Unable to parse pom '%s' in jar '%s' (IO Exception)", path, jar.getName());107 0 LOGGER.log(Level.WARNING, msg);108 0 LOGGER.log(Level.FINE, "", ex);109 0 throw new AnalysisException(ex);110 0 } catch (Throwable ex) {111 0 final String msg = String.format("Unexpected error during parsing of the pom '%s' in jar '%s'", path, jar.getName());112 0 LOGGER.log(Level.WARNING, msg);113 0 LOGGER.log(Level.FINE, "", ex);114 0 throw new AnalysisException(ex);115 1 }
116 }
117 1 return model;118 }
119 120 /**121 * Reads in the pom file and adds elements as evidence to the given dependency.122 *123 * @param dependency the dependency being analyzed124 * @param pomFile the pom file to read125 * @throws AnalysisException is thrown if there is an exception parsing the pom126 */127 public static void analyzePOM(Dependency dependency, File pomFile) throws AnalysisException {
128 0 final Model pom = PomUtils.readPom(pomFile);129 130 0 String groupid = pom.getGroupId();131 0 String parentGroupId = null;132 133 0 if (pom.getParentGroupId() != null) {134 0 parentGroupId = pom.getParentGroupId();135 0 if ((groupid == null || groupid.isEmpty()) && parentGroupId != null && !parentGroupId.isEmpty()) {136 0 groupid = parentGroupId;137 }
138 }
139 0 if (groupid != null && !groupid.isEmpty()) {140 0 dependency.getVendorEvidence().addEvidence("pom", "groupid", groupid, Confidence.HIGHEST);141 0 dependency.getProductEvidence().addEvidence("pom", "groupid", groupid, Confidence.LOW);142 0 if (parentGroupId != null && !parentGroupId.isEmpty() && !parentGroupId.equals(groupid)) {143 0 dependency.getVendorEvidence().addEvidence("pom", "parent-groupid", parentGroupId, Confidence.MEDIUM);144 0 dependency.getProductEvidence().addEvidence("pom", "parent-groupid", parentGroupId, Confidence.LOW);145 }
146 }
147 0 String artifactid = pom.getArtifactId();148 0 String parentArtifactId = null;149 0 if (pom.getParentArtifactId() != null) {150 0 parentArtifactId = pom.getParentArtifactId();151 0 if ((artifactid == null || artifactid.isEmpty()) && parentArtifactId != null && !parentArtifactId.isEmpty()) {152 0 artifactid = parentArtifactId;153 }
154 }
155 0 if (artifactid != null && !artifactid.isEmpty()) {156 0 if (artifactid.startsWith("org.") || artifactid.startsWith("com.")) {157 0 artifactid = artifactid.substring(4);158 }
159 0 dependency.getProductEvidence().addEvidence("pom", "artifactid", artifactid, Confidence.HIGHEST);160 0 dependency.getVendorEvidence().addEvidence("pom", "artifactid", artifactid, Confidence.LOW);161 0 if (parentArtifactId != null && !parentArtifactId.isEmpty() && !parentArtifactId.equals(artifactid)) {162 0 dependency.getProductEvidence().addEvidence("pom", "parent-artifactid", parentArtifactId, Confidence.MEDIUM);163 0 dependency.getVendorEvidence().addEvidence("pom", "parent-artifactid", parentArtifactId, Confidence.LOW);164 }
165 }
166 //version167 0 String version = pom.getVersion();168 0 String parentVersion = null;169 0 if (pom.getParentVersion() != null) {170 0 parentVersion = pom.getParentVersion();171 0 if ((version == null || version.isEmpty()) && parentVersion != null && !parentVersion.isEmpty()) {172 0 version = parentVersion;173 }
174 }
175 0 if (version != null && !version.isEmpty()) {176 0 dependency.getVersionEvidence().addEvidence("pom", "version", version, Confidence.HIGHEST);177 0 if (parentVersion != null && !parentVersion.isEmpty() && !parentVersion.equals(version)) {178 0 dependency.getVersionEvidence().addEvidence("pom", "parent-version", version, Confidence.LOW);179 }
180 }
181 182 0 final String orgName = pom.getOrganization();183 0 if (orgName != null && !orgName.isEmpty()) {184 0 dependency.getVendorEvidence().addEvidence("pom", "organization name", orgName, Confidence.HIGH);185 }
186 0 final String pomName = pom.getName();187 0 if (pomName != null && !pomName.isEmpty()) {188 0 dependency.getProductEvidence().addEvidence("pom", "name", pomName, Confidence.HIGH);189 0 dependency.getVendorEvidence().addEvidence("pom", "name", pomName, Confidence.HIGH);190 }
191 192 0 if (pom.getDescription() != null) {193 0 final String description = pom.getDescription();194 0 if (description != null && !description.isEmpty()) {195 0 JarAnalyzer.addDescription(dependency, description, "pom", "description");196 }
197 }
198 0 JarAnalyzer.extractLicense(pom, null, dependency);199 0 }200 }
dependency-check-core - CPD Results @@ -19,7 +19,7 @@ - + @@ -42,7 +42,7 @@+-dependency-check-core
+
@@ -54,7 +54,7 @@- - + /
@@ -67,9 +67,9 @@ -- | Last Published: 2015-03-06
+- | Last Published: 2015-04-12
- - Version: 1.2.9 + Version: 1.2.10
@@ -244,7 +244,7 @@165 org\owasp\dependencycheck\analyzer\JarAnalyzer.java -948 881 @Override diff --git a/dependency-check-core/dependency-updates-report.html b/dependency-check-core/dependency-updates-report.html index 4fb8bf81d..24507c297 100644 --- a/dependency-check-core/dependency-updates-report.html +++ b/dependency-check-core/dependency-updates-report.html @@ -1,13 +1,13 @@ - +dependency-check-core - Dependency Updates Report @@ -19,7 +19,7 @@ - + @@ -42,7 +42,7 @@-dependency-check-core
+
@@ -54,7 +54,7 @@- - + /
@@ -67,9 +67,9 @@ -- | Last Published: 2015-03-06
+- | Last Published: 2015-04-12
- - Version: 1.2.9 + Version: 1.2.10
@@ -237,7 +237,7 @@# of dependencies using the latest version available -9 10 # of dependencies where the next version available is smaller than an incremental version update @@ -297,12 +297,12 @@org.jmockit jmockit -1.15 +1.16 test jar - 1.16-beta1 +1.17-beta1 @@ -612,7 +612,7 @@ +org.owasp dependency-check-utils -1.2.9 +1.2.10 compile jar @@ -655,8 +655,20 @@3.0.1.RELEASE 3.1.0.RELEASE -4.0.0.RELEASE + +uk.ltd.getahead +dwr +1.1.1 +provided ++ jar ++ + + Status Group Id Artifact Id @@ -674,25 +686,25 @@com.google.code.findbugs:annotations
-
+ Status No newer versions available.+ Group Id com.google.code.findbugs + Artifact Id annotations + Current Version 3.0.0 + Scope compile + Classifier + Type jar @@ -748,7 +760,7 @@jar Newer versions -1.4.177 Next Minor
1.4.178
1.4.179
1.4.180
1.4.181
1.4.182
1.4.183
1.4.184
1.4.185
1.4.186 Latest Minor1.4.177 Next Minor
1.4.178
1.4.179
1.4.180
1.4.181
1.4.182
1.4.183
1.4.184
1.4.185
1.4.186
1.4.187 Latest Minor+com.hazelcast:hazelcast
@@ -775,7 +787,7 @@
jar Newer versions -2.5.1 Next Incremental
2.6 Next Minor
2.6.1
2.6.2
2.6.3
2.6.4
2.6.5
2.6.6
2.6.7
2.6.8
2.6.9
3.0-RC1
3.0-RC2 Latest Minor
3.0 Next Major
3.0.1
3.0.2
3.0.3
3.1
3.1.1
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.2-RC1
3.2-RC2
3.2
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.3-RC1
3.3-RC2
3.3-RC3
3.3
3.3-EA
3.3-EA2
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.4
3.4-EA
3.4.1 Latest Major2.5.1 Next Incremental
2.6 Next Minor
2.6.1
2.6.2
2.6.3
2.6.4
2.6.5
2.6.6
2.6.7
2.6.8
2.6.9
3.0-RC1
3.0-RC2 Latest Minor
3.0 Next Major
3.0.1
3.0.2
3.0.3
3.1
3.1.1
3.1.2
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.2-RC1
3.2-RC2
3.2
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.3-RC1
3.3-RC2
3.3-RC3
3.3
3.3-EA
3.3-EA2
3.3.1
3.3.2
3.3.3
3.3.4
3.3.5
3.4
3.4-EA
3.4.1
3.4.2 Latest Major
commons-io:commons-io
| jar | |
| Newer versions | -1.9 Next Minor 1.9.1 1.9.2 Latest Minor |
|---|
1.9.1
1.9.2
1.9.4 Latest Minor
org.apache.openjpa:openjpa
| jmockit | |
| Current Version | -1.15 | 1.16 |
|---|---|
| Scope | test | jar |
| Newer versions | -1.16-beta1 Next Incremental 1.16-beta2 Latest Incremental |
org.jsoup:jsoup
| dependency-check-utils | |
| Current Version | -1.2.9 | 1.2.10 |
|---|---|
| Scope | compile | jar |
| Newer versions | -2.5.6 Next Incremental 2.5.6.SEC01 2.5.6.SEC02 2.5.6.SEC03 Latest Incremental 3.0.0.RELEASE Next Major 3.0.1.RELEASE 3.0.2.RELEASE 3.0.3.RELEASE 3.0.4.RELEASE 3.0.5.RELEASE 3.0.6.RELEASE 3.0.7.RELEASE 3.1.0.RELEASE 3.1.1.RELEASE 3.1.2.RELEASE 3.2.0.RELEASE 3.2.1.RELEASE 3.2.2.RELEASE 3.2.3.RELEASE 3.2.4.RELEASE 3.2.5.RELEASE 3.2.6.RELEASE 3.2.7.RELEASE 3.2.8.RELEASE 3.2.9.RELEASE 3.2.10.RELEASE 3.2.11.RELEASE 3.2.12.RELEASE 3.2.13.RELEASE 4.0.0.RELEASE 4.0.1.RELEASE 4.0.2.RELEASE 4.0.3.RELEASE 4.0.4.RELEASE 4.0.5.RELEASE 4.0.6.RELEASE 4.0.7.RELEASE 4.0.8.RELEASE 4.0.9.RELEASE 4.1.0.RELEASE 4.1.1.RELEASE 4.1.2.RELEASE 4.1.3.RELEASE 4.1.4.RELEASE 4.1.5.RELEASE Latest Major |
2.5.6.SEC01
2.5.6.SEC02
2.5.6.SEC03 Latest Incremental
3.0.0.RELEASE Next Major
3.0.1.RELEASE
3.0.2.RELEASE
3.0.3.RELEASE
3.0.4.RELEASE
3.0.5.RELEASE
3.0.6.RELEASE
3.0.7.RELEASE
3.1.0.RELEASE
3.1.1.RELEASE
3.1.2.RELEASE
3.2.0.RELEASE
3.2.1.RELEASE
3.2.2.RELEASE
3.2.3.RELEASE
3.2.4.RELEASE
3.2.5.RELEASE
3.2.6.RELEASE
3.2.7.RELEASE
3.2.8.RELEASE
3.2.9.RELEASE
3.2.10.RELEASE
3.2.11.RELEASE
3.2.12.RELEASE
3.2.13.RELEASE
4.0.0.RELEASE
4.0.1.RELEASE
4.0.2.RELEASE
4.0.3.RELEASE
4.0.4.RELEASE
4.0.5.RELEASE
4.0.6.RELEASE
4.0.7.RELEASE
4.0.8.RELEASE
4.0.9.RELEASE
4.1.0.RELEASE
4.1.1.RELEASE
4.1.2.RELEASE
4.1.3.RELEASE
4.1.4.RELEASE
4.1.5.RELEASE
4.1.6.RELEASE Latest Major
org.springframework.retry:spring-retry
| jar | |
| Newer versions | -3.0.1.RELEASE Next Incremental 3.0.2.RELEASE 3.0.3.RELEASE 3.0.4.RELEASE 3.0.5.RELEASE 3.0.6.RELEASE 3.0.7.RELEASE 3.0.8.RELEASE Latest Incremental 3.1.0.RELEASE Next Minor 3.1.1.RELEASE 3.1.2.RELEASE 3.1.3.RELEASE 3.1.4.RELEASE 3.1.5.RELEASE 3.1.6.RELEASE 3.1.7.RELEASE 3.2.0.RELEASE 3.2.1.RELEASE 3.2.2.RELEASE 3.2.3.RELEASE 3.2.4.RELEASE 3.2.5.RELEASE 3.2.6.RELEASE Latest Minor |
|---|
3.0.2.RELEASE
3.0.3.RELEASE
3.0.4.RELEASE
3.0.5.RELEASE
3.0.6.RELEASE
3.0.7.RELEASE
3.0.8.RELEASE Latest Incremental
3.1.0.RELEASE Next Minor
3.1.1.RELEASE
3.1.2.RELEASE
3.1.3.RELEASE
3.1.4.RELEASE
3.1.5.RELEASE
3.1.6.RELEASE
3.1.7.RELEASE
3.2.0.RELEASE
3.2.1.RELEASE
3.2.2.RELEASE
3.2.3.RELEASE
3.2.4.RELEASE
3.2.5.RELEASE
3.2.6.RELEASE
3.2.7.RELEASE Latest Minor
4.0.0.RELEASE Next Major
+
+
diff --git a/dependency-check-core/failsafe-report.html b/dependency-check-core/failsafe-report.html
index 3dd72bebe..d66e8df00 100644
--- a/dependency-check-core/failsafe-report.html
+++ b/dependency-check-core/failsafe-report.html
@@ -1,13 +1,13 @@
-
+
uk.ltd.getahead:dwr
+| Status | + No newer versions available. |
|---|---|
| Group Id | +uk.ltd.getahead |
| Artifact Id | +dwr |
| Current Version | +1.1.1 |
| Scope | +provided |
| Classifier | +|
| Type | +jar |
-
dependency-check-core
+
+
Note: failures are anticipated and checked for with assertions while errors are unanticipated.
Package List
@@ -287,7 +287,7 @@ function toggleDisplay(elementId) {+
Note: package statistics are not computed recursively, they only sum up all of its testsuites numbers.
org.owasp.dependencycheck.reporting
@@ -341,7 +341,7 @@ function toggleDisplay(elementId) {org.owasp.dependencycheck.analyzer
| 0 | 0 | 100% | -18.87 | +14.568 | |
|
CPEAnalyzerIntegrationTest | @@ -392,7 +392,7 @@ function toggleDisplay(elementId) {0 | 0 | 100% | -5.969 | 5.059 |
|
VulnerabilitySuppressionAnalyzerIntegrationTest | @@ -401,7 +401,7 @@ function toggleDisplay(elementId) {0 | 0 | 100% | -3.098 |
org.owasp.dependencycheck.data.update
| 0 | 0 | 100% | -16.841 | +113.972 | |
|
StandardUpdateIntegrationTest | @@ -431,7 +431,7 @@ function toggleDisplay(elementId) {0 | 0 | 100% | -1.671 |
org.owasp.dependencycheck.data.nvdcve
| 0 | 0 | 100% | -2.903 | +2.774 | |
|
DatabasePropertiesIntegrationTest | @@ -461,7 +461,7 @@ function toggleDisplay(elementId) {0 | 0 | 100% | -3.821 |
+
Test Cases
[Summary] [Package List] [Test Cases]
@@ -471,15 +471,15 @@ function toggleDisplay(elementId) {CPEAnalyzerIntegrationTest
|
testSearchCPE | -1.613 | 1.503 |
|
testDetermineCPE | -1.425 | 1.304 |
|
testDetermineIdentifiers | -0.969 | 0.994 |
|
testDetermineCPE_full | -1.961 | 1.257 |
|
testBuildSearch | @@ -537,7 +537,7 @@ function toggleDisplay(elementId) {|
|
testAnalyze | -3.097 | 2.722 |
|
testGetAnalysisPhase | @@ -552,78 +552,78 @@ function toggleDisplay(elementId) {|
|
testOpen | -1.134 | 1.082 |
|
testGetCPEs | -0.584 | 0.527 |
|
testGetVulnerabilities | -0.681 | 0.666 |
|
testGetMatchingSoftware | -0.504 |
DatabasePropertiesIntegrationTest
|
testSave | -1.557 | 1.428 |
|
testGetProperty_String_String | -0.575 | 0.508 |
|
testGetProperties | -0.54 | 0.568 |
|
testGetProperty_String | -0.573 | 0.539 |
|
testIsEmpty | -0.576 |
+
diff --git a/dependency-check-core/findbugs.html b/dependency-check-core/findbugs.html index c23e1fe6d..435ec46f4 100644 --- a/dependency-check-core/findbugs.html +++ b/dependency-check-core/findbugs.html @@ -1,13 +1,13 @@ - +
-
dependency-check-core
+
-
dependency-check-core
+
-
dependency-check-core
+
-
dependency-check-core
+
-
dependency-check-core
+
-
dependency-check-core
+
-
dependency-check-core
+
org/owasp/dependencycheck/analyzer/JavaScriptAnalyzer.java
| Violation | Line |
|---|---|
| Avoid unused local variables such as 'extractComments'. | 113 |
org/owasp/dependencycheck/analyzer/NexusAnalyzer.java
| Violation | Line |
|---|---|
| Useless parentheses. | -109 |
org/owasp/dependencycheck/analyzer/NvdCveAnalyzer.java
| Violation | Line |
|---|---|
| Useless parentheses. | 76 |
org/owasp/dependencycheck/data/cpe/IndexEntry.java
| Violation | +Line |
|---|---|
| Useless parentheses. | +172 |
| Useless parentheses. | +175 |
+
+org/owasp/dependencycheck/data/nexus/NexusSearch.java
+| Violation | Line |
|---|---|
| Useless parentheses. | -172 | Avoid unused private fields such as 'userName'. | +54 |
| Useless parentheses. | -175 |
+
+
+org/owasp/dependencycheck/xml/pom/PomHandler.java
+| Violation | +Line |
|---|---|
| Avoid empty if statements | +158–160 |
| These nested if statements could be combined | +166–172 |
| Avoid empty if statements | +169–171 |
+
+
diff --git a/dependency-check-core/project-info.html b/dependency-check-core/project-info.html
index b8498cf99..de360c1e2 100644
--- a/dependency-check-core/project-info.html
+++ b/dependency-check-core/project-info.html
@@ -1,13 +1,13 @@
-
+
org/owasp/dependencycheck/xml/pom/PomParser.java
+| Violation | +Line |
|---|---|
| Avoid unused imports such as 'java.util.List' | +27 |
-
dependency-check-core
+
-
dependency-check-core
+
-
dependency-check-core
+
-
dependency-check-core
+
-
dependency-check-core
+
+
Note: failures are anticipated and checked for with assertions while errors are unanticipated.
Package List
@@ -298,12 +298,12 @@ function toggleDisplay(elementId) {+
Note: package statistics are not computed recursively, they only sum up all of its testsuites numbers.
org.owasp.dependencycheck.data.cwe
@@ -455,8 +463,17 @@ function toggleDisplay(elementId) {org.owasp.dependencycheck.analyzer
| 0 | 0 | 100% | -0.022 | +0.025 | |
|
AbstractSuppressionAnalyzerTest | @@ -515,7 +532,7 @@ function toggleDisplay(elementId) {0 | 0 | 100% | -0.508 | 0.617 |
|
AnalyzerServiceTest | @@ -524,7 +541,7 @@ function toggleDisplay(elementId) {0 | 0 | 100% | -0.491 | 0.033 |
|
AssemblyAnalyzerTest | @@ -533,7 +550,7 @@ function toggleDisplay(elementId) {0 | 1 | 80% | -0.528 | 0.5 |
|
DependencyBundlingAnalyzerTest | @@ -542,7 +559,7 @@ function toggleDisplay(elementId) {0 | 0 | 100% | -0 | 0.001 |
|
FalsePositiveAnalyzerTest | @@ -560,7 +577,7 @@ function toggleDisplay(elementId) {0 | 0 | 100% | -0.072 | 0.071 |
|
HintAnalyzerTest | @@ -569,7 +586,7 @@ function toggleDisplay(elementId) {0 | 0 | 100% | -7.804 | 6.921 |
|
JarAnalyzerTest | @@ -578,7 +595,7 @@ function toggleDisplay(elementId) {0 | 0 | 100% | -1.171 | 0.072 |
|
JavaScriptAnalyzerTest | @@ -587,7 +604,7 @@ function toggleDisplay(elementId) {0 | 0 | 100% | -0.01 | 0.011 |
|
NuspecAnalyzerTest | @@ -617,7 +634,7 @@ function toggleDisplay(elementId) {0 | 0 | 100% | -0.038 | 0.035 |
|
NvdCve_2_0_HandlerTest | @@ -626,7 +643,7 @@ function toggleDisplay(elementId) {0 | 0 | 100% | -0.161 |
org.owasp.dependencycheck.data.update
| 0 | 0 | 100% | -0.224 | +2.342 | |
|
NvdCveInfoTest | @@ -656,7 +673,7 @@ function toggleDisplay(elementId) {0 | 0 | 100% | -0 | 0.001 |
|
UpdateableNvdCveTest | @@ -713,7 +730,28 @@ function toggleDisplay(elementId) {0 | 0 | 100% | -0.012 |
+
+
org.owasp.dependencycheck.xml.pom
+| + | Class | +Tests | +Errors | +Failures | +Skipped | +Success Rate | +Time |
|---|---|---|---|---|---|---|---|
|
+PomUtilsTest | +1 | +0 | +0 | +0 | +100% | +0 |
org.owasp.dependencycheck.data.cpe
| 0 | 0 | 100% | -0.038 |
org.owasp.dependencycheck.utils
| 0 | 0 | 100% | -1.097 |
org.owasp.dependencycheck.data.nvdcve
| 0 | 0 | 100% | -0.114 |
org.owasp.dependencycheck.data.lucene
| 0 | 0 | 100% | -0.06 | +0.063 | |
|
UrlTokenizingFilterTest | @@ -893,7 +931,7 @@ function toggleDisplay(elementId) {0 | 0 | 100% | -0.982 |
+
Test Cases
[Summary] [Package List] [Test Cases]
@@ -903,14 +941,14 @@ function toggleDisplay(elementId) {AbstractSuppressionAnalyzerTest
|
testFailureToLocateSuppressionFileAnywhere | -0.362 | 0.469 |
|
testGetRulesFromSuppressionFileFromURL | @@ -918,29 +956,29 @@ function toggleDisplay(elementId) {|
|
testGetRulesFromSuppressionFileInClasspath | -0.023 | 0.024 |
|
testGetSupportedExtensions | -0 |
AssemblyAnalyzerTest
|
testGetName | -0.197 | 0.192 |
|
testAnalysis | -0.101 | 0.095 |
|
testWithSettingMono @@ -953,11 +991,11 @@ function toggleDisplay(elementId) { | |
|
testNonexistent | -0.082 | 0.074 |
|
testLog4Net | -0.148 |
DependencyBundlingAnalyzerTest
|
testIsCore | -0 |
FalsePositiveAnalyzerTest
|
testAnalyze | -0.07 | 0.071 |
|
testClose | @@ -1010,7 +1048,7 @@ function toggleDisplay(elementId) {|
|
testGetAnalysisPhase | -0.001 | 0 |
|
testGetName | @@ -1018,18 +1056,18 @@ function toggleDisplay(elementId) {|
|
testInitialize | -0.001 |
HintAnalyzerTest
|
testAnalyze | -7.801 | 6.917 |
|
testGetAnalysisPhase | -0.002 | 0.003 |
|
testGetName | @@ -1040,38 +1078,38 @@ function toggleDisplay(elementId) {|
|
testAnalyze | -0.29 | 0.071 |
|
testGetName | -0.25 | 0.001 |
|
testInterpolateString | -0.222 | 0 |
|
testSupportsExtension | -0.206 | 0 |
|
testGetSupportedExtensions | -0.203 |
JavaScriptAnalyzerTest
|
testAnalyze | -0.006 | 0.009 |
|
testClose | -0 | 0.001 |
|
testGetAnalysisPhase | -0.001 | 0 |
|
testGetName | @@ -1079,7 +1117,7 @@ function toggleDisplay(elementId) {|
|
testInitialize | -0.001 | 0 |
|
testSupportsExtension | @@ -1087,7 +1125,7 @@ function toggleDisplay(elementId) {|
|
testGetSupportedExtensions | -0.001 |
NuspecAnalyzerTest
|
testMultipleReturns | -0.17 | 1.501 |
|
testNullSha1 | -0.001 | 0 |
|
testMalformedSha1 | -0 | 0.001 |
|
testValidSha1 | -0.053 | 0.088 |
|
testMissingSha1 | -0.046 |
IndexEntryTest
|
-testExamples | -0.051 | testClear | +0.052 |
|
-testClear | -0.009 |
UrlTokenizingFilterTest
|
testRandomStrings | -0.971 | 0.572 |
|
testExamples | -0.006 | 0.009 |
|
testEmptyTerm | -0.005 |
NexusSearchTest
|
testGoodDocument | -0 | 0.005 |
|
testMissingDocument | -0.021 | 0.014 |
|
testNotNuspec | -0.017 |
DriverLoaderTest
|
testLoad_String_String_badClassName | -0.001 | 0 |
|
testLoad_String_String_badPath | -0.005 | 0.002 |
|
testLoad_String_String | -0.047 | 0.037 |
|
testLoad_String_String_multiple_paths | -0.061 |
NvdCveInfoTest
|
testSetGetTimestamp | -0 | 0.001 |
|
testSetGetNeedsUpdate | @@ -1317,7 +1355,7 @@ function toggleDisplay(elementId) {|
|
testCall | -1.097 |
DependencyTest
|
testGetSha1sum | -0 | 0.005 |
|
testGetProductEvidence | @@ -1373,15 +1411,15 @@ function toggleDisplay(elementId) {|
|
testGetActualFilePath | -0.017 | 0.001 |
|
testAddAsEvidence | -0 | 0.001 |
|
testAddAsEvidenceWithEmptyArtefact | -0 | 0.001 |
|
testSetFileExtension | @@ -1409,7 +1447,7 @@ function toggleDisplay(elementId) {|
|
testSetFilePath | -0.001 | 0 |
|
testGetFileName | @@ -1429,7 +1467,7 @@ function toggleDisplay(elementId) {|
|
testGetMd5sum | -0.022 | 0.012 |
|
testGetEvidence | @@ -1445,7 +1483,18 @@ function toggleDisplay(elementId) {|
|
testSetActualFilePath | -0.003 |
VulnerableSoftwareTest
|
testCpe | -0 | 0.001 |
|
testCve | @@ -1540,15 +1589,15 @@ function toggleDisplay(elementId) {|
|
testProcessGAV | -0.002 | 0 |
|
testAddCvssBelow | -0 | 0.001 |
|
testFilePath | -0.002 | 0 |
|
testGetCvssBelow | @@ -1576,7 +1625,7 @@ function toggleDisplay(elementId) {|
|
testGetCpe | -0 | 0.001 |
|
testGetCve | @@ -1596,11 +1645,11 @@ function toggleDisplay(elementId) {|
|
testHasCwe | -0 | 0.001 |
|
testSetCvssBelow | -0.001 | 0 |
|
testSetSha1 | @@ -1612,15 +1661,15 @@ function toggleDisplay(elementId) {|
|
testSetCve | -0.001 | 0 |
|
testSetCwe | -0.001 | 0 |
|
testCountCharacter | -0.001 |
Failure Details
diff --git a/dependency-check-core/taglist.html b/dependency-check-core/taglist.html index fca2f1923..9b46b94c6 100644 --- a/dependency-check-core/taglist.html +++ b/dependency-check-core/taglist.html @@ -1,13 +1,13 @@ - +
-
dependency-check-core
+
Each tag is detailed below:
Todo Work
-Number of occurrences found in the code: 16
+Number of occurrences found in the code: 18
| org.owasp.dependencycheck.analyzer.ArchiveAnalyzer | @@ -294,10 +294,10 @@Line |
|---|---|
| remove weighting | -675 | 608 |
| change this to a regex? | -793 | 726 |
| org.owasp.dependencycheck.analyzer.JavaScriptAnalyzerTest | Line | Line |
| steal better version of code from compareTo | -137 |
-
dependency-check-core
+
Contributors
The following additional people have contributed to this project through the way of suggestions, patches or documentation.
use {@link #generate(org.apache.maven.doxia.sink.Sink, java.util.Locale) instead.
+
Returns whether or not a the report can be generated.
Returns false; this mojo cannot generate a report.
+Checks to see if a vulnerability has been identified with a CVSS score that is above the threshold set in the
@@ -113,8 +117,7 @@
cleanup() - Method in class org.owasp.dependencycheck.maven.Engine
-
closeAnalyzer(Analyzer) - Method in class org.owasp.dependencycheck.maven.Engine
@@ -128,8 +131,8 @@
Dependency-Check Maven Plugin 1.2.9 API
+Dependency-Check Maven Plugin 1.2.10 API
@@ -121,7 +121,7 @@ extends Maven Plugin that checks project dependencies and the dependencies of all child modules to see if they have any known published
vulnerabilities.
Releases resources used by the analyzers by calling close() on each
- analyzer.
+Releases resources used by the analyzers by calling close() on each analyzer.
- Engine - Class in org.owasp.dependencycheck.maven
-
-A modified version of the core engine specifically designed to persist some - data between multiple executions of a multi-module Maven project.+A modified version of the core engine specifically designed to persist some data between multiple executions of a multi-module + Maven project.
- Engine(MavenProject, List<MavenProject>) - Constructor for class org.owasp.dependencycheck.maven.Engine
- @@ -153,7 +156,7 @@
- generate(Sink, Locale) - Method in class org.owasp.dependencycheck.maven.BaseDependencyCheckMojo
-
Deprecated. -use {@link #generate(org.apache.maven.doxia.sink.Sink, java.util.Locale) instead.+
- generate(Sink, Locale) - Method in class org.owasp.dependencycheck.maven.BaseDependencyCheckMojo @@ -200,6 +203,10 @@
-
Gets the description of the Dependency-Check report to be displayed in the Maven Generated Reports page.
+
- getDescription(Locale) - Method in class org.owasp.dependencycheck.maven.UpdateMojo +
-
+Gets the description of the Dependency-Check report to be displayed in the Maven Generated Reports page.+
- getFormat() - Method in class org.owasp.dependencycheck.maven.BaseDependencyCheckMojo
-
Returns the report format.@@ -212,6 +219,10 @@
- getName(Locale) - Method in class org.owasp.dependencycheck.maven.UpdateMojo +
-
+Returns the report name.+
- getOutputDirectory() - Method in class org.owasp.dependencycheck.maven.BaseDependencyCheckMojo
-
Returns the output directory.@@ -279,12 +290,7 @@
- org.owasp.dependencycheck.maven - package org.owasp.dependencycheck.maven
-
-- -+
org.owasp.dependencycheck.maven - - - This is the main package containing the Mojo Maven Plugin - dependency-check.This is the main package containing the Mojo Maven Plugin - dependency-check.
- resetFileTypeAnalyzers() - Method in class org.owasp.dependencycheck.maven.Engine
-
-Resets the file type analyzers so that they can be re-used to scan - additional directories.+Resets the file type analyzers so that they can be re-used to scan additional directories.
- runCheck() - Method in class org.owasp.dependencycheck.maven.AggregateMojo
-
@@ -313,6 +318,10 @@
- runCheck() - Method in class org.owasp.dependencycheck.maven.UpdateMojo +
-
+Executes the dependency-check engine on the project's dependencies and generates the report.+
U
-
+
- update() - Method in class org.owasp.dependencycheck.maven.Engine +
-
+Runs the update steps of dependency-check.+
- UPDATE_EXECUTED_FLAG - Static variable in class org.owasp.dependencycheck.maven.Engine
-
-Key used in the MavenProject context values to note whether or not an - update has been executed.+Key used in the MavenProject context values to note whether or not an update has been executed.
+
- UpdateMojo - Class in org.owasp.dependencycheck.maven +
-
+Maven Plugin that checks the project dependencies to see if they have any known published vulnerabilities.+
+
- UpdateMojo() - Constructor for class org.owasp.dependencycheck.maven.UpdateMojo +
- Author: -
- Jeremy Long
- Direct Known Subclasses: -
- AggregateMojo, CheckMojo +
- AggregateMojo, CheckMojo, UpdateMojo
@@ -113,7 +113,7 @@ extends org.apache.maven.plugin.AbstractMojo implements org.apache.maven.reporting.MavenReport
- Author: -
- Jeremy Long
generate(org.codehaus.doxia.sink.Sink sink,
Locale locale)
Deprecated.
-
use {@link #generate(org.apache.maven.doxia.sink.Sink, java.util.Locale) instead.
+
Deprecated. use {@link #generate(org.apache.maven.doxia.sink.Sink, java.util.Locale) instead.
+Deprecated. use
generate(org.apache.maven.doxia.sink.Sink, java.util.Locale) instead.Generates the Dependency-Check Site Report.
- Specified by: diff --git a/dependency-check-maven/apidocs/org/owasp/dependencycheck/maven/CheckMojo.html b/dependency-check-maven/apidocs/org/owasp/dependencycheck/maven/CheckMojo.html index 741aea972..8df629418 100644 --- a/dependency-check-maven/apidocs/org/owasp/dependencycheck/maven/CheckMojo.html +++ b/dependency-check-maven/apidocs/org/owasp/dependencycheck/maven/CheckMojo.html @@ -2,16 +2,16 @@ - + -
- Author: -
- Jeremy Long
- Jeremy Long
Maven Plugin that checks the project dependencies to see if they have any known published vulnerabilities.
public class Engine extends Engine-
A modified version of the core engine specifically designed to persist some
- data between multiple executions of a multi-module Maven project.
+A modified version of the core engine specifically designed to persist some data between multiple executions of a multi-module
+ Maven project.
- Author: -
- Jeremy Long
static StringUPDATE_EXECUTED_FLAG
-Key used in the MavenProject context values to note whether or not an
- update has been executed.
+Key used in the MavenProject context values to note whether or not an update has been executed.
voidcleanup()
-Releases resources used by the analyzers by calling close() on each
- analyzer.
+Releases resources used by the analyzers by calling close() on each analyzer.
voidresetFileTypeAnalyzers()
-Resets the file type analyzers so that they can be re-used to scan
- additional directories.
+Resets the file type analyzers so that they can be re-used to scan additional directories.
+voidupdate()
+Runs the update steps of dependency-check.
getAnalyzers, getAnalyzers, getDependencies, getFileTypeAnalyzers, initializeEngine, scan, scan, scan, scan, scan, scan, scanDirectory, scanFile, setDependencies, supportsExtension
+doUpdates, getAnalyzers, getAnalyzers, getDependencies, getFileTypeAnalyzers, initializeEngine, scan, scan, scan, scan, scan, scan, scanDirectory, scanFile, setDependencies, supportsExtension
-
@@ -235,8 +238,7 @@ extends
UPDATE_EXECUTED_FLAG
public static final String UPDATE_EXECUTED_FLAG
-Key used in the MavenProject context values to note whether or not an - update has been executed.+Key used in the MavenProject context values to note whether or not an update has been executed.- See Also:
- Constant Field Values
Creates a new Engine to perform anyalsis on dependencies.
-- Parameters:
project- the current Maven projectreactorProjects- the reactor projects for the current Maven - execution
+- Parameters:
project- the current Maven projectreactorProjects- the reactor projects for the current Maven execution- Throws: -
DatabaseException- thrown if there is an issue connecting to the - databaseDatabaseException- thrown if there is an issue connecting to the database
-
+
-
+
update
+public void update()
+Runs the update steps of dependency-check.+
+
initializeAnalyzer
protected Analyzer initializeAnalyzer(Analyzer analyzer)-
Initializes the given analyzer. This skips the initialization of the
- CPEAnalyzer if it has been initialized by a previous execution.
+Initializes the given analyzer. This skips the initialization of the CPEAnalyzer if it has been initialized by a previous
+ execution.
- Overrides:
initializeAnalyzerin classEngine
@@ -310,8 +320,7 @@ extends
- Overrides:
cleanupin classEngine
@@ -339,10 +348,8 @@ extends
- org.owasp.dependencycheck.maven.AggregateMojo
- org.owasp.dependencycheck.maven.CheckMojo +
- org.owasp.dependencycheck.maven.UpdateMojo
- org.owasp.dependencycheck.maven.HelpMojo diff --git a/dependency-check-maven/apidocs/org/owasp/dependencycheck/maven/package-use.html b/dependency-check-maven/apidocs/org/owasp/dependencycheck/maven/package-use.html index f59a7e74f..15e1ba0e3 100644 --- a/dependency-check-maven/apidocs/org/owasp/dependencycheck/maven/package-use.html +++ b/dependency-check-maven/apidocs/org/owasp/dependencycheck/maven/package-use.html @@ -2,16 +2,16 @@ - + -
- org.owasp.dependencycheck.maven.AggregateMojo
- org.owasp.dependencycheck.maven.CheckMojo +
- org.owasp.dependencycheck.maven.UpdateMojo
- org.owasp.dependencycheck.maven.HelpMojo diff --git a/dependency-check-maven/check-mojo.html b/dependency-check-maven/check-mojo.html index 0d75adc2b..341c50afd 100644 --- a/dependency-check-maven/check-mojo.html +++ b/dependency-check-maven/check-mojo.html @@ -1,13 +1,13 @@ - +
- - + / @@ -69,9 +69,9 @@ -
- | Last Published: 2015-03-06 +
- | Last Published: 2015-04-12
- - Version: 1.2.9 + Version: 1.2.10 @@ -165,7 +165,7 @@
- - + / @@ -67,9 +67,9 @@ -
- | Last Published: 2015-03-06 +
- | Last Published: 2015-04-12
- - Version: 1.2.9 + Version: 1.2.10 @@ -250,12 +250,23 @@
-
-
File: 48, - Errors: 0, + <title>File: 50, + Errors: 1, Warnings: 0, Infos: 0 @@ -211,6 +211,20 @@ under the License.0 + ++ + org/owasp/dependencycheck/maven/UpdateMojo.java + ++ 0 + ++ 0 + ++ 0 + @@ -393,6 +407,20 @@ under the License. 0 ++ + src/main/java/org/owasp/dependencycheck/maven/UpdateMojo.java + ++ 0 + ++ 0 + ++ 1 + diff --git a/dependency-check-maven/cobertura/frame-sourcefiles-org.owasp.dependencycheck.maven.html b/dependency-check-maven/cobertura/frame-sourcefiles-org.owasp.dependencycheck.maven.html index 3171a51fc..6bbe9c114 100644 --- a/dependency-check-maven/cobertura/frame-sourcefiles-org.owasp.dependencycheck.maven.html +++ b/dependency-check-maven/cobertura/frame-sourcefiles-org.owasp.dependencycheck.maven.html @@ -24,11 +24,14 @@ org.owasp.dependencycheck.maven CheckMojo (0%) - Engine (13%) +Engine (12%) HelpMojo (0%) + diff --git a/dependency-check-maven/cobertura/frame-sourcefiles.html b/dependency-check-maven/cobertura/frame-sourcefiles.html index b8425bb2d..7231ad62c 100644 --- a/dependency-check-maven/cobertura/frame-sourcefiles.html +++ b/dependency-check-maven/cobertura/frame-sourcefiles.html @@ -24,11 +24,14 @@ All PackagesUpdateMojo (0%) +CheckMojo (0%) - Engine (13%) +Engine (12%) HelpMojo (0%) + diff --git a/dependency-check-maven/cobertura/frame-summary-org.owasp.dependencycheck.maven.html b/dependency-check-maven/cobertura/frame-summary-org.owasp.dependencycheck.maven.html index 6c81e6218..1f4ace59c 100644 --- a/dependency-check-maven/cobertura/frame-summary-org.owasp.dependencycheck.maven.html +++ b/dependency-check-maven/cobertura/frame-summary-org.owasp.dependencycheck.maven.html @@ -16,7 +16,7 @@UpdateMojo (0%) +
- + diff --git a/dependency-check-maven/cobertura/frame-summary.html b/dependency-check-maven/cobertura/frame-summary.html index 1eecd386c..00929e631 100644 --- a/dependency-check-maven/cobertura/frame-summary.html +++ b/dependency-check-maven/cobertura/frame-summary.html @@ -16,8 +16,8 @@Package # Classes Line Coverage Branch Coverage Complexity org.owasp.dependencycheck.maven 5 7% 3% 4.924242424242424;4.924 org.owasp.dependencycheck.maven 6 7% 2% 4.704225352112676;4.704
- + diff --git a/dependency-check-maven/cobertura/org.owasp.dependencycheck.maven.AggregateMojo.html b/dependency-check-maven/cobertura/org.owasp.dependencycheck.maven.AggregateMojo.html index 1be6d0a17..ce31f15a2 100644 --- a/dependency-check-maven/cobertura/org.owasp.dependencycheck.maven.AggregateMojo.html +++ b/dependency-check-maven/cobertura/org.owasp.dependencycheck.maven.AggregateMojo.html @@ -108,7 +108,7 @@Package # Classes Line Coverage Branch Coverage Complexity All Packages 5 7% 3% 4.924242424242424;4.924 org.owasp.dependencycheck.maven 5 7% 3% 4.924242424242424;4.924 All Packages 6 7% 2% 4.704225352112676;4.704 org.owasp.dependencycheck.maven 6 7% 2% 4.704225352112676;4.704 45 *46 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long47 */48 }
63 *64 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long65 */66 1 public abstract class BaseDependencyCheckMojo extends AbstractMojo implements MavenReport {
383 * @throws MavenReportException if a maven report exception occurs384 * @deprecated use {@link #generate(org.apache.maven.doxia.sink.Sink, java.util.Locale) instead.* @deprecated use {@link #generate(org.apache.maven.doxia.sink.Sink, java.util.Locale)} instead.385 */386 }
34 *35 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long36 */37 }
Classes in this File Line Coverage Branch Coverage Complexity Engine 13% 2% 3.7;3.7 Engine 12% 2% 3.6363636363636362;3.636 @@ -76,13 +76,13 @@29 /**30 * A modified version of the core engine specifically designed to persist some* A modified version of the core engine specifically designed to persist some data between multiple executions of a multi-module31 * data between multiple executions of a multi-module Maven project.* Maven project.32 *33 * @author Jeremy Long <jeremy.long@owasp.org>* @author Jeremy Long34 */35 53 /**54 * Key used in the MavenProject context values to note whether or not an* Key used in the MavenProject context values to note whether or not an update has been executed.55 * update has been executed.*/56 */57 public static final String UPDATE_EXECUTED_FLAG = "dependency-check-update-executed";
57 58 /**59 /**60 * Creates a new Engine to perform anyalsis on dependencies.61 60 *62 61 * @param project the current Maven project62 * @param reactorProjects the reactor projects for the current Maven execution63 * @param reactorProjects the reactor projects for the current Maven* @throws DatabaseException thrown if there is an issue connecting to the database64 * execution65 * @throws DatabaseException thrown if there is an issue connecting to the66 * database67 */68 1 public Engine(MavenProject project, List<MavenProject> reactorProjects) throws DatabaseException {
69 1 this.currentProject = project;70 1 this.reactorProjects = reactorProjects;71 1 initializeEngine();
72 1 }
73 65 1 public Engine(MavenProject project, List<MavenProject> reactorProjects) throws DatabaseException {
66 1 this.currentProject = project;67 1 this.reactorProjects = reactorProjects;68 1 initializeEngine();
69 1 }
70 74 71 /**75 72 * Runs the analyzers against all of the dependencies.76 73 */77 74 @Override
78 75 public void analyzeDependencies() {
79 0 final MavenProject root = getExecutionRoot();80 0 if (root != null) {81 0 LOGGER.fine(String.format("Checking root project, %s, if updates have already been completed", root.getArtifactId()));82 76 0 final MavenProject root = getExecutionRoot();77 0 if (root != null) {78 0 LOGGER.fine(String.format("Checking root project, %s, if updates have already been completed", root.getArtifactId()));79 } else {83 0 LOGGER.fine("Checking root project, null, if updates have already been completed");80 0 LOGGER.fine("Checking root project, null, if updates have already been completed");81 }
82 0 if (root != null && root.getContextValue(UPDATE_EXECUTED_FLAG) != null) {83 0 System.setProperty(Settings.KEYS.AUTO_UPDATE, Boolean.FALSE.toString());84 }
85 0 if (root != null && root.getContextValue(UPDATE_EXECUTED_FLAG) != null) {86 0 System.setProperty(Settings.KEYS.AUTO_UPDATE, Boolean.FALSE.toString());87 85 0 super.analyzeDependencies();86 0 if (root != null) {87 0 root.setContextValue(UPDATE_EXECUTED_FLAG, Boolean.TRUE);88 }
88 0 super.analyzeDependencies();89 0 if (root != null) {90 0 root.setContextValue(UPDATE_EXECUTED_FLAG, Boolean.TRUE);89 0 }90 91 }
92 0 }/**92 * Runs the update steps of dependency-check.93 */94 /**95 * This constructor should not be called. Use Engine(MavenProject) instead.96 *97 * @throws DatabaseException thrown if there is an issue connecting to thepublic void update() {
95 0 final MavenProject root = getExecutionRoot();96 0 if (root != null && root.getContextValue(UPDATE_EXECUTED_FLAG) != null) {97 0 System.setProperty(Settings.KEYS.AUTO_UPDATE, Boolean.FALSE.toString());98 * database99 */100 0 private Engine() throws DatabaseException {101 0 }}
99 0 this.doUpdates();100 0 }101 102 /**103 /*** This constructor should not be called. Use Engine(MavenProject) instead.104 * Initializes the given analyzer. This skips the initialization of the105 * CPEAnalyzer if it has been initialized by a previous execution.106 *107 * @param analyzer the analyzer to initialize108 * @return the initialized analyzer105 * @throws DatabaseException thrown if there is an issue connecting to the database106 */107 0 private Engine() throws DatabaseException {108 0 }109 */110 @Override
111 protected Analyzer initializeAnalyzer(Analyzer analyzer) {112 0 if ((analyzer instanceof CPEAnalyzer)) {113 0 CPEAnalyzer cpe = getPreviouslyLoadedCPEAnalyzer();114 0 if (cpe != null) {115 0 return cpe;116 }
117 0 cpe = (CPEAnalyzer) super.initializeAnalyzer(analyzer);118 0 storeCPEAnalyzer(cpe);119 }
120 0 return super.initializeAnalyzer(analyzer);121 }
122 123 110 /**124 * Releases resources used by the analyzers by calling close() on each125 * analyzer.126 111 * Initializes the given analyzer. This skips the initialization of the CPEAnalyzer if it has been initialized by a previous112 * execution.113 *114 * @param analyzer the analyzer to initialize115 * @return the initialized analyzer116 */127 117 @Override
128 public void cleanup() {
129 1 super.cleanup();130 1 if (currentProject == null || reactorProjects == null) {131 1 return;132 }
133 0 if (this.currentProject == reactorProjects.get(reactorProjects.size() - 1)) {134 0 final CPEAnalyzer cpe = getPreviouslyLoadedCPEAnalyzer();135 0 if (cpe != null) {136 0 cpe.close();137 118 protected Analyzer initializeAnalyzer(Analyzer analyzer) {119 0 if ((analyzer instanceof CPEAnalyzer)) {120 0 CPEAnalyzer cpe = getPreviouslyLoadedCPEAnalyzer();121 0 if (cpe != null) {122 0 return cpe;123 }
124 0 cpe = (CPEAnalyzer) super.initializeAnalyzer(analyzer);125 0 storeCPEAnalyzer(cpe);126 }
127 0 return super.initializeAnalyzer(analyzer);128 }
129 130 /**131 * Releases resources used by the analyzers by calling close() on each analyzer.132 */133 @Override
134 public void cleanup() {
135 1 super.cleanup();136 1 if (currentProject == null || reactorProjects == null) {137 1 return;138 }
139 0 }140 141 /**142 * Closes the given analyzer. This skips closing the CPEAnalyzer.139 0 if (this.currentProject == reactorProjects.get(reactorProjects.size() - 1)) {140 0 final CPEAnalyzer cpe = getPreviouslyLoadedCPEAnalyzer();141 0 if (cpe != null) {142 0 cpe.close();143 *}
144 * @param analyzer the analyzer to close145 */}
145 0 }146 @Override
147 protected void closeAnalyzer(Analyzer analyzer) {
148 0 if ((analyzer instanceof CPEAnalyzer)) {149 0 if (getPreviouslyLoadedCPEAnalyzer() == null) {150 0 super.closeAnalyzer(analyzer);/**148 * Closes the given analyzer. This skips closing the CPEAnalyzer.149 *150 * @param analyzer the analyzer to close151 }
*/152 } else {153 0 super.closeAnalyzer(analyzer);154 }
155 0 }156 @Override
153 protected void closeAnalyzer(Analyzer analyzer) {
154 0 if ((analyzer instanceof CPEAnalyzer)) {155 0 if (getPreviouslyLoadedCPEAnalyzer() == null) {156 0 super.closeAnalyzer(analyzer);157 /**}
158 * Gets the CPEAnalyzer from the root Maven Project.159 *} else {159 0 super.closeAnalyzer(analyzer);160 * @return an initialized CPEAnalyzer161 */}
161 0 }162 163 /**164 * Gets the CPEAnalyzer from the root Maven Project.165 *166 * @return an initialized CPEAnalyzer167 */168 private CPEAnalyzer getPreviouslyLoadedCPEAnalyzer() {163 0 CPEAnalyzer cpe = null;164 0 final MavenProject project = getExecutionRoot();165 0 if (project != null) {166 0 final Object obj = project.getContextValue(CPE_ANALYZER_KEY);167 0 if (obj != null && obj instanceof CPEAnalyzer) {168 0 cpe = (CPEAnalyzer) project.getContextValue(CPE_ANALYZER_KEY);169 }
170 }
171 0 return cpe;172 }
173 174 /**169 0 CPEAnalyzer cpe = null;170 0 final MavenProject project = getExecutionRoot();171 0 if (project != null) {172 0 final Object obj = project.getContextValue(CPE_ANALYZER_KEY);173 0 if (obj != null && obj instanceof CPEAnalyzer) {174 0 cpe = (CPEAnalyzer) project.getContextValue(CPE_ANALYZER_KEY);175 * Stores a CPEAnalyzer in the root Maven Project.176 *177 * @param cpe the CPEAnalyzer to store178 */179 private void storeCPEAnalyzer(CPEAnalyzer cpe) {
180 0 final MavenProject p = getExecutionRoot();181 0 if (p != null) {182 0 p.setContextValue(CPE_ANALYZER_KEY, cpe);183 }
184 0 }185 186 /**187 * Returns the root Maven Project.188 *189 * @return the root Maven Project190 */191 private MavenProject getExecutionRoot() {192 0 if (reactorProjects == null) {193 0 return null;194 }
195 0 for (MavenProject p : reactorProjects) {196 0 if (p.isExecutionRoot()) {197 0 return p;198 }
199 0 }200 //the following should never run, but leaving it as a failsafe.201 0 if (this.currentProject == null) {202 0 return null;203 176 }
204 0 MavenProject p = this.currentProject;205 0 while (p.getParent() != null) {206 0 p = p.getParent();207 }
208 0 return p;209 177 0 return cpe;178 }
210 179 211 180 /**212 * Resets the file type analyzers so that they can be re-used to scan213 * additional directories. Without the reset the analyzer might be disabled214 * because the first scan/analyze did not identify any files that could be215 * processed by the analyzer.216 181 * Stores a CPEAnalyzer in the root Maven Project.182 *183 * @param cpe the CPEAnalyzer to store184 */185 private void storeCPEAnalyzer(CPEAnalyzer cpe) {
186 0 final MavenProject p = getExecutionRoot();187 0 if (p != null) {188 0 p.setContextValue(CPE_ANALYZER_KEY, cpe);189 }
190 0 }191 192 /**193 * Returns the root Maven Project.194 *195 * @return the root Maven Project196 */197 private MavenProject getExecutionRoot() {198 0 if (reactorProjects == null) {199 0 return null;200 }
201 0 for (MavenProject p : reactorProjects) {202 0 if (p.isExecutionRoot()) {203 0 return p;204 }
205 0 }206 //the following should never run, but leaving it as a failsafe.207 0 if (this.currentProject == null) {208 0 return null;209 }
210 0 MavenProject p = this.currentProject;211 0 while (p.getParent() != null) {212 0 p = p.getParent();213 }
214 0 return p;215 }
216 217 /**218 * Resets the file type analyzers so that they can be re-used to scan additional directories. Without the reset the analyzer219 * might be disabled because the first scan/analyze did not identify any files that could be processed by the analyzer.220 */221 public void resetFileTypeAnalyzers() {
218 0 for (FileTypeAnalyzer a : getFileTypeAnalyzers()) {219 0 a.reset();220 0 }221 0 }222 222 0 for (FileTypeAnalyzer a : getFileTypeAnalyzers()) {223 0 a.reset();224 0 }225 0 }226 }
}
Coverage Report + + + + +Coverage Report - org.owasp.dependencycheck.maven.UpdateMojo
+++
+Classes in this File Line Coverage Branch Coverage Complexity UpdateMojo 0% N/A 1.5;1.5 ++
+ + + + diff --git a/dependency-check-maven/configuration.html b/dependency-check-maven/configuration.html index 8c5fb8aab..2debd9a59 100644 --- a/dependency-check-maven/configuration.html +++ b/dependency-check-maven/configuration.html @@ -1,13 +1,13 @@ - +1 /*2 * This file is part of dependency-check-maven.3 *4 * Licensed under the Apache License, Version 2.0 (the "License");5 * you may not use this file except in compliance with the License.6 * You may obtain a copy of the License at7 *8 * http://www.apache.org/licenses/LICENSE-2.09 *10 * Unless required by applicable law or agreed to in writing, software11 * distributed under the License is distributed on an "AS IS" BASIS,12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.13 * See the License for the specific language governing permissions and14 * limitations under the License.15 *16 * Copyright (c) 2013 Jeremy Long. All Rights Reserved.17 */18 package org.owasp.dependencycheck.maven;19 20 import java.util.Locale;21 import java.util.logging.Level;22 import java.util.logging.Logger;23 import org.apache.maven.artifact.Artifact;24 import org.apache.maven.plugin.MojoExecutionException;25 import org.apache.maven.plugin.MojoFailureException;26 import org.apache.maven.plugins.annotations.LifecyclePhase;27 import org.apache.maven.plugins.annotations.Mojo;28 import org.apache.maven.plugins.annotations.ResolutionScope;29 import org.owasp.dependencycheck.data.nvdcve.DatabaseException;30 import org.owasp.dependencycheck.utils.Settings;31 32 /**33 * Maven Plugin that checks the project dependencies to see if they have any known published vulnerabilities.34 *35 * @author Jeremy Long36 */37 @Mojo(
38 name = "update-only",39 defaultPhase = LifecyclePhase.GENERATE_RESOURCES,
40 threadSafe = true,41 requiresDependencyResolution = ResolutionScope.NONE,
42 requiresOnline = true43 )
44 0 public class UpdateMojo extends BaseDependencyCheckMojo {45 46 /**47 * Logger field reference.48 */49 0 private static final Logger LOGGER = Logger.getLogger(UpdateMojo.class.getName());50 51 /**52 * Returns false; this mojo cannot generate a report.53 *54 * @return <code>false</code>55 */56 @Override
57 public boolean canGenerateReport() {
58 0 return false;59 }
60 61 /**62 * Executes the dependency-check engine on the project's dependencies and generates the report.63 *64 * @throws MojoExecutionException thrown if there is an exception executing the goal65 * @throws MojoFailureException thrown if dependency-check is configured to fail the build66 */67 @Override
68 public void runCheck() throws MojoExecutionException, MojoFailureException {
69 final Engine engine;70 try {71 0 engine = initializeEngine();72 0 engine.update();73 0 } catch (DatabaseException ex) {74 0 LOGGER.log(Level.FINE, "Database connection error", ex);75 0 throw new MojoExecutionException("An exception occured connecting to the local database. Please see the log file for more details.", ex);76 0 }77 0 engine.cleanup();78 0 Settings.cleanup();79 0 }80 81 /**82 * Returns the report name.83 *84 * @param locale the location85 * @return the report name86 */87 public String getName(Locale locale) {88 0 return "dependency-check-update";89 }
90 91 /**92 * Gets the description of the Dependency-Check report to be displayed in the Maven Generated Reports page.93 *94 * @param locale The Locale to get the description for95 * @return the description96 */97 public String getDescription(Locale locale) {98 0 return "Updates the local cache of the NVD data from NIST.";99 }
100 101 }
dependency-check-maven - Goals @@ -19,7 +19,7 @@ - + @@ -42,7 +42,7 @@-dependency-check-maven
+
@@ -54,7 +54,7 @@- - + /
@@ -67,9 +67,9 @@ -- | Last Published: 2015-03-06
+- | Last Published: 2015-04-12
- - Version: 1.2.9 + Version: 1.2.10
@@ -179,6 +179,13 @@Runs dependency-check against the project and generates a report. + ++ + update-only + +Updates the local cache of the NVD data from NIST. +Configuration
@@ -355,7 +362,7 @@nexusUrl -Defines the Nexus Pro Server URL. If not set the Nexus Analyzer will be disabled. +Defines the Nexus Server’s web service end point (example http://domain.enterprise/service/local/). If not set the Nexus Analyzer will be disabled. dependency-check-maven - Dependency Updates Report @@ -19,7 +19,7 @@ - + @@ -42,7 +42,7 @@-dependency-check-maven
+
@@ -54,7 +54,7 @@- - + /
@@ -67,9 +67,9 @@ -- | Last Published: 2015-03-06
+- | Last Published: 2015-04-12
- - Version: 1.2.9 + Version: 1.2.10
@@ -245,7 +245,7 @@# of dependencies using the latest version available -11 8 # of dependencies where the next version available is smaller than an incremental version update @@ -257,7 +257,7 @@# of dependencies where the next version available is a minor version update -0 3 # of dependencies where the next version available is a major version update @@ -305,12 +305,12 @@org.jmockit jmockit -1.15 +1.16 test jar - 1.16-beta1 +1.17-beta1 @@ -341,7 +341,7 @@ Next Minor Next Major - org.apache.maven maven-core 3.2.5 @@ -350,10 +350,10 @@jar - + 3.3.1 - org.apache.maven maven-plugin-api 3.2.5 @@ -362,10 +362,10 @@jar - + 3.3.1 - org.apache.maven maven-settings 3.2.5 @@ -374,7 +374,7 @@jar - + 3.3.1 org.owasp dependency-check-core -1.2.9 +1.2.10 compile jar @@ -440,7 +440,7 @@org.owasp dependency-check-utils -1.2.9 +1.2.10 compile jar @@ -492,7 +492,7 @@
+Status - No newer versions available. There is at least one newer minor version available. Minor updates are sometimes passive.Group Id org.apache.maven Type -jar jar + Newer versions +3.3.1 Next Minor +org.apache.maven:maven-plugin-api
Status - No newer versions available. There is at least one newer minor version available. Minor updates are sometimes passive.Group Id org.apache.maven Type -jar jar ++ Newer versions +3.3.1 Next Minor +org.apache.maven:maven-settings
Status - No newer versions available. There is at least one newer minor version available. Minor updates are sometimes passive.Group Id org.apache.maven Type -jar jar ++ Newer versions +3.3.1 Next Minor +org.apache.maven.plugin-testing:maven-plugin-testing-harness
@@ -693,7 +702,7 @@
jmockit Current Version -1.15 1.16 Scope test jar Newer versions -1.16-beta1 Next Incremental
1.16-beta2 Latest Incremental1.17-beta1 Next Incremental @@ -279,7 +279,7 @@org.owasp:dependency-check-core
@@ -720,7 +729,7 @@
dependency-check-core Current Version -1.2.9 1.2.10 Scope compile dependency-check-utils Current Version -1.2.9 1.2.10 Scope compile dependency-check-maven - FindBugs Bug Detector Report @@ -19,7 +19,7 @@ - + @@ -42,7 +42,7 @@-dependency-check-maven
+
@@ -54,7 +54,7 @@- - + /
@@ -67,9 +67,9 @@ -- | Last Published: 2015-03-06
+- | Last Published: 2015-04-12
- - Version: 1.2.9 + Version: 1.2.10
@@ -253,7 +253,7 @@Errors Missing Classes - 5 +6 1 0 0 The class name org.owasp.dependencycheck.maven.Engine shadows the simple name of the superclass org.owasp.dependencycheck.Engine BAD_PRACTICE NM_SAME_SIMPLE_NAME_AS_SUPERCLASS -40-221 +40-225 High diff --git a/dependency-check-maven/help-mojo.html b/dependency-check-maven/help-mojo.html index 2c3a6d93b..4e7f8d8b9 100644 --- a/dependency-check-maven/help-mojo.html +++ b/dependency-check-maven/help-mojo.html @@ -1,13 +1,13 @@ - +dependency-check-maven - dependency-check:help @@ -20,7 +20,7 @@ - + @@ -43,7 +43,7 @@diff --git a/dependency-check-maven/taglist.html b/dependency-check-maven/taglist.html index 1271fd612..622248127 100644 --- a/dependency-check-maven/taglist.html +++ b/dependency-check-maven/taglist.html @@ -1,13 +1,13 @@ - +-dependency-check-maven
+
@@ -55,7 +55,7 @@- - + /
@@ -69,9 +69,9 @@ -- | Last Published: 2015-03-06
+- | Last Published: 2015-04-12
- - Version: 1.2.9 + Version: 1.2.10
@@ -163,7 +163,7 @@Full name:
-org.owasp:dependency-check-maven:1.2.9:help
+org.owasp:dependency-check-maven:1.2.10:help
Description:
diff --git a/dependency-check-maven/images/dc-maven.svg b/dependency-check-maven/images/dc-maven.svg new file mode 100644 index 000000000..e61894ca7 --- /dev/null +++ b/dependency-check-maven/images/dc-maven.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/dependency-check-maven/index.html b/dependency-check-maven/index.html index fb2e11e1b..be6178f13 100644 --- a/dependency-check-maven/index.html +++ b/dependency-check-maven/index.html @@ -1,13 +1,13 @@ - +dependency-check-maven - About @@ -19,7 +19,7 @@ - + @@ -42,7 +42,7 @@-dependency-check-maven
+
@@ -54,7 +54,7 @@- - + /
@@ -67,9 +67,9 @@ -- | Last Published: 2015-03-06
+- | Last Published: 2015-04-12
- - Version: 1.2.9 + Version: 1.2.10
diff --git a/dependency-check-maven/issue-tracking.html b/dependency-check-maven/issue-tracking.html index 771ae1802..83a12c70d 100644 --- a/dependency-check-maven/issue-tracking.html +++ b/dependency-check-maven/issue-tracking.html @@ -1,13 +1,13 @@ - +dependency-check-maven - Issue Tracking @@ -19,7 +19,7 @@ - + @@ -42,7 +42,7 @@diff --git a/dependency-check-maven/project-info.html b/dependency-check-maven/project-info.html index a348393a5..b7ee90ed8 100644 --- a/dependency-check-maven/project-info.html +++ b/dependency-check-maven/project-info.html @@ -1,13 +1,13 @@ - +-dependency-check-maven
+
@@ -54,7 +54,7 @@- - + /
@@ -67,9 +67,9 @@ -- | Last Published: 2015-03-06
+- | Last Published: 2015-04-12
- - Version: 1.2.9 + Version: 1.2.10
diff --git a/dependency-check-maven/license.html b/dependency-check-maven/license.html index c5d7d7e2b..f0f8aa78c 100644 --- a/dependency-check-maven/license.html +++ b/dependency-check-maven/license.html @@ -1,13 +1,13 @@ - +dependency-check-maven - Project License @@ -19,7 +19,7 @@ - + @@ -42,7 +42,7 @@-dependency-check-maven
+
@@ -54,7 +54,7 @@- - + /
@@ -67,9 +67,9 @@ -- | Last Published: 2015-03-06
+- | Last Published: 2015-04-12
- - Version: 1.2.9 + Version: 1.2.10
diff --git a/dependency-check-maven/mail-lists.html b/dependency-check-maven/mail-lists.html index b88e60fcf..deb37cafc 100644 --- a/dependency-check-maven/mail-lists.html +++ b/dependency-check-maven/mail-lists.html @@ -1,13 +1,13 @@ - +dependency-check-maven - Project Mailing Lists @@ -19,7 +19,7 @@ - + @@ -42,7 +42,7 @@-dependency-check-maven
+
@@ -54,7 +54,7 @@- - + /
@@ -67,9 +67,9 @@ -- | Last Published: 2015-03-06
+- | Last Published: 2015-04-12
- - Version: 1.2.9 + Version: 1.2.10
diff --git a/dependency-check-maven/plugin-info.html b/dependency-check-maven/plugin-info.html index 14f80b161..80f739c2f 100644 --- a/dependency-check-maven/plugin-info.html +++ b/dependency-check-maven/plugin-info.html @@ -1,13 +1,13 @@ - +dependency-check-maven - Plugin Documentation @@ -19,7 +19,7 @@ - + @@ -42,7 +42,7 @@-dependency-check-maven
+
@@ -54,7 +54,7 @@- - + /
@@ -67,9 +67,9 @@ -- | Last Published: 2015-03-06
+- | Last Published: 2015-04-12
- - Version: 1.2.9 + Version: 1.2.10
@@ -262,7 +262,12 @@ have any known published vulnerabilities.No Display help information on dependency-check-maven. +-Dgoal=<goal-name> to display parameter details. +
Callmvn dependency-check:help -Ddetail=true --Dgoal=<goal-name>to display parameter details.+ dependency-check:update-only +Yes +Maven Plugin that checks the project dependencies to see if they +have any known published vulnerabilities. +System Requirements
The following specifies the minimum requirements to run this Maven plugin:
@@ -292,7 +297,7 @@ Callmvn dependency-check:help -Ddetail=true <plugin> <groupId>org.owasp</groupId> <artifactId>dependency-check-maven</artifactId> - <version>1.2.9</version> + <version>1.2.10</version> </plugin> ... </plugins> @@ -302,7 +307,7 @@ Callmvn dependency-check:help -Ddetail=true <plugin> <groupId>org.owasp</groupId> <artifactId>dependency-check-maven</artifactId> - <version>1.2.9</version> + <version>1.2.10</version> </plugin> ... </plugins> @@ -314,7 +319,7 @@ Callmvn dependency-check:help -Ddetail=true <plugin> <groupId>org.owasp</groupId> <artifactId>dependency-check-maven</artifactId> - <version>1.2.9</version> + <version>1.2.10</version> </plugin> ... </plugins> diff --git a/dependency-check-maven/plugin-updates-report.html b/dependency-check-maven/plugin-updates-report.html index 1b0e86587..1ee40595c 100644 --- a/dependency-check-maven/plugin-updates-report.html +++ b/dependency-check-maven/plugin-updates-report.html @@ -1,13 +1,13 @@ - +dependency-check-maven - Plugin Updates Report @@ -19,7 +19,7 @@ - + @@ -42,7 +42,7 @@+-dependency-check-maven
+
@@ -54,7 +54,7 @@- - + /
@@ -67,9 +67,9 @@ -- | Last Published: 2015-03-06
+- | Last Published: 2015-04-12
- - Version: 1.2.9 + Version: 1.2.10
diff --git a/dependency-check-maven/pmd.html b/dependency-check-maven/pmd.html index 03ba002ed..fd2935a82 100644 --- a/dependency-check-maven/pmd.html +++ b/dependency-check-maven/pmd.html @@ -1,13 +1,13 @@ - +dependency-check-maven - PMD Results @@ -19,7 +19,7 @@ - + @@ -42,7 +42,7 @@154 +org/owasp/dependencycheck/maven/UpdateMojo.java
++
+ +Violation +Line + Avoid unused imports such as 'org.apache.maven.artifact.Artifact' +23 dependency-check-maven - Project Information @@ -19,7 +19,7 @@ - + @@ -42,7 +42,7 @@-dependency-check-maven
+
@@ -54,7 +54,7 @@- - + /
@@ -67,9 +67,9 @@ -- | Last Published: 2015-03-06
+- | Last Published: 2015-04-12
- - Version: 1.2.9 + Version: 1.2.10
diff --git a/dependency-check-maven/project-reports.html b/dependency-check-maven/project-reports.html index bcaf40451..be7c39d6d 100644 --- a/dependency-check-maven/project-reports.html +++ b/dependency-check-maven/project-reports.html @@ -1,13 +1,13 @@ - +dependency-check-maven - Generated Reports @@ -19,7 +19,7 @@ - + @@ -42,7 +42,7 @@+-dependency-check-maven
+
@@ -54,7 +54,7 @@- - + /
@@ -67,9 +67,9 @@ -- | Last Published: 2015-03-06
+- | Last Published: 2015-04-12
- - Version: 1.2.9 + Version: 1.2.10
diff --git a/dependency-check-maven/project-summary.html b/dependency-check-maven/project-summary.html index 3b5aba83a..4918a3740 100644 --- a/dependency-check-maven/project-summary.html +++ b/dependency-check-maven/project-summary.html @@ -1,13 +1,13 @@ - +dependency-check-maven - Project Summary @@ -19,7 +19,7 @@ - + @@ -42,7 +42,7 @@-dependency-check-maven
+
@@ -54,7 +54,7 @@- - + /
@@ -67,9 +67,9 @@ -- | Last Published: 2015-03-06
+- | Last Published: 2015-04-12
- - Version: 1.2.9 + Version: 1.2.10
@@ -246,7 +246,7 @@dependency-check-maven Version -1.2.9 1.2.10 Type maven-plugin dependency-check-maven - Source Repository @@ -19,7 +19,7 @@ - + @@ -42,7 +42,7 @@-dependency-check-maven
+
@@ -54,7 +54,7 @@- - + /
@@ -67,9 +67,9 @@ -- | Last Published: 2015-03-06
+- | Last Published: 2015-04-12
- - Version: 1.2.9 + Version: 1.2.10
diff --git a/dependency-check-maven/surefire-report.html b/dependency-check-maven/surefire-report.html index 29f8f9716..44c3c418d 100644 --- a/dependency-check-maven/surefire-report.html +++ b/dependency-check-maven/surefire-report.html @@ -1,13 +1,13 @@ - +dependency-check-maven - Surefire Report @@ -19,7 +19,7 @@ - + @@ -42,7 +42,7 @@-dependency-check-maven
+
@@ -54,7 +54,7 @@- - + /
@@ -67,9 +67,9 @@ -- | Last Published: 2015-03-06
+- | Last Published: 2015-04-12
- - Version: 1.2.9 + Version: 1.2.10
@@ -274,7 +274,7 @@ function toggleDisplay(elementId) {0 0 100% -2.03
+1.124
Note: failures are anticipated and checked for with assertions while errors are unanticipated.
+Package List
@@ -295,7 +295,7 @@ function toggleDisplay(elementId) {0 0 100% -2.03
+1.124
Note: package statistics are not computed recursively, they only sum up all of its testsuites numbers.
org.owasp.dependencycheck.maven
@@ -317,7 +317,7 @@ function toggleDisplay(elementId) {0 0 100% -2.03 1.124 Test Cases
[Summary] [Package List] [Test Cases]
@@ -327,7 +327,7 @@ function toggleDisplay(elementId) {testScanArtifacts -2.03 1.124 dependency-check-maven - Tag List report @@ -19,7 +19,7 @@ - + @@ -42,7 +42,7 @@+-dependency-check-maven
+
@@ -54,7 +54,7 @@- - + /
@@ -67,9 +67,9 @@ -- | Last Published: 2015-03-06
+- | Last Published: 2015-04-12
- - Version: 1.2.9 + Version: 1.2.10
@@ -248,19 +248,25 @@Tag strings used by tag class Todo Work -1 +2 todo, FIXME Each tag is detailed below:
1020 ++ +org.owasp.dependencycheck.maven.BaseDependencyCheckMojoTest +Line + diff --git a/dependency-check-maven/team-list.html b/dependency-check-maven/team-list.html index 94551a7b2..b60d8ddb1 100644 --- a/dependency-check-maven/team-list.html +++ b/dependency-check-maven/team-list.html @@ -1,13 +1,13 @@ - +get this to work under JDK 1.8 +66 dependency-check-maven - Team list @@ -19,7 +19,7 @@ - + @@ -42,7 +42,7 @@+-dependency-check-maven
+
@@ -54,7 +54,7 @@- - + /
@@ -67,9 +67,9 @@ -- | Last Published: 2015-03-06
+- | Last Published: 2015-04-12
- - Version: 1.2.9 + Version: 1.2.10
@@ -217,38 +217,42 @@Email Organization Organization URL -Roles -Properties +Roles - +Jeremy Long jeremy.long@owasp.org OWASP -https://www.owasp.org/index.php/OWASP_Dependency_Check -architect, developer -picUrl=https://plus.google.com/s2/photos/profile/108968019311857145023, twitter=@ctxt https://www.owasp.org/ +architect, developer Steve Springett Steve.Springett@owasp.org OWASP -https://www.owasp.org/index.php/OWASP_Dependency_Check -developer -- https://www.owasp.org/ +developer Will Stranathan Will.Stranathan@owasp.org OWASP -https://www.owasp.org/index.php/OWASP_Dependency_Check -developer -twitter=@willathome https://www.owasp.org/ +developer +Contributors
The following additional people have contributed to this project through the way of suggestions, patches or documentation.
-
+ + + + + + + + + + + + + + +- 
+
+
+
+
+
+ ++ +++ + + + +++++
+ ++++++ + ++ + + + + + ++
+ + ++ + + ++++ + +dependency-check:update-only
+ +Note:This goal should be used as a Maven report.
+ +Full name:
+ +org.owasp:dependency-check-maven:1.2.10:update-only
+ +Description:
+ +Maven Plugin that checks the project dependencies to see if they +have any known published vulnerabilities.+ +Attributes:
+ +-
+
+
- Requires a Maven project to be executed. + +
- The goal is thread-safe and supports parallel builds. + +
- Binds by default to the lifecycle phase: generate-resources. + +
- Requires that Maven runs in online mode. +
++ +Required Parameters
+ ++ +
++ + + +Name + +Type + +Since + +Description ++ + + +autoUpdate + +boolean + +- + +Sets whether auto-updating of the NVD CVE/CPE data is enabled. It +is not recommended that this be turned to false. Default is true. +
Default value is: true.
User property is: autoupdate.+ + + +dataFileName + +String + +- + +Sets whether or not the external report format should be used. +
Default value is: dependency-check.ser.
User property is: metaFileName.+ + + +failBuildOnCVSS + +float + +- + +Specifies if the build should be failed if a CVSS score above a +specified level is identified. The default is 11 which means since +the CVSS scores are 0-10, by default the build will never fail. +
Default value is: 11.
User property is: failBuildOnCVSS.+ + + +format + +String + +- + +The report format to be generated (HTML, XML, VULN, ALL). This +configuration option has no affect if using this within the Site +plug-in unless the externalReport is set to true. Default is HTML. +
Default value is: HTML.
User property is: format.+ + + +outputDirectory + +File + +- + +The output directory. This generally maps to "target". +
Default value is: ${project.build.directory}.+ + +reportOutputDirectory + +File + +- + +Specifies the destination directory for the generated +Dependency-Check report. This generally maps to "target/site". +
User property is: project.reporting.outputDirectory.++ +Optional Parameters
+ ++ +
++ + + +Name + +Type + +Since + +Description ++ + + +aggregate + +boolean + +- + +Deprecated. use the aggregate goal instead +
Default value is: false.
User property is: aggregate.+ + + +archiveAnalyzerEnabled + +boolean + +- + +Whether or not the Archive Analyzer is enabled. +
Default value is: true.
User property is: archiveAnalyzerEnabled.+ + + +assemblyAnalyzerEnabled + +boolean + +- + +Whether or not the .NET Assembly Analyzer is enabled. +
Default value is: true.
User property is: assemblyAnalyzerEnabled.+ + + +centralAnalyzerEnabled + +boolean + +- + +Whether or not the Central Analyzer is enabled. +
Default value is: true.
User property is: centralAnalyzerEnabled.+ + + +connectionString + +String + +- + +The database connection string. +
User property is: connectionString.+ + + +connectionTimeout + +String + +- + +The Connection Timeout. +
User property is: connectionTimeout.+ + + +cveUrl12Base + +String + +- + +Base Data Mirror URL for CVE 1.2. +
User property is: cveUrl12Base.+ + + +cveUrl12Modified + +String + +- + +Data Mirror URL for CVE 1.2. +
User property is: cveUrl12Modified.+ + + +cveUrl20Base + +String + +- + +Data Mirror URL for CVE 2.0. +
User property is: cveUrl20Base.+ + + +cveUrl20Modified + +String + +- + +Data Mirror URL for CVE 2.0. +
User property is: cveUrl20Modified.+ + + +dataDirectory + +String + +- + +The data directory, hold DC SQL DB. +
User property is: dataDirectory.+ + + +databaseDriverName + +String + +- + +The database driver name. An example would be org.h2.Driver. +
User property is: databaseDriverName.+ + + +databaseDriverPath + +String + +- + +The path to the database driver if it is not on the class path. +
User property is: databaseDriverPath.+ + + +databasePassword + +String + +- + +The password to use when connecting to the database. +
User property is: databasePassword.+ + + +databaseUser + +String + +- + +The database user name. +
User property is: databaseUser.+ + + +externalReport + +String + +- + +Deprecated. the internal report is no longer supported +
User property is: externalReport.+ + + +jarAnalyzerEnabled + +boolean + +- + +Whether or not the Jar Analyzer is enabled. +
Default value is: true.
User property is: jarAnalyzerEnabled.+ + + +logFile + +String + +- + +The path to the verbose log. +
User property is: logFile.+ + + +mavenSettings + +Settings + +- + +The Maven settings. +
Default value is: ${settings}.
User property is: mavenSettings.+ + + +mavenSettingsProxyId + +String + +- + +The maven settings proxy id. +
User property is: mavenSettingsProxyId.+ + + +nexusAnalyzerEnabled + +boolean + +- + +Whether or not the Nexus Analyzer is enabled. +
Default value is: true.
User property is: nexusAnalyzerEnabled.+ + + +nexusUrl + +String + +- + +The URL of a Nexus Pro server. +
User property is: nexusUrl.+ + + +nexusUsesProxy + +boolean + +- + +Whether or not the configured proxy is used to connect to Nexus. +
Default value is: true.
User property is: nexusUsesProxy.+ + + +nuspecAnalyzerEnabled + +boolean + +- + +Whether or not the .NET Nuspec Analyzer is enabled. +
Default value is: true.
User property is: nuspecAnalyzerEnabled.+ + + +pathToMono + +String + +- + +The path to mono for .NET Assembly analysis on non-windows systems. +
User property is: pathToMono.+ + + +proxyUrl + +String + +- + +Deprecated. Please use mavenSettings instead +
User property is: proxyUrl.+ + + +showSummary + +boolean + +- + +Flag indicating whether or not to show a summary in the output. +
Default value is: true.
User property is: showSummary.+ + + +skipProvidedScope + +boolean + +- + +Skip Analysis for Provided Scope Dependencies. +
Default value is: false.
User property is: skipProvidedScope.+ + + +skipRuntimeScope + +boolean + +- + +Skip Analysis for Runtime Scope Dependencies. +
Default value is: false.
User property is: skipRuntimeScope.+ + + +skipTestScope + +boolean + +- + +Skip Analysis for Test Scope Dependencies. +
Default value is: true.
User property is: skipTestScope.+ + + +suppressionFile + +String + +- + +The path to the suppression file. +
User property is: suppressionFile.+ + +zipExtensions + +String + +- + +A comma-separated list of file extensions to add to analysis next +to jar, zip, .... +
User property is: zipExtensions.++Parameter Details
+ + + +Deprecated. use the aggregate goal instead+ +Generate aggregate reports in multi-module projects.+ +-
+
+
- Type: boolean + +
- Required: No + +
- User Property: aggregate + +
- Default: false +
+ + +Whether or not the Archive Analyzer is enabled.+ +-
+
+
- Type: boolean + +
- Required: No + +
- User Property: archiveAnalyzerEnabled + +
- Default: true +
+ + +Whether or not the .NET Assembly Analyzer is enabled.+ +-
+
+
- Type: boolean + +
- Required: No + +
- User Property: assemblyAnalyzerEnabled + +
- Default: true +
+ + +Sets whether auto-updating of the NVD CVE/CPE data is enabled. It +is not recommended that this be turned to false. Default is true.+ +-
+
+
- Type: boolean + +
- Required: Yes + +
- User Property: autoupdate + +
- Default: true +
+ + +Whether or not the Central Analyzer is enabled.+ +-
+
+
- Type: boolean + +
- Required: No + +
- User Property: centralAnalyzerEnabled + +
- Default: true +
+ + +The database connection string.+ +-
+
+
- Type: java.lang.String + +
- Required: No + +
- User Property: connectionString +
+ + +The Connection Timeout.+ +-
+
+
- Type: java.lang.String + +
- Required: No + +
- User Property: connectionTimeout +
+ + +Base Data Mirror URL for CVE 1.2.+ +-
+
+
- Type: java.lang.String + +
- Required: No + +
- User Property: cveUrl12Base +
+ + +Data Mirror URL for CVE 1.2.+ +-
+
+
- Type: java.lang.String + +
- Required: No + +
- User Property: cveUrl12Modified +
+ + +Data Mirror URL for CVE 2.0.+ +-
+
+
- Type: java.lang.String + +
- Required: No + +
- User Property: cveUrl20Base +
+ + +Data Mirror URL for CVE 2.0.+ +-
+
+
- Type: java.lang.String + +
- Required: No + +
- User Property: cveUrl20Modified +
+ + +The data directory, hold DC SQL DB.+ +-
+
+
- Type: java.lang.String + +
- Required: No + +
- User Property: dataDirectory +
+ + +Sets whether or not the external report format should be used.+ +-
+
+
- Type: java.lang.String + +
- Required: Yes + +
- User Property: metaFileName + +
- Default: dependency-check.ser +
+ + +The database driver name. An example would be org.h2.Driver.+ +-
+
+
- Type: java.lang.String + +
- Required: No + +
- User Property: databaseDriverName +
+ + +The path to the database driver if it is not on the class path.+ +-
+
+
- Type: java.lang.String + +
- Required: No + +
- User Property: databaseDriverPath +
+ + +The password to use when connecting to the database.+ +-
+
+
- Type: java.lang.String + +
- Required: No + +
- User Property: databasePassword +
+ + +The database user name.+ +-
+
+
- Type: java.lang.String + +
- Required: No + +
- User Property: databaseUser +
+ + +Deprecated. the internal report is no longer supported+ +Sets whether or not the external report format should be used.+ +-
+
+
- Type: java.lang.String + +
- Required: No + +
- User Property: externalReport +
+ + +Specifies if the build should be failed if a CVSS score above a +specified level is identified. The default is 11 which means since +the CVSS scores are 0-10, by default the build will never fail.+ +-
+
+
- Type: float + +
- Required: Yes + +
- User Property: failBuildOnCVSS + +
- Default: 11 +
+ + +The report format to be generated (HTML, XML, VULN, ALL). This +configuration option has no affect if using this within the Site +plug-in unless the externalReport is set to true. Default is HTML.+ +-
+
+
- Type: java.lang.String + +
- Required: Yes + +
- User Property: format + +
- Default: HTML +
+ + +Whether or not the Jar Analyzer is enabled.+ +-
+
+
- Type: boolean + +
- Required: No + +
- User Property: jarAnalyzerEnabled + +
- Default: true +
+ + +The path to the verbose log.+ +-
+
+
- Type: java.lang.String + +
- Required: No + +
- User Property: logFile +
+ + +The Maven settings.+ +-
+
+
- Type: org.apache.maven.settings.Settings + +
- Required: No + +
- User Property: mavenSettings + +
- Default: ${settings} +
+ + +The maven settings proxy id.+ +-
+
+
- Type: java.lang.String + +
- Required: No + +
- User Property: mavenSettingsProxyId +
+ + +Whether or not the Nexus Analyzer is enabled.+ +-
+
+
- Type: boolean + +
- Required: No + +
- User Property: nexusAnalyzerEnabled + +
- Default: true +
+ + +The URL of a Nexus Pro server.+ +-
+
+
- Type: java.lang.String + +
- Required: No + +
- User Property: nexusUrl +
+ + +Whether or not the configured proxy is used to connect to Nexus.+ +-
+
+
- Type: boolean + +
- Required: No + +
- User Property: nexusUsesProxy + +
- Default: true +
+ + +Whether or not the .NET Nuspec Analyzer is enabled.+ +-
+
+
- Type: boolean + +
- Required: No + +
- User Property: nuspecAnalyzerEnabled + +
- Default: true +
+ + +The output directory. This generally maps to "target".+ +-
+
+
- Type: java.io.File + +
- Required: Yes + +
- Default: ${project.build.directory} +
+ + +The path to mono for .NET Assembly analysis on non-windows systems.+ +-
+
+
- Type: java.lang.String + +
- Required: No + +
- User Property: pathToMono +
+ + +Deprecated. Please use mavenSettings instead+ +The Proxy URL.+ +-
+
+
- Type: java.lang.String + +
- Required: No + +
- User Property: proxyUrl +
+ + +Specifies the destination directory for the generated +Dependency-Check report. This generally maps to "target/site".+ +-
+
+
- Type: java.io.File + +
- Required: Yes + +
- User Property: project.reporting.outputDirectory +
+ + +Flag indicating whether or not to show a summary in the output.+ +-
+
+
- Type: boolean + +
- Required: No + +
- User Property: showSummary + +
- Default: true +
+ + +Skip Analysis for Provided Scope Dependencies.+ +-
+
+
- Type: boolean + +
- Required: No + +
- User Property: skipProvidedScope + +
- Default: false +
+ + +Skip Analysis for Runtime Scope Dependencies.+ +-
+
+
- Type: boolean + +
- Required: No + +
- User Property: skipRuntimeScope + +
- Default: false +
+ + +Skip Analysis for Test Scope Dependencies.+ +-
+
+
- Type: boolean + +
- Required: No + +
- User Property: skipTestScope + +
- Default: true +
+ + +The path to the suppression file.+ +-
+
+
- Type: java.lang.String + +
- Required: No + +
- User Property: suppressionFile +
+ + +A comma-separated list of file extensions to add to analysis next +to jar, zip, ....+ +-
+
+
- Type: java.lang.String + +
- Required: No + +
- User Property: zipExtensions +
+ + + + diff --git a/dependency-check-maven/usage.html b/dependency-check-maven/usage.html index 18b418ddb..a20e2a9a5 100644 --- a/dependency-check-maven/usage.html +++ b/dependency-check-maven/usage.html @@ -1,13 +1,13 @@ - +dependency-check-maven - Usage @@ -19,7 +19,7 @@ - + @@ -42,7 +42,7 @@-dependency-check-maven
+
@@ -54,7 +54,7 @@- - + /
@@ -67,9 +67,9 @@ -- | Last Published: 2015-03-06
+- | Last Published: 2015-04-12
- - Version: 1.2.9 + Version: 1.2.10
@@ -171,7 +171,7 @@ <plugin> <groupId>org.owasp</groupId> <artifactId>dependency-check-maven</artifactId> - <version>1.2.9</version> + <version>1.2.10</version> <executions> <execution> <goals> @@ -202,7 +202,7 @@ <plugin> <groupId>org.owasp</groupId> <artifactId>dependency-check-maven</artifactId> - <version>1.2.9</version> + <version>1.2.10</version> <reportSets> <reportSet> <reports> @@ -233,7 +233,7 @@ <plugin> <groupId>org.owasp</groupId> <artifactId>dependency-check-maven</artifactId> - <version>1.2.9</version> + <version>1.2.10</version> <configuration> <failBuildOnCVSS>8</failBuildOnCVSS> </configuration> @@ -266,7 +266,7 @@ <plugin> <groupId>org.owasp</groupId> <artifactId>dependency-check-maven</artifactId> - <version>1.2.9</version> + <version>1.2.10</version> <configuration> <skipProvidedScope>true</skipProvidedScope> <skipRuntimeScope>true</skipRuntimeScope> @@ -300,7 +300,7 @@ <plugin> <groupId>org.owasp</groupId> <artifactId>dependency-check-maven</artifactId> - <version>1.2.9</version> + <version>1.2.10</version> <configuration> <cveUrl12Modified>http://internal-mirror.mycorp.com/downloads/nist/nvdcve-modified.xml</cveUrl12Modified> <cveUrl20Modified>http://internal-mirror.mycorp.com/downloads/nist/nvdcve-2.0-modified.xml</cveUrl20Modified> @@ -321,6 +321,36 @@ </build> ... </project> ++diff --git a/dependency-check-maven/xref-test/index.html b/dependency-check-maven/xref-test/index.html index ded03351c..224648264 100644 --- a/dependency-check-maven/xref-test/index.html +++ b/dependency-check-maven/xref-test/index.html @@ -4,7 +4,7 @@ -Example 6:
+Update the local cache of the NVD data from NIST without analyzing the dependencies.
+ ++<project> + ... + <build> + ... + <plugins> + ... + <plugin> + <groupId>org.owasp</groupId> + <artifactId>dependency-check-maven</artifactId> + <version>1.2.10</version> + <executions> + <execution> + <goals> + <goal>update-only</goal> + </goals> + </execution> + </executions> + </plugin> + ... + </plugins> + ... + </build> + ... +</project>
Dependency-Check Maven Plugin 1.2.9 Reference +Dependency-Check Maven Plugin 1.2.10 Reference
cleanup
public void cleanup()-
Releases resources used by the analyzers by calling close() on each
- analyzer.
+Releases resources used by the analyzers by calling close() on each analyzer.
resetFileTypeAnalyzers
public void resetFileTypeAnalyzers()-
Resets the file type analyzers so that they can be re-used to scan
- additional directories. Without the reset the analyzer might be disabled
- because the first scan/analyze did not identify any files that could be
- processed by the analyzer.
+Resets the file type analyzers so that they can be re-used to scan additional directories. Without the reset the analyzer
+ might be disabled because the first scan/analyze did not identify any files that could be processed by the analyzer.
diff --git a/dependency-check-maven/apidocs/org/owasp/dependencycheck/maven/HelpMojo.html b/dependency-check-maven/apidocs/org/owasp/dependencycheck/maven/HelpMojo.html
index f7537a64b..66de397da 100644
--- a/dependency-check-maven/apidocs/org/owasp/dependencycheck/maven/HelpMojo.html
+++ b/dependency-check-maven/apidocs/org/owasp/dependencycheck/maven/HelpMojo.html
@@ -2,16 +2,16 @@
-
+
-
diff --git a/dependency-check-maven/apidocs/org/owasp/dependencycheck/maven/package-tree.html b/dependency-check-maven/apidocs/org/owasp/dependencycheck/maven/package-tree.html
index 5e4ccf03c..d9fabfc34 100644
--- a/dependency-check-maven/apidocs/org/owasp/dependencycheck/maven/package-tree.html
+++ b/dependency-check-maven/apidocs/org/owasp/dependencycheck/maven/package-tree.html
@@ -2,16 +2,16 @@
-
+
-org.owasp.dependencycheck.maven Class Hierarchy (Dependency-Check Maven Plugin 1.2.9 API)
-
+org.owasp.dependencycheck.maven Class Hierarchy (Dependency-Check Maven Plugin 1.2.10 API)
+
@@ -76,6 +76,7 @@
Uses of Package org.owasp.dependencycheck.maven (Dependency-Check Maven Plugin 1.2.9 API)
-
+Uses of Package org.owasp.dependencycheck.maven (Dependency-Check Maven Plugin 1.2.10 API)
+
@@ -81,8 +81,8 @@
Engine
-
diff --git a/dependency-check-maven/apidocs/overview-tree.html b/dependency-check-maven/apidocs/overview-tree.html
index 3f688ca2f..206de20f9 100644
--- a/dependency-check-maven/apidocs/overview-tree.html
+++ b/dependency-check-maven/apidocs/overview-tree.html
@@ -2,16 +2,16 @@
-
+
-Class Hierarchy (Dependency-Check Maven Plugin 1.2.9 API)
-
+Class Hierarchy (Dependency-Check Maven Plugin 1.2.10 API)
+
@@ -80,6 +80,7 @@
dependency-check-maven -
dependency-check:check
@@ -20,7 +20,7 @@
-
+
@@ -43,7 +43,7 @@
@@ -55,7 +55,7 @@
dependency-check-maven - Checkstyle Results
@@ -19,7 +19,7 @@
-
+
@@ -42,7 +42,7 @@
@@ -54,7 +54,7 @@
Warnings
Errors
-48
+50
0
0
-0
+1
+
diff --git a/dependency-check-maven/checkstyle.rss b/dependency-check-maven/checkstyle.rss
index 0e043157a..58925fe4f 100644
--- a/dependency-check-maven/checkstyle.rss
+++ b/dependency-check-maven/checkstyle.rss
@@ -25,8 +25,8 @@ under the License.
A modified version of the core engine specifically designed to persist some
- data between multiple executions of a multi-module Maven project.
+A modified version of the core engine specifically designed to persist some data between multiple executions of a multi-module
+ Maven project.
-
dependency-check-maven
+
Full name:
-org.owasp:dependency-check-maven:1.2.9:check
+org.owasp:dependency-check-maven:1.2.10:check
Description:
diff --git a/dependency-check-maven/checkstyle.html b/dependency-check-maven/checkstyle.html index 0421cbc8e..c980896f8 100644 --- a/dependency-check-maven/checkstyle.html +++ b/dependency-check-maven/checkstyle.html @@ -1,13 +1,13 @@ - +
-
dependency-check-maven
+
Details
+
+
+
src/main/java/org/owasp/dependencycheck/maven/UpdateMojo.java
+| Violation | +Message | +Line |
|---|---|---|
|
+Unused import - org.apache.maven.artifact.Artifact. | +23 |
+ 
+ 
+