github-mirrors/DependencyCheck
1
0
Fork 0
mirror of https://github.com/ysoftdevs/DependencyCheck.git synced 2026-02-24 11:25:17 +01:00
Code Issues Packages Projects Releases Wiki Activity

version 1.1.2 of project documentation

Browse Source
This commit is contained in:
Jeremy Long
2014-03-03 19:32:36 -05:00
parent 9f9ed6f1da
commit 9a00756d3f
982 changed files with 42586 additions and 30816 deletions
Download Patch File Download Diff File Expand all files Collapse all files

794
dependency-check-ant/xref/org/owasp/dependencycheck/taskdefs/DependencyCheckTask.html
View File

@@ -510,348 +510,516 @@
<a class="jxr_linenumber" name="L502" href="#L502">502</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> setNexusUrl(String nexusUrl) {
<a class="jxr_linenumber" name="L503" href="#L503">503</a> <strong class="jxr_keyword">this</strong>.nexusUrl = nexusUrl;
<a class="jxr_linenumber" name="L504" href="#L504">504</a> }
<a class="jxr_linenumber" name="L505" href="#L505">505</a>
<a class="jxr_linenumber" name="L506" href="#L506">506</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L507" href="#L507">507</a> <em class="jxr_javadoccomment"> * The database driver name; such as org.h2.Driver.</em>
<a class="jxr_linenumber" name="L508" href="#L508">508</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L509" href="#L509">509</a> <strong class="jxr_keyword">private</strong> String databaseDriverName;
<a class="jxr_linenumber" name="L510" href="#L510">510</a>
<a class="jxr_linenumber" name="L511" href="#L511">511</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L512" href="#L512">512</a> <em class="jxr_javadoccomment"> * Get the value of databaseDriverName.</em>
<a class="jxr_linenumber" name="L513" href="#L513">513</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L514" href="#L514">514</a> <em class="jxr_javadoccomment"> * @return the value of databaseDriverName</em>
<a class="jxr_linenumber" name="L515" href="#L515">515</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L516" href="#L516">516</a> <strong class="jxr_keyword">public</strong> String getDatabaseDriverName() {
<a class="jxr_linenumber" name="L517" href="#L517">517</a> <strong class="jxr_keyword">return</strong> databaseDriverName;
<a class="jxr_linenumber" name="L518" href="#L518">518</a> }
<a class="jxr_linenumber" name="L519" href="#L519">519</a>
<a class="jxr_linenumber" name="L520" href="#L520">520</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L521" href="#L521">521</a> <em class="jxr_javadoccomment"> * Set the value of databaseDriverName.</em>
<a class="jxr_linenumber" name="L522" href="#L522">522</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L523" href="#L523">523</a> <em class="jxr_javadoccomment"> * @param databaseDriverName new value of databaseDriverName</em>
<a class="jxr_linenumber" name="L524" href="#L524">524</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L525" href="#L525">525</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> setDatabaseDriverName(String databaseDriverName) {
<a class="jxr_linenumber" name="L526" href="#L526">526</a> <strong class="jxr_keyword">this</strong>.databaseDriverName = databaseDriverName;
<a class="jxr_linenumber" name="L527" href="#L527">527</a> }
<a class="jxr_linenumber" name="L528" href="#L528">528</a>
<a class="jxr_linenumber" name="L529" href="#L529">529</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L530" href="#L530">530</a> <em class="jxr_javadoccomment"> * The path to the database driver JAR file if it is not on the class path.</em>
<a class="jxr_linenumber" name="L531" href="#L531">531</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L532" href="#L532">532</a> <strong class="jxr_keyword">private</strong> String databaseDriverPath;
<a class="jxr_linenumber" name="L533" href="#L533">533</a>
<a class="jxr_linenumber" name="L534" href="#L534">534</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L535" href="#L535">535</a> <em class="jxr_javadoccomment"> * Get the value of databaseDriverPath.</em>
<a class="jxr_linenumber" name="L536" href="#L536">536</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L537" href="#L537">537</a> <em class="jxr_javadoccomment"> * @return the value of databaseDriverPath</em>
<a class="jxr_linenumber" name="L538" href="#L538">538</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L539" href="#L539">539</a> <strong class="jxr_keyword">public</strong> String getDatabaseDriverPath() {
<a class="jxr_linenumber" name="L540" href="#L540">540</a> <strong class="jxr_keyword">return</strong> databaseDriverPath;
<a class="jxr_linenumber" name="L541" href="#L541">541</a> }
<a class="jxr_linenumber" name="L542" href="#L542">542</a>
<a class="jxr_linenumber" name="L543" href="#L543">543</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L544" href="#L544">544</a> <em class="jxr_javadoccomment"> * Set the value of databaseDriverPath.</em>
<a class="jxr_linenumber" name="L545" href="#L545">545</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L546" href="#L546">546</a> <em class="jxr_javadoccomment"> * @param databaseDriverPath new value of databaseDriverPath</em>
<a class="jxr_linenumber" name="L547" href="#L547">547</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L548" href="#L548">548</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> setDatabaseDriverPath(String databaseDriverPath) {
<a class="jxr_linenumber" name="L549" href="#L549">549</a> <strong class="jxr_keyword">this</strong>.databaseDriverPath = databaseDriverPath;
<a class="jxr_linenumber" name="L550" href="#L550">550</a> }
<a class="jxr_linenumber" name="L505" href="#L505">505</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L506" href="#L506">506</a> <em class="jxr_javadoccomment"> * Whether or not the defined proxy should be used when connecting to Nexus.</em>
<a class="jxr_linenumber" name="L507" href="#L507">507</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L508" href="#L508">508</a> <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">boolean</strong> nexusUsesProxy = <strong class="jxr_keyword">true</strong>;
<a class="jxr_linenumber" name="L509" href="#L509">509</a>
<a class="jxr_linenumber" name="L510" href="#L510">510</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L511" href="#L511">511</a> <em class="jxr_javadoccomment"> * Get the value of nexusUsesProxy.</em>
<a class="jxr_linenumber" name="L512" href="#L512">512</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L513" href="#L513">513</a> <em class="jxr_javadoccomment"> * @return the value of nexusUsesProxy</em>
<a class="jxr_linenumber" name="L514" href="#L514">514</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L515" href="#L515">515</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">boolean</strong> isNexusUsesProxy() {
<a class="jxr_linenumber" name="L516" href="#L516">516</a> <strong class="jxr_keyword">return</strong> nexusUsesProxy;
<a class="jxr_linenumber" name="L517" href="#L517">517</a> }
<a class="jxr_linenumber" name="L518" href="#L518">518</a>
<a class="jxr_linenumber" name="L519" href="#L519">519</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L520" href="#L520">520</a> <em class="jxr_javadoccomment"> * Set the value of nexusUsesProxy.</em>
<a class="jxr_linenumber" name="L521" href="#L521">521</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L522" href="#L522">522</a> <em class="jxr_javadoccomment"> * @param nexusUsesProxy new value of nexusUsesProxy</em>
<a class="jxr_linenumber" name="L523" href="#L523">523</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L524" href="#L524">524</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> setNexusUsesProxy(<strong class="jxr_keyword">boolean</strong> nexusUsesProxy) {
<a class="jxr_linenumber" name="L525" href="#L525">525</a> <strong class="jxr_keyword">this</strong>.nexusUsesProxy = nexusUsesProxy;
<a class="jxr_linenumber" name="L526" href="#L526">526</a> }
<a class="jxr_linenumber" name="L527" href="#L527">527</a>
<a class="jxr_linenumber" name="L528" href="#L528">528</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L529" href="#L529">529</a> <em class="jxr_javadoccomment"> * The database driver name; such as org.h2.Driver.</em>
<a class="jxr_linenumber" name="L530" href="#L530">530</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L531" href="#L531">531</a> <strong class="jxr_keyword">private</strong> String databaseDriverName;
<a class="jxr_linenumber" name="L532" href="#L532">532</a>
<a class="jxr_linenumber" name="L533" href="#L533">533</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L534" href="#L534">534</a> <em class="jxr_javadoccomment"> * Get the value of databaseDriverName.</em>
<a class="jxr_linenumber" name="L535" href="#L535">535</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L536" href="#L536">536</a> <em class="jxr_javadoccomment"> * @return the value of databaseDriverName</em>
<a class="jxr_linenumber" name="L537" href="#L537">537</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L538" href="#L538">538</a> <strong class="jxr_keyword">public</strong> String getDatabaseDriverName() {
<a class="jxr_linenumber" name="L539" href="#L539">539</a> <strong class="jxr_keyword">return</strong> databaseDriverName;
<a class="jxr_linenumber" name="L540" href="#L540">540</a> }
<a class="jxr_linenumber" name="L541" href="#L541">541</a>
<a class="jxr_linenumber" name="L542" href="#L542">542</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L543" href="#L543">543</a> <em class="jxr_javadoccomment"> * Set the value of databaseDriverName.</em>
<a class="jxr_linenumber" name="L544" href="#L544">544</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L545" href="#L545">545</a> <em class="jxr_javadoccomment"> * @param databaseDriverName new value of databaseDriverName</em>
<a class="jxr_linenumber" name="L546" href="#L546">546</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L547" href="#L547">547</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> setDatabaseDriverName(String databaseDriverName) {
<a class="jxr_linenumber" name="L548" href="#L548">548</a> <strong class="jxr_keyword">this</strong>.databaseDriverName = databaseDriverName;
<a class="jxr_linenumber" name="L549" href="#L549">549</a> }
<a class="jxr_linenumber" name="L550" href="#L550">550</a>
<a class="jxr_linenumber" name="L551" href="#L551">551</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L552" href="#L552">552</a> <em class="jxr_javadoccomment"> * The database connection string.</em>
<a class="jxr_linenumber" name="L552" href="#L552">552</a> <em class="jxr_javadoccomment"> * The path to the database driver JAR file if it is not on the class path.</em>
<a class="jxr_linenumber" name="L553" href="#L553">553</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L554" href="#L554">554</a> <strong class="jxr_keyword">private</strong> String connectionString;
<a class="jxr_linenumber" name="L554" href="#L554">554</a> <strong class="jxr_keyword">private</strong> String databaseDriverPath;
<a class="jxr_linenumber" name="L555" href="#L555">555</a>
<a class="jxr_linenumber" name="L556" href="#L556">556</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L557" href="#L557">557</a> <em class="jxr_javadoccomment"> * Get the value of connectionString.</em>
<a class="jxr_linenumber" name="L557" href="#L557">557</a> <em class="jxr_javadoccomment"> * Get the value of databaseDriverPath.</em>
<a class="jxr_linenumber" name="L558" href="#L558">558</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L559" href="#L559">559</a> <em class="jxr_javadoccomment"> * @return the value of connectionString</em>
<a class="jxr_linenumber" name="L559" href="#L559">559</a> <em class="jxr_javadoccomment"> * @return the value of databaseDriverPath</em>
<a class="jxr_linenumber" name="L560" href="#L560">560</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L561" href="#L561">561</a> <strong class="jxr_keyword">public</strong> String getConnectionString() {
<a class="jxr_linenumber" name="L562" href="#L562">562</a> <strong class="jxr_keyword">return</strong> connectionString;
<a class="jxr_linenumber" name="L561" href="#L561">561</a> <strong class="jxr_keyword">public</strong> String getDatabaseDriverPath() {
<a class="jxr_linenumber" name="L562" href="#L562">562</a> <strong class="jxr_keyword">return</strong> databaseDriverPath;
<a class="jxr_linenumber" name="L563" href="#L563">563</a> }
<a class="jxr_linenumber" name="L564" href="#L564">564</a>
<a class="jxr_linenumber" name="L565" href="#L565">565</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L566" href="#L566">566</a> <em class="jxr_javadoccomment"> * Set the value of connectionString.</em>
<a class="jxr_linenumber" name="L566" href="#L566">566</a> <em class="jxr_javadoccomment"> * Set the value of databaseDriverPath.</em>
<a class="jxr_linenumber" name="L567" href="#L567">567</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L568" href="#L568">568</a> <em class="jxr_javadoccomment"> * @param connectionString new value of connectionString</em>
<a class="jxr_linenumber" name="L568" href="#L568">568</a> <em class="jxr_javadoccomment"> * @param databaseDriverPath new value of databaseDriverPath</em>
<a class="jxr_linenumber" name="L569" href="#L569">569</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L570" href="#L570">570</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> setConnectionString(String connectionString) {
<a class="jxr_linenumber" name="L571" href="#L571">571</a> <strong class="jxr_keyword">this</strong>.connectionString = connectionString;
<a class="jxr_linenumber" name="L570" href="#L570">570</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> setDatabaseDriverPath(String databaseDriverPath) {
<a class="jxr_linenumber" name="L571" href="#L571">571</a> <strong class="jxr_keyword">this</strong>.databaseDriverPath = databaseDriverPath;
<a class="jxr_linenumber" name="L572" href="#L572">572</a> }
<a class="jxr_linenumber" name="L573" href="#L573">573</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L574" href="#L574">574</a> <em class="jxr_javadoccomment"> * The user name for connecting to the database.</em>
<a class="jxr_linenumber" name="L574" href="#L574">574</a> <em class="jxr_javadoccomment"> * The database connection string.</em>
<a class="jxr_linenumber" name="L575" href="#L575">575</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L576" href="#L576">576</a> <strong class="jxr_keyword">private</strong> String databaseUser;
<a class="jxr_linenumber" name="L576" href="#L576">576</a> <strong class="jxr_keyword">private</strong> String connectionString;
<a class="jxr_linenumber" name="L577" href="#L577">577</a>
<a class="jxr_linenumber" name="L578" href="#L578">578</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L579" href="#L579">579</a> <em class="jxr_javadoccomment"> * Get the value of databaseUser.</em>
<a class="jxr_linenumber" name="L579" href="#L579">579</a> <em class="jxr_javadoccomment"> * Get the value of connectionString.</em>
<a class="jxr_linenumber" name="L580" href="#L580">580</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L581" href="#L581">581</a> <em class="jxr_javadoccomment"> * @return the value of databaseUser</em>
<a class="jxr_linenumber" name="L581" href="#L581">581</a> <em class="jxr_javadoccomment"> * @return the value of connectionString</em>
<a class="jxr_linenumber" name="L582" href="#L582">582</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L583" href="#L583">583</a> <strong class="jxr_keyword">public</strong> String getDatabaseUser() {
<a class="jxr_linenumber" name="L584" href="#L584">584</a> <strong class="jxr_keyword">return</strong> databaseUser;
<a class="jxr_linenumber" name="L583" href="#L583">583</a> <strong class="jxr_keyword">public</strong> String getConnectionString() {
<a class="jxr_linenumber" name="L584" href="#L584">584</a> <strong class="jxr_keyword">return</strong> connectionString;
<a class="jxr_linenumber" name="L585" href="#L585">585</a> }
<a class="jxr_linenumber" name="L586" href="#L586">586</a>
<a class="jxr_linenumber" name="L587" href="#L587">587</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L588" href="#L588">588</a> <em class="jxr_javadoccomment"> * Set the value of databaseUser.</em>
<a class="jxr_linenumber" name="L588" href="#L588">588</a> <em class="jxr_javadoccomment"> * Set the value of connectionString.</em>
<a class="jxr_linenumber" name="L589" href="#L589">589</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L590" href="#L590">590</a> <em class="jxr_javadoccomment"> * @param databaseUser new value of databaseUser</em>
<a class="jxr_linenumber" name="L590" href="#L590">590</a> <em class="jxr_javadoccomment"> * @param connectionString new value of connectionString</em>
<a class="jxr_linenumber" name="L591" href="#L591">591</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L592" href="#L592">592</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> setDatabaseUser(String databaseUser) {
<a class="jxr_linenumber" name="L593" href="#L593">593</a> <strong class="jxr_keyword">this</strong>.databaseUser = databaseUser;
<a class="jxr_linenumber" name="L592" href="#L592">592</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> setConnectionString(String connectionString) {
<a class="jxr_linenumber" name="L593" href="#L593">593</a> <strong class="jxr_keyword">this</strong>.connectionString = connectionString;
<a class="jxr_linenumber" name="L594" href="#L594">594</a> }
<a class="jxr_linenumber" name="L595" href="#L595">595</a>
<a class="jxr_linenumber" name="L596" href="#L596">596</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L597" href="#L597">597</a> <em class="jxr_javadoccomment"> * The password to use when connecting to the database.</em>
<a class="jxr_linenumber" name="L598" href="#L598">598</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L599" href="#L599">599</a> <strong class="jxr_keyword">private</strong> String databasePassword;
<a class="jxr_linenumber" name="L600" href="#L600">600</a>
<a class="jxr_linenumber" name="L601" href="#L601">601</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L602" href="#L602">602</a> <em class="jxr_javadoccomment"> * Get the value of databasePassword.</em>
<a class="jxr_linenumber" name="L603" href="#L603">603</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L604" href="#L604">604</a> <em class="jxr_javadoccomment"> * @return the value of databasePassword</em>
<a class="jxr_linenumber" name="L605" href="#L605">605</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L606" href="#L606">606</a> <strong class="jxr_keyword">public</strong> String getDatabasePassword() {
<a class="jxr_linenumber" name="L607" href="#L607">607</a> <strong class="jxr_keyword">return</strong> databasePassword;
<a class="jxr_linenumber" name="L608" href="#L608">608</a> }
<a class="jxr_linenumber" name="L609" href="#L609">609</a>
<a class="jxr_linenumber" name="L610" href="#L610">610</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L611" href="#L611">611</a> <em class="jxr_javadoccomment"> * Set the value of databasePassword.</em>
<a class="jxr_linenumber" name="L612" href="#L612">612</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L613" href="#L613">613</a> <em class="jxr_javadoccomment"> * @param databasePassword new value of databasePassword</em>
<a class="jxr_linenumber" name="L614" href="#L614">614</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L615" href="#L615">615</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> setDatabasePassword(String databasePassword) {
<a class="jxr_linenumber" name="L616" href="#L616">616</a> <strong class="jxr_keyword">this</strong>.databasePassword = databasePassword;
<a class="jxr_linenumber" name="L617" href="#L617">617</a> }
<a class="jxr_linenumber" name="L618" href="#L618">618</a>
<a class="jxr_linenumber" name="L619" href="#L619">619</a> @Override
<a class="jxr_linenumber" name="L620" href="#L620">620</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> execute() <strong class="jxr_keyword">throws</strong> BuildException {
<a class="jxr_linenumber" name="L621" href="#L621">621</a> <strong class="jxr_keyword">final</strong> InputStream in = DependencyCheckTask.<strong class="jxr_keyword">class</strong>.getClassLoader().getResourceAsStream(LOG_PROPERTIES_FILE);
<a class="jxr_linenumber" name="L622" href="#L622">622</a> LogUtils.prepareLogger(in, logFile);
<a class="jxr_linenumber" name="L623" href="#L623">623</a>
<a class="jxr_linenumber" name="L624" href="#L624">624</a> dealWithReferences();
<a class="jxr_linenumber" name="L625" href="#L625">625</a> validateConfiguration();
<a class="jxr_linenumber" name="L626" href="#L626">626</a> populateSettings();
<a class="jxr_linenumber" name="L627" href="#L627">627</a>
<a class="jxr_linenumber" name="L628" href="#L628">628</a> <strong class="jxr_keyword">final</strong> Engine engine = <strong class="jxr_keyword">new</strong> Engine();
<a class="jxr_linenumber" name="L629" href="#L629">629</a> <strong class="jxr_keyword">for</strong> (Resource resource : path) {
<a class="jxr_linenumber" name="L630" href="#L630">630</a> <strong class="jxr_keyword">final</strong> FileProvider provider = resource.as(FileProvider.<strong class="jxr_keyword">class</strong>);
<a class="jxr_linenumber" name="L631" href="#L631">631</a> <strong class="jxr_keyword">if</strong> (provider != <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="L632" href="#L632">632</a> <strong class="jxr_keyword">final</strong> File file = provider.getFile();
<a class="jxr_linenumber" name="L633" href="#L633">633</a> <strong class="jxr_keyword">if</strong> (file != <strong class="jxr_keyword">null</strong> &amp;&amp; file.exists()) {
<a class="jxr_linenumber" name="L634" href="#L634">634</a> engine.scan(file);
<a class="jxr_linenumber" name="L635" href="#L635">635</a> }
<a class="jxr_linenumber" name="L636" href="#L636">636</a> }
<a class="jxr_linenumber" name="L637" href="#L637">637</a> }
<a class="jxr_linenumber" name="L638" href="#L638">638</a> <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="L639" href="#L639">639</a> engine.analyzeDependencies();
<a class="jxr_linenumber" name="L640" href="#L640">640</a> DatabaseProperties prop = <strong class="jxr_keyword">null</strong>;
<a class="jxr_linenumber" name="L641" href="#L641">641</a> CveDB cve = <strong class="jxr_keyword">null</strong>;
<a class="jxr_linenumber" name="L642" href="#L642">642</a> <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="L643" href="#L643">643</a> cve = <strong class="jxr_keyword">new</strong> CveDB();
<a class="jxr_linenumber" name="L644" href="#L644">644</a> cve.open();
<a class="jxr_linenumber" name="L645" href="#L645">645</a> prop = cve.getDatabaseProperties();
<a class="jxr_linenumber" name="L646" href="#L646">646</a> } <strong class="jxr_keyword">catch</strong> (DatabaseException ex) {
<a class="jxr_linenumber" name="L647" href="#L647">647</a> Logger.getLogger(DependencyCheckTask.<strong class="jxr_keyword">class</strong>.getName()).log(Level.FINE, <span class="jxr_string">"Unable to retrieve DB Properties"</span>, ex);
<a class="jxr_linenumber" name="L648" href="#L648">648</a> } <strong class="jxr_keyword">finally</strong> {
<a class="jxr_linenumber" name="L649" href="#L649">649</a> <strong class="jxr_keyword">if</strong> (cve != <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="L650" href="#L650">650</a> cve.close();
<a class="jxr_linenumber" name="L651" href="#L651">651</a> }
<a class="jxr_linenumber" name="L652" href="#L652">652</a> }
<a class="jxr_linenumber" name="L653" href="#L653">653</a> <strong class="jxr_keyword">final</strong> ReportGenerator reporter = <strong class="jxr_keyword">new</strong> ReportGenerator(applicationName, engine.getDependencies(), engine.getAnalyzers(), prop);
<a class="jxr_linenumber" name="L654" href="#L654">654</a> reporter.generateReports(reportOutputDirectory, reportFormat);
<a class="jxr_linenumber" name="L595" href="#L595">595</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L596" href="#L596">596</a> <em class="jxr_javadoccomment"> * The user name for connecting to the database.</em>
<a class="jxr_linenumber" name="L597" href="#L597">597</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L598" href="#L598">598</a> <strong class="jxr_keyword">private</strong> String databaseUser;
<a class="jxr_linenumber" name="L599" href="#L599">599</a>
<a class="jxr_linenumber" name="L600" href="#L600">600</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L601" href="#L601">601</a> <em class="jxr_javadoccomment"> * Get the value of databaseUser.</em>
<a class="jxr_linenumber" name="L602" href="#L602">602</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L603" href="#L603">603</a> <em class="jxr_javadoccomment"> * @return the value of databaseUser</em>
<a class="jxr_linenumber" name="L604" href="#L604">604</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L605" href="#L605">605</a> <strong class="jxr_keyword">public</strong> String getDatabaseUser() {
<a class="jxr_linenumber" name="L606" href="#L606">606</a> <strong class="jxr_keyword">return</strong> databaseUser;
<a class="jxr_linenumber" name="L607" href="#L607">607</a> }
<a class="jxr_linenumber" name="L608" href="#L608">608</a>
<a class="jxr_linenumber" name="L609" href="#L609">609</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L610" href="#L610">610</a> <em class="jxr_javadoccomment"> * Set the value of databaseUser.</em>
<a class="jxr_linenumber" name="L611" href="#L611">611</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L612" href="#L612">612</a> <em class="jxr_javadoccomment"> * @param databaseUser new value of databaseUser</em>
<a class="jxr_linenumber" name="L613" href="#L613">613</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L614" href="#L614">614</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> setDatabaseUser(String databaseUser) {
<a class="jxr_linenumber" name="L615" href="#L615">615</a> <strong class="jxr_keyword">this</strong>.databaseUser = databaseUser;
<a class="jxr_linenumber" name="L616" href="#L616">616</a> }
<a class="jxr_linenumber" name="L617" href="#L617">617</a>
<a class="jxr_linenumber" name="L618" href="#L618">618</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L619" href="#L619">619</a> <em class="jxr_javadoccomment"> * The password to use when connecting to the database.</em>
<a class="jxr_linenumber" name="L620" href="#L620">620</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L621" href="#L621">621</a> <strong class="jxr_keyword">private</strong> String databasePassword;
<a class="jxr_linenumber" name="L622" href="#L622">622</a>
<a class="jxr_linenumber" name="L623" href="#L623">623</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L624" href="#L624">624</a> <em class="jxr_javadoccomment"> * Get the value of databasePassword.</em>
<a class="jxr_linenumber" name="L625" href="#L625">625</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L626" href="#L626">626</a> <em class="jxr_javadoccomment"> * @return the value of databasePassword</em>
<a class="jxr_linenumber" name="L627" href="#L627">627</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L628" href="#L628">628</a> <strong class="jxr_keyword">public</strong> String getDatabasePassword() {
<a class="jxr_linenumber" name="L629" href="#L629">629</a> <strong class="jxr_keyword">return</strong> databasePassword;
<a class="jxr_linenumber" name="L630" href="#L630">630</a> }
<a class="jxr_linenumber" name="L631" href="#L631">631</a>
<a class="jxr_linenumber" name="L632" href="#L632">632</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L633" href="#L633">633</a> <em class="jxr_javadoccomment"> * Set the value of databasePassword.</em>
<a class="jxr_linenumber" name="L634" href="#L634">634</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L635" href="#L635">635</a> <em class="jxr_javadoccomment"> * @param databasePassword new value of databasePassword</em>
<a class="jxr_linenumber" name="L636" href="#L636">636</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L637" href="#L637">637</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> setDatabasePassword(String databasePassword) {
<a class="jxr_linenumber" name="L638" href="#L638">638</a> <strong class="jxr_keyword">this</strong>.databasePassword = databasePassword;
<a class="jxr_linenumber" name="L639" href="#L639">639</a> }
<a class="jxr_linenumber" name="L640" href="#L640">640</a>
<a class="jxr_linenumber" name="L641" href="#L641">641</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L642" href="#L642">642</a> <em class="jxr_javadoccomment"> * Additional ZIP File extensions to add analyze. This should be a comma-separated list of file extensions to treat</em>
<a class="jxr_linenumber" name="L643" href="#L643">643</a> <em class="jxr_javadoccomment"> * like ZIP files.</em>
<a class="jxr_linenumber" name="L644" href="#L644">644</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L645" href="#L645">645</a> <strong class="jxr_keyword">private</strong> String zipExtensions;
<a class="jxr_linenumber" name="L646" href="#L646">646</a>
<a class="jxr_linenumber" name="L647" href="#L647">647</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L648" href="#L648">648</a> <em class="jxr_javadoccomment"> * Get the value of zipExtensions.</em>
<a class="jxr_linenumber" name="L649" href="#L649">649</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L650" href="#L650">650</a> <em class="jxr_javadoccomment"> * @return the value of zipExtensions</em>
<a class="jxr_linenumber" name="L651" href="#L651">651</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L652" href="#L652">652</a> <strong class="jxr_keyword">public</strong> String getZipExtensions() {
<a class="jxr_linenumber" name="L653" href="#L653">653</a> <strong class="jxr_keyword">return</strong> zipExtensions;
<a class="jxr_linenumber" name="L654" href="#L654">654</a> }
<a class="jxr_linenumber" name="L655" href="#L655">655</a>
<a class="jxr_linenumber" name="L656" href="#L656">656</a> <strong class="jxr_keyword">if</strong> (<strong class="jxr_keyword">this</strong>.failBuildOnCVSS &lt;= 10) {
<a class="jxr_linenumber" name="L657" href="#L657">657</a> checkForFailure(engine.getDependencies());
<a class="jxr_linenumber" name="L658" href="#L658">658</a> }
<a class="jxr_linenumber" name="L659" href="#L659">659</a> <strong class="jxr_keyword">if</strong> (<strong class="jxr_keyword">this</strong>.showSummary) {
<a class="jxr_linenumber" name="L660" href="#L660">660</a> showSummary(engine.getDependencies());
<a class="jxr_linenumber" name="L661" href="#L661">661</a> }
<a class="jxr_linenumber" name="L662" href="#L662">662</a> } <strong class="jxr_keyword">catch</strong> (IOException ex) {
<a class="jxr_linenumber" name="L663" href="#L663">663</a> Logger.getLogger(DependencyCheckTask.<strong class="jxr_keyword">class</strong>.getName()).log(Level.FINE, <span class="jxr_string">"Unable to generate dependency-check report"</span>, ex);
<a class="jxr_linenumber" name="L664" href="#L664">664</a> <strong class="jxr_keyword">throw</strong> <strong class="jxr_keyword">new</strong> BuildException(<span class="jxr_string">"Unable to generate dependency-check report"</span>, ex);
<a class="jxr_linenumber" name="L665" href="#L665">665</a> } <strong class="jxr_keyword">catch</strong> (Exception ex) {
<a class="jxr_linenumber" name="L666" href="#L666">666</a> Logger.getLogger(DependencyCheckTask.<strong class="jxr_keyword">class</strong>.getName()).log(Level.FINE, <span class="jxr_string">"An exception occurred; unable to continue task"</span>, ex);
<a class="jxr_linenumber" name="L667" href="#L667">667</a> <strong class="jxr_keyword">throw</strong> <strong class="jxr_keyword">new</strong> BuildException(<span class="jxr_string">"An exception occurred; unable to continue task"</span>, ex);
<a class="jxr_linenumber" name="L668" href="#L668">668</a> }
<a class="jxr_linenumber" name="L669" href="#L669">669</a> }
<a class="jxr_linenumber" name="L670" href="#L670">670</a>
<a class="jxr_linenumber" name="L671" href="#L671">671</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L672" href="#L672">672</a> <em class="jxr_javadoccomment"> * Validate the configuration to ensure the parameters have been properly configured/initialized.</em>
<a class="jxr_linenumber" name="L673" href="#L673">673</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L674" href="#L674">674</a> <em class="jxr_javadoccomment"> * @throws BuildException if the task was not configured correctly.</em>
<a class="jxr_linenumber" name="L675" href="#L675">675</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L676" href="#L676">676</a> <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">void</strong> validateConfiguration() <strong class="jxr_keyword">throws</strong> BuildException {
<a class="jxr_linenumber" name="L677" href="#L677">677</a> <strong class="jxr_keyword">if</strong> (path == <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="L678" href="#L678">678</a> <strong class="jxr_keyword">throw</strong> <strong class="jxr_keyword">new</strong> BuildException(<span class="jxr_string">"No project dependencies have been defined to analyze."</span>);
<a class="jxr_linenumber" name="L679" href="#L679">679</a> }
<a class="jxr_linenumber" name="L680" href="#L680">680</a> <strong class="jxr_keyword">if</strong> (failBuildOnCVSS &lt; 0 || failBuildOnCVSS &gt; 11) {
<a class="jxr_linenumber" name="L681" href="#L681">681</a> <strong class="jxr_keyword">throw</strong> <strong class="jxr_keyword">new</strong> BuildException(<span class="jxr_string">"Invalid configuration, failBuildOnCVSS must be between 0 and 11."</span>);
<a class="jxr_linenumber" name="L682" href="#L682">682</a> }
<a class="jxr_linenumber" name="L683" href="#L683">683</a> }
<a class="jxr_linenumber" name="L684" href="#L684">684</a>
<a class="jxr_linenumber" name="L685" href="#L685">685</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L686" href="#L686">686</a> <em class="jxr_javadoccomment"> * Takes the properties supplied and updates the dependency-check settings. Additionally, this sets the system</em>
<a class="jxr_linenumber" name="L687" href="#L687">687</a> <em class="jxr_javadoccomment"> * properties required to change the proxy url, port, and connection timeout.</em>
<a class="jxr_linenumber" name="L688" href="#L688">688</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L689" href="#L689">689</a> <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">void</strong> populateSettings() {
<a class="jxr_linenumber" name="L690" href="#L690">690</a> InputStream taskProperties = <strong class="jxr_keyword">null</strong>;
<a class="jxr_linenumber" name="L691" href="#L691">691</a> <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="L692" href="#L692">692</a> taskProperties = <strong class="jxr_keyword">this</strong>.getClass().getClassLoader().getResourceAsStream(PROPERTIES_FILE);
<a class="jxr_linenumber" name="L693" href="#L693">693</a> Settings.mergeProperties(taskProperties);
<a class="jxr_linenumber" name="L694" href="#L694">694</a> } <strong class="jxr_keyword">catch</strong> (IOException ex) {
<a class="jxr_linenumber" name="L695" href="#L695">695</a> Logger.getLogger(DependencyCheckTask.<strong class="jxr_keyword">class</strong>.getName()).log(Level.WARNING, <span class="jxr_string">"Unable to load the dependency-check ant task.properties file."</span>);
<a class="jxr_linenumber" name="L696" href="#L696">696</a> Logger.getLogger(DependencyCheckTask.<strong class="jxr_keyword">class</strong>.getName()).log(Level.FINE, <strong class="jxr_keyword">null</strong>, ex);
<a class="jxr_linenumber" name="L697" href="#L697">697</a> } <strong class="jxr_keyword">finally</strong> {
<a class="jxr_linenumber" name="L698" href="#L698">698</a> <strong class="jxr_keyword">if</strong> (taskProperties != <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="L699" href="#L699">699</a> <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="L700" href="#L700">700</a> taskProperties.close();
<a class="jxr_linenumber" name="L701" href="#L701">701</a> } <strong class="jxr_keyword">catch</strong> (IOException ex) {
<a class="jxr_linenumber" name="L702" href="#L702">702</a> Logger.getLogger(DependencyCheckTask.<strong class="jxr_keyword">class</strong>.getName()).log(Level.FINEST, <strong class="jxr_keyword">null</strong>, ex);
<a class="jxr_linenumber" name="L703" href="#L703">703</a> }
<a class="jxr_linenumber" name="L704" href="#L704">704</a> }
<a class="jxr_linenumber" name="L705" href="#L705">705</a> }
<a class="jxr_linenumber" name="L706" href="#L706">706</a> <strong class="jxr_keyword">if</strong> (dataDirectory != <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="L707" href="#L707">707</a> Settings.setString(Settings.KEYS.DATA_DIRECTORY, dataDirectory);
<a class="jxr_linenumber" name="L708" href="#L708">708</a> } <strong class="jxr_keyword">else</strong> {
<a class="jxr_linenumber" name="L709" href="#L709">709</a> <strong class="jxr_keyword">final</strong> File jarPath = <strong class="jxr_keyword">new</strong> File(DependencyCheckTask.<strong class="jxr_keyword">class</strong>.getProtectionDomain().getCodeSource().getLocation().getPath());
<a class="jxr_linenumber" name="L710" href="#L710">710</a> <strong class="jxr_keyword">final</strong> File base = jarPath.getParentFile();
<a class="jxr_linenumber" name="L711" href="#L711">711</a> <strong class="jxr_keyword">final</strong> String sub = Settings.getString(Settings.KEYS.DATA_DIRECTORY);
<a class="jxr_linenumber" name="L712" href="#L712">712</a> <strong class="jxr_keyword">final</strong> File dataDir = <strong class="jxr_keyword">new</strong> File(base, sub);
<a class="jxr_linenumber" name="L713" href="#L713">713</a> Settings.setString(Settings.KEYS.DATA_DIRECTORY, dataDir.getAbsolutePath());
<a class="jxr_linenumber" name="L714" href="#L714">714</a> }
<a class="jxr_linenumber" name="L656" href="#L656">656</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L657" href="#L657">657</a> <em class="jxr_javadoccomment"> * Set the value of zipExtensions.</em>
<a class="jxr_linenumber" name="L658" href="#L658">658</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L659" href="#L659">659</a> <em class="jxr_javadoccomment"> * @param zipExtensions new value of zipExtensions</em>
<a class="jxr_linenumber" name="L660" href="#L660">660</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L661" href="#L661">661</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> setZipExtensions(String zipExtensions) {
<a class="jxr_linenumber" name="L662" href="#L662">662</a> <strong class="jxr_keyword">this</strong>.zipExtensions = zipExtensions;
<a class="jxr_linenumber" name="L663" href="#L663">663</a> }
<a class="jxr_linenumber" name="L664" href="#L664">664</a>
<a class="jxr_linenumber" name="L665" href="#L665">665</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L666" href="#L666">666</a> <em class="jxr_javadoccomment"> * The url for the modified NVD CVE (1.2 schema).</em>
<a class="jxr_linenumber" name="L667" href="#L667">667</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L668" href="#L668">668</a> <strong class="jxr_keyword">private</strong> String cveUrl12Modified;
<a class="jxr_linenumber" name="L669" href="#L669">669</a>
<a class="jxr_linenumber" name="L670" href="#L670">670</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L671" href="#L671">671</a> <em class="jxr_javadoccomment"> * Get the value of cveUrl12Modified.</em>
<a class="jxr_linenumber" name="L672" href="#L672">672</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L673" href="#L673">673</a> <em class="jxr_javadoccomment"> * @return the value of cveUrl12Modified</em>
<a class="jxr_linenumber" name="L674" href="#L674">674</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L675" href="#L675">675</a> <strong class="jxr_keyword">public</strong> String getCveUrl12Modified() {
<a class="jxr_linenumber" name="L676" href="#L676">676</a> <strong class="jxr_keyword">return</strong> cveUrl12Modified;
<a class="jxr_linenumber" name="L677" href="#L677">677</a> }
<a class="jxr_linenumber" name="L678" href="#L678">678</a>
<a class="jxr_linenumber" name="L679" href="#L679">679</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L680" href="#L680">680</a> <em class="jxr_javadoccomment"> * Set the value of cveUrl12Modified.</em>
<a class="jxr_linenumber" name="L681" href="#L681">681</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L682" href="#L682">682</a> <em class="jxr_javadoccomment"> * @param cveUrl12Modified new value of cveUrl12Modified</em>
<a class="jxr_linenumber" name="L683" href="#L683">683</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L684" href="#L684">684</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> setCveUrl12Modified(String cveUrl12Modified) {
<a class="jxr_linenumber" name="L685" href="#L685">685</a> <strong class="jxr_keyword">this</strong>.cveUrl12Modified = cveUrl12Modified;
<a class="jxr_linenumber" name="L686" href="#L686">686</a> }
<a class="jxr_linenumber" name="L687" href="#L687">687</a>
<a class="jxr_linenumber" name="L688" href="#L688">688</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L689" href="#L689">689</a> <em class="jxr_javadoccomment"> * The url for the modified NVD CVE (2.0 schema).</em>
<a class="jxr_linenumber" name="L690" href="#L690">690</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L691" href="#L691">691</a> <strong class="jxr_keyword">private</strong> String cveUrl20Modified;
<a class="jxr_linenumber" name="L692" href="#L692">692</a>
<a class="jxr_linenumber" name="L693" href="#L693">693</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L694" href="#L694">694</a> <em class="jxr_javadoccomment"> * Get the value of cveUrl20Modified.</em>
<a class="jxr_linenumber" name="L695" href="#L695">695</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L696" href="#L696">696</a> <em class="jxr_javadoccomment"> * @return the value of cveUrl20Modified</em>
<a class="jxr_linenumber" name="L697" href="#L697">697</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L698" href="#L698">698</a> <strong class="jxr_keyword">public</strong> String getCveUrl20Modified() {
<a class="jxr_linenumber" name="L699" href="#L699">699</a> <strong class="jxr_keyword">return</strong> cveUrl20Modified;
<a class="jxr_linenumber" name="L700" href="#L700">700</a> }
<a class="jxr_linenumber" name="L701" href="#L701">701</a>
<a class="jxr_linenumber" name="L702" href="#L702">702</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L703" href="#L703">703</a> <em class="jxr_javadoccomment"> * Set the value of cveUrl20Modified.</em>
<a class="jxr_linenumber" name="L704" href="#L704">704</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L705" href="#L705">705</a> <em class="jxr_javadoccomment"> * @param cveUrl20Modified new value of cveUrl20Modified</em>
<a class="jxr_linenumber" name="L706" href="#L706">706</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L707" href="#L707">707</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> setCveUrl20Modified(String cveUrl20Modified) {
<a class="jxr_linenumber" name="L708" href="#L708">708</a> <strong class="jxr_keyword">this</strong>.cveUrl20Modified = cveUrl20Modified;
<a class="jxr_linenumber" name="L709" href="#L709">709</a> }
<a class="jxr_linenumber" name="L710" href="#L710">710</a>
<a class="jxr_linenumber" name="L711" href="#L711">711</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L712" href="#L712">712</a> <em class="jxr_javadoccomment"> * Base Data Mirror URL for CVE 1.2.</em>
<a class="jxr_linenumber" name="L713" href="#L713">713</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L714" href="#L714">714</a> <strong class="jxr_keyword">private</strong> String cveUrl12Base;
<a class="jxr_linenumber" name="L715" href="#L715">715</a>
<a class="jxr_linenumber" name="L716" href="#L716">716</a> Settings.setBoolean(Settings.KEYS.AUTO_UPDATE, autoUpdate);
<a class="jxr_linenumber" name="L717" href="#L717">717</a>
<a class="jxr_linenumber" name="L718" href="#L718">718</a> <strong class="jxr_keyword">if</strong> (proxyUrl != <strong class="jxr_keyword">null</strong> &amp;&amp; !proxyUrl.isEmpty()) {
<a class="jxr_linenumber" name="L719" href="#L719">719</a> Settings.setString(Settings.KEYS.PROXY_URL, proxyUrl);
<a class="jxr_linenumber" name="L720" href="#L720">720</a> }
<a class="jxr_linenumber" name="L721" href="#L721">721</a> <strong class="jxr_keyword">if</strong> (proxyPort != <strong class="jxr_keyword">null</strong> &amp;&amp; !proxyPort.isEmpty()) {
<a class="jxr_linenumber" name="L722" href="#L722">722</a> Settings.setString(Settings.KEYS.PROXY_PORT, proxyPort);
<a class="jxr_linenumber" name="L723" href="#L723">723</a> }
<a class="jxr_linenumber" name="L724" href="#L724">724</a> <strong class="jxr_keyword">if</strong> (proxyUsername != <strong class="jxr_keyword">null</strong> &amp;&amp; !proxyUsername.isEmpty()) {
<a class="jxr_linenumber" name="L725" href="#L725">725</a> Settings.setString(Settings.KEYS.PROXY_USERNAME, proxyUsername);
<a class="jxr_linenumber" name="L726" href="#L726">726</a> }
<a class="jxr_linenumber" name="L727" href="#L727">727</a> <strong class="jxr_keyword">if</strong> (proxyPassword != <strong class="jxr_keyword">null</strong> &amp;&amp; !proxyPassword.isEmpty()) {
<a class="jxr_linenumber" name="L728" href="#L728">728</a> Settings.setString(Settings.KEYS.PROXY_PASSWORD, proxyPassword);
<a class="jxr_linenumber" name="L729" href="#L729">729</a> }
<a class="jxr_linenumber" name="L730" href="#L730">730</a> <strong class="jxr_keyword">if</strong> (connectionTimeout != <strong class="jxr_keyword">null</strong> &amp;&amp; !connectionTimeout.isEmpty()) {
<a class="jxr_linenumber" name="L731" href="#L731">731</a> Settings.setString(Settings.KEYS.CONNECTION_TIMEOUT, connectionTimeout);
<a class="jxr_linenumber" name="L732" href="#L732">732</a> }
<a class="jxr_linenumber" name="L733" href="#L733">733</a> <strong class="jxr_keyword">if</strong> (suppressionFile != <strong class="jxr_keyword">null</strong> &amp;&amp; !suppressionFile.isEmpty()) {
<a class="jxr_linenumber" name="L734" href="#L734">734</a> Settings.setString(Settings.KEYS.SUPPRESSION_FILE, suppressionFile);
<a class="jxr_linenumber" name="L735" href="#L735">735</a> }
<a class="jxr_linenumber" name="L736" href="#L736">736</a> Settings.setBoolean(Settings.KEYS.ANALYZER_NEXUS_ENABLED, nexusAnalyzerEnabled);
<a class="jxr_linenumber" name="L737" href="#L737">737</a> <strong class="jxr_keyword">if</strong> (nexusUrl != <strong class="jxr_keyword">null</strong> &amp;&amp; !nexusUrl.isEmpty()) {
<a class="jxr_linenumber" name="L738" href="#L738">738</a> Settings.setString(Settings.KEYS.ANALYZER_NEXUS_URL, nexusUrl);
<a class="jxr_linenumber" name="L739" href="#L739">739</a> }
<a class="jxr_linenumber" name="L740" href="#L740">740</a> <strong class="jxr_keyword">if</strong> (databaseDriverName != <strong class="jxr_keyword">null</strong> &amp;&amp; !databaseDriverName.isEmpty()) {
<a class="jxr_linenumber" name="L741" href="#L741">741</a> Settings.setString(Settings.KEYS.DB_DRIVER_NAME, databaseDriverName);
<a class="jxr_linenumber" name="L742" href="#L742">742</a> }
<a class="jxr_linenumber" name="L743" href="#L743">743</a> <strong class="jxr_keyword">if</strong> (databaseDriverPath != <strong class="jxr_keyword">null</strong> &amp;&amp; !databaseDriverPath.isEmpty()) {
<a class="jxr_linenumber" name="L744" href="#L744">744</a> Settings.setString(Settings.KEYS.DB_DRIVER_PATH, databaseDriverPath);
<a class="jxr_linenumber" name="L745" href="#L745">745</a> }
<a class="jxr_linenumber" name="L746" href="#L746">746</a> <strong class="jxr_keyword">if</strong> (connectionString != <strong class="jxr_keyword">null</strong> &amp;&amp; !connectionString.isEmpty()) {
<a class="jxr_linenumber" name="L747" href="#L747">747</a> Settings.setString(Settings.KEYS.DB_CONNECTION_STRING, connectionString);
<a class="jxr_linenumber" name="L748" href="#L748">748</a> }
<a class="jxr_linenumber" name="L749" href="#L749">749</a> <strong class="jxr_keyword">if</strong> (databaseUser != <strong class="jxr_keyword">null</strong> &amp;&amp; !databaseUser.isEmpty()) {
<a class="jxr_linenumber" name="L750" href="#L750">750</a> Settings.setString(Settings.KEYS.DB_USER, databaseUser);
<a class="jxr_linenumber" name="L751" href="#L751">751</a> }
<a class="jxr_linenumber" name="L752" href="#L752">752</a> <strong class="jxr_keyword">if</strong> (databasePassword != <strong class="jxr_keyword">null</strong> &amp;&amp; !databasePassword.isEmpty()) {
<a class="jxr_linenumber" name="L753" href="#L753">753</a> Settings.setString(Settings.KEYS.DB_PASSWORD, databasePassword);
<a class="jxr_linenumber" name="L754" href="#L754">754</a> }
<a class="jxr_linenumber" name="L716" href="#L716">716</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L717" href="#L717">717</a> <em class="jxr_javadoccomment"> * Get the value of cveUrl12Base.</em>
<a class="jxr_linenumber" name="L718" href="#L718">718</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L719" href="#L719">719</a> <em class="jxr_javadoccomment"> * @return the value of cveUrl12Base</em>
<a class="jxr_linenumber" name="L720" href="#L720">720</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L721" href="#L721">721</a> <strong class="jxr_keyword">public</strong> String getCveUrl12Base() {
<a class="jxr_linenumber" name="L722" href="#L722">722</a> <strong class="jxr_keyword">return</strong> cveUrl12Base;
<a class="jxr_linenumber" name="L723" href="#L723">723</a> }
<a class="jxr_linenumber" name="L724" href="#L724">724</a>
<a class="jxr_linenumber" name="L725" href="#L725">725</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L726" href="#L726">726</a> <em class="jxr_javadoccomment"> * Set the value of cveUrl12Base.</em>
<a class="jxr_linenumber" name="L727" href="#L727">727</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L728" href="#L728">728</a> <em class="jxr_javadoccomment"> * @param cveUrl12Base new value of cveUrl12Base</em>
<a class="jxr_linenumber" name="L729" href="#L729">729</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L730" href="#L730">730</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> setCveUrl12Base(String cveUrl12Base) {
<a class="jxr_linenumber" name="L731" href="#L731">731</a> <strong class="jxr_keyword">this</strong>.cveUrl12Base = cveUrl12Base;
<a class="jxr_linenumber" name="L732" href="#L732">732</a> }
<a class="jxr_linenumber" name="L733" href="#L733">733</a>
<a class="jxr_linenumber" name="L734" href="#L734">734</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L735" href="#L735">735</a> <em class="jxr_javadoccomment"> * Data Mirror URL for CVE 2.0.</em>
<a class="jxr_linenumber" name="L736" href="#L736">736</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L737" href="#L737">737</a> <strong class="jxr_keyword">private</strong> String cveUrl20Base;
<a class="jxr_linenumber" name="L738" href="#L738">738</a>
<a class="jxr_linenumber" name="L739" href="#L739">739</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L740" href="#L740">740</a> <em class="jxr_javadoccomment"> * Get the value of cveUrl20Base.</em>
<a class="jxr_linenumber" name="L741" href="#L741">741</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L742" href="#L742">742</a> <em class="jxr_javadoccomment"> * @return the value of cveUrl20Base</em>
<a class="jxr_linenumber" name="L743" href="#L743">743</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L744" href="#L744">744</a> <strong class="jxr_keyword">public</strong> String getCveUrl20Base() {
<a class="jxr_linenumber" name="L745" href="#L745">745</a> <strong class="jxr_keyword">return</strong> cveUrl20Base;
<a class="jxr_linenumber" name="L746" href="#L746">746</a> }
<a class="jxr_linenumber" name="L747" href="#L747">747</a>
<a class="jxr_linenumber" name="L748" href="#L748">748</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L749" href="#L749">749</a> <em class="jxr_javadoccomment"> * Set the value of cveUrl20Base.</em>
<a class="jxr_linenumber" name="L750" href="#L750">750</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L751" href="#L751">751</a> <em class="jxr_javadoccomment"> * @param cveUrl20Base new value of cveUrl20Base</em>
<a class="jxr_linenumber" name="L752" href="#L752">752</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L753" href="#L753">753</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> setCveUrl20Base(String cveUrl20Base) {
<a class="jxr_linenumber" name="L754" href="#L754">754</a> <strong class="jxr_keyword">this</strong>.cveUrl20Base = cveUrl20Base;
<a class="jxr_linenumber" name="L755" href="#L755">755</a> }
<a class="jxr_linenumber" name="L756" href="#L756">756</a>
<a class="jxr_linenumber" name="L757" href="#L757">757</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L758" href="#L758">758</a> <em class="jxr_javadoccomment"> * Checks to see if a vulnerability has been identified with a CVSS score that is above the threshold set in the</em>
<a class="jxr_linenumber" name="L759" href="#L759">759</a> <em class="jxr_javadoccomment"> * configuration.</em>
<a class="jxr_linenumber" name="L760" href="#L760">760</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L761" href="#L761">761</a> <em class="jxr_javadoccomment"> * @param dependencies the list of dependency objects</em>
<a class="jxr_linenumber" name="L762" href="#L762">762</a> <em class="jxr_javadoccomment"> * @throws BuildException thrown if a CVSS score is found that is higher then the threshold set</em>
<a class="jxr_linenumber" name="L763" href="#L763">763</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L764" href="#L764">764</a> <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">void</strong> checkForFailure(List&lt;Dependency&gt; dependencies) <strong class="jxr_keyword">throws</strong> BuildException {
<a class="jxr_linenumber" name="L765" href="#L765">765</a> <strong class="jxr_keyword">final</strong> StringBuilder ids = <strong class="jxr_keyword">new</strong> StringBuilder();
<a class="jxr_linenumber" name="L766" href="#L766">766</a> <strong class="jxr_keyword">for</strong> (Dependency d : dependencies) {
<a class="jxr_linenumber" name="L767" href="#L767">767</a> <strong class="jxr_keyword">for</strong> (Vulnerability v : d.getVulnerabilities()) {
<a class="jxr_linenumber" name="L768" href="#L768">768</a> <strong class="jxr_keyword">if</strong> (v.getCvssScore() &gt;= failBuildOnCVSS) {
<a class="jxr_linenumber" name="L769" href="#L769">769</a> <strong class="jxr_keyword">if</strong> (ids.length() == 0) {
<a class="jxr_linenumber" name="L770" href="#L770">770</a> ids.append(v.getName());
<a class="jxr_linenumber" name="L771" href="#L771">771</a> } <strong class="jxr_keyword">else</strong> {
<a class="jxr_linenumber" name="L772" href="#L772">772</a> ids.append(<span class="jxr_string">", "</span>).append(v.getName());
<a class="jxr_linenumber" name="L773" href="#L773">773</a> }
<a class="jxr_linenumber" name="L774" href="#L774">774</a> }
<a class="jxr_linenumber" name="L775" href="#L775">775</a> }
<a class="jxr_linenumber" name="L776" href="#L776">776</a> }
<a class="jxr_linenumber" name="L777" href="#L777">777</a> <strong class="jxr_keyword">if</strong> (ids.length() &gt; 0) {
<a class="jxr_linenumber" name="L778" href="#L778">778</a> <strong class="jxr_keyword">final</strong> String msg = String.format(<span class="jxr_string">"%n%nDependency-Check Failure:%n"</span>
<a class="jxr_linenumber" name="L779" href="#L779">779</a> + <span class="jxr_string">"One or more dependencies were identified with vulnerabilities that have a CVSS score greater then '%.1f': %s%n"</span>
<a class="jxr_linenumber" name="L780" href="#L780">780</a> + <span class="jxr_string">"See the dependency-check report for more details.%n%n"</span>, failBuildOnCVSS, ids.toString());
<a class="jxr_linenumber" name="L781" href="#L781">781</a> <strong class="jxr_keyword">throw</strong> <strong class="jxr_keyword">new</strong> BuildException(msg);
<a class="jxr_linenumber" name="L782" href="#L782">782</a> }
<a class="jxr_linenumber" name="L783" href="#L783">783</a> }
<a class="jxr_linenumber" name="L784" href="#L784">784</a>
<a class="jxr_linenumber" name="L785" href="#L785">785</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L786" href="#L786">786</a> <em class="jxr_javadoccomment"> * Generates a warning message listing a summary of dependencies and their associated CPE and CVE entries.</em>
<a class="jxr_linenumber" name="L787" href="#L787">787</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L788" href="#L788">788</a> <em class="jxr_javadoccomment"> * @param dependencies a list of dependency objects</em>
<a class="jxr_linenumber" name="L789" href="#L789">789</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L790" href="#L790">790</a> <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">void</strong> showSummary(List&lt;Dependency&gt; dependencies) {
<a class="jxr_linenumber" name="L791" href="#L791">791</a> <strong class="jxr_keyword">final</strong> StringBuilder summary = <strong class="jxr_keyword">new</strong> StringBuilder();
<a class="jxr_linenumber" name="L792" href="#L792">792</a> <strong class="jxr_keyword">for</strong> (Dependency d : dependencies) {
<a class="jxr_linenumber" name="L793" href="#L793">793</a> <strong class="jxr_keyword">boolean</strong> firstEntry = <strong class="jxr_keyword">true</strong>;
<a class="jxr_linenumber" name="L794" href="#L794">794</a> <strong class="jxr_keyword">final</strong> StringBuilder ids = <strong class="jxr_keyword">new</strong> StringBuilder();
<a class="jxr_linenumber" name="L795" href="#L795">795</a> <strong class="jxr_keyword">for</strong> (Vulnerability v : d.getVulnerabilities()) {
<a class="jxr_linenumber" name="L796" href="#L796">796</a> <strong class="jxr_keyword">if</strong> (firstEntry) {
<a class="jxr_linenumber" name="L797" href="#L797">797</a> firstEntry = false;
<a class="jxr_linenumber" name="L798" href="#L798">798</a> } <strong class="jxr_keyword">else</strong> {
<a class="jxr_linenumber" name="L799" href="#L799">799</a> ids.append(<span class="jxr_string">", "</span>);
<a class="jxr_linenumber" name="L800" href="#L800">800</a> }
<a class="jxr_linenumber" name="L801" href="#L801">801</a> ids.append(v.getName());
<a class="jxr_linenumber" name="L802" href="#L802">802</a> }
<a class="jxr_linenumber" name="L803" href="#L803">803</a> <strong class="jxr_keyword">if</strong> (ids.length() &gt; 0) {
<a class="jxr_linenumber" name="L804" href="#L804">804</a> summary.append(d.getFileName()).append(<span class="jxr_string">" ("</span>);
<a class="jxr_linenumber" name="L805" href="#L805">805</a> firstEntry = <strong class="jxr_keyword">true</strong>;
<a class="jxr_linenumber" name="L806" href="#L806">806</a> <strong class="jxr_keyword">for</strong> (Identifier id : d.getIdentifiers()) {
<a class="jxr_linenumber" name="L807" href="#L807">807</a> <strong class="jxr_keyword">if</strong> (firstEntry) {
<a class="jxr_linenumber" name="L808" href="#L808">808</a> firstEntry = false;
<a class="jxr_linenumber" name="L809" href="#L809">809</a> } <strong class="jxr_keyword">else</strong> {
<a class="jxr_linenumber" name="L810" href="#L810">810</a> summary.append(<span class="jxr_string">", "</span>);
<a class="jxr_linenumber" name="L811" href="#L811">811</a> }
<a class="jxr_linenumber" name="L812" href="#L812">812</a> summary.append(id.getValue());
<a class="jxr_linenumber" name="L813" href="#L813">813</a> }
<a class="jxr_linenumber" name="L814" href="#L814">814</a> summary.append(<span class="jxr_string">") : "</span>).append(ids).append(NEW_LINE);
<a class="jxr_linenumber" name="L815" href="#L815">815</a> }
<a class="jxr_linenumber" name="L816" href="#L816">816</a> }
<a class="jxr_linenumber" name="L817" href="#L817">817</a> <strong class="jxr_keyword">if</strong> (summary.length() &gt; 0) {
<a class="jxr_linenumber" name="L818" href="#L818">818</a> <strong class="jxr_keyword">final</strong> String msg = String.format(<span class="jxr_string">"%n%n"</span>
<a class="jxr_linenumber" name="L819" href="#L819">819</a> + <span class="jxr_string">"One or more dependencies were identified with known vulnerabilities:%n%n%s"</span>
<a class="jxr_linenumber" name="L820" href="#L820">820</a> + <span class="jxr_string">"%n%nSee the dependency-check report for more details.%n%n"</span>, summary.toString());
<a class="jxr_linenumber" name="L821" href="#L821">821</a> Logger.getLogger(DependencyCheckTask.<strong class="jxr_keyword">class</strong>.getName()).log(Level.WARNING, msg);
<a class="jxr_linenumber" name="L822" href="#L822">822</a> }
<a class="jxr_linenumber" name="L823" href="#L823">823</a> }
<a class="jxr_linenumber" name="L824" href="#L824">824</a>
<a class="jxr_linenumber" name="L825" href="#L825">825</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L826" href="#L826">826</a> <em class="jxr_javadoccomment"> * An enumeration of supported report formats: "ALL", "HTML", "XML", "VULN", etc..</em>
<a class="jxr_linenumber" name="L757" href="#L757">757</a> @Override
<a class="jxr_linenumber" name="L758" href="#L758">758</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">void</strong> execute() <strong class="jxr_keyword">throws</strong> BuildException {
<a class="jxr_linenumber" name="L759" href="#L759">759</a> <strong class="jxr_keyword">final</strong> InputStream in = DependencyCheckTask.<strong class="jxr_keyword">class</strong>.getClassLoader().getResourceAsStream(LOG_PROPERTIES_FILE);
<a class="jxr_linenumber" name="L760" href="#L760">760</a> LogUtils.prepareLogger(in, logFile);
<a class="jxr_linenumber" name="L761" href="#L761">761</a>
<a class="jxr_linenumber" name="L762" href="#L762">762</a> dealWithReferences();
<a class="jxr_linenumber" name="L763" href="#L763">763</a> validateConfiguration();
<a class="jxr_linenumber" name="L764" href="#L764">764</a> populateSettings();
<a class="jxr_linenumber" name="L765" href="#L765">765</a>
<a class="jxr_linenumber" name="L766" href="#L766">766</a> Engine engine = <strong class="jxr_keyword">null</strong>;
<a class="jxr_linenumber" name="L767" href="#L767">767</a> <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="L768" href="#L768">768</a> engine = <strong class="jxr_keyword">new</strong> Engine();
<a class="jxr_linenumber" name="L769" href="#L769">769</a>
<a class="jxr_linenumber" name="L770" href="#L770">770</a> <strong class="jxr_keyword">for</strong> (Resource resource : path) {
<a class="jxr_linenumber" name="L771" href="#L771">771</a> <strong class="jxr_keyword">final</strong> FileProvider provider = resource.as(FileProvider.<strong class="jxr_keyword">class</strong>);
<a class="jxr_linenumber" name="L772" href="#L772">772</a> <strong class="jxr_keyword">if</strong> (provider != <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="L773" href="#L773">773</a> <strong class="jxr_keyword">final</strong> File file = provider.getFile();
<a class="jxr_linenumber" name="L774" href="#L774">774</a> <strong class="jxr_keyword">if</strong> (file != <strong class="jxr_keyword">null</strong> &amp;&amp; file.exists()) {
<a class="jxr_linenumber" name="L775" href="#L775">775</a> engine.scan(file);
<a class="jxr_linenumber" name="L776" href="#L776">776</a> }
<a class="jxr_linenumber" name="L777" href="#L777">777</a> }
<a class="jxr_linenumber" name="L778" href="#L778">778</a> }
<a class="jxr_linenumber" name="L779" href="#L779">779</a> <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="L780" href="#L780">780</a> engine.analyzeDependencies();
<a class="jxr_linenumber" name="L781" href="#L781">781</a> DatabaseProperties prop = <strong class="jxr_keyword">null</strong>;
<a class="jxr_linenumber" name="L782" href="#L782">782</a> CveDB cve = <strong class="jxr_keyword">null</strong>;
<a class="jxr_linenumber" name="L783" href="#L783">783</a> <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="L784" href="#L784">784</a> cve = <strong class="jxr_keyword">new</strong> CveDB();
<a class="jxr_linenumber" name="L785" href="#L785">785</a> cve.open();
<a class="jxr_linenumber" name="L786" href="#L786">786</a> prop = cve.getDatabaseProperties();
<a class="jxr_linenumber" name="L787" href="#L787">787</a> } <strong class="jxr_keyword">catch</strong> (DatabaseException ex) {
<a class="jxr_linenumber" name="L788" href="#L788">788</a> Logger.getLogger(DependencyCheckTask.<strong class="jxr_keyword">class</strong>.getName()).log(Level.FINE, <span class="jxr_string">"Unable to retrieve DB Properties"</span>, ex);
<a class="jxr_linenumber" name="L789" href="#L789">789</a> } <strong class="jxr_keyword">finally</strong> {
<a class="jxr_linenumber" name="L790" href="#L790">790</a> <strong class="jxr_keyword">if</strong> (cve != <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="L791" href="#L791">791</a> cve.close();
<a class="jxr_linenumber" name="L792" href="#L792">792</a> }
<a class="jxr_linenumber" name="L793" href="#L793">793</a> }
<a class="jxr_linenumber" name="L794" href="#L794">794</a> <strong class="jxr_keyword">final</strong> ReportGenerator reporter = <strong class="jxr_keyword">new</strong> ReportGenerator(applicationName, engine.getDependencies(), engine.getAnalyzers(), prop);
<a class="jxr_linenumber" name="L795" href="#L795">795</a> reporter.generateReports(reportOutputDirectory, reportFormat);
<a class="jxr_linenumber" name="L796" href="#L796">796</a>
<a class="jxr_linenumber" name="L797" href="#L797">797</a> <strong class="jxr_keyword">if</strong> (<strong class="jxr_keyword">this</strong>.failBuildOnCVSS &lt;= 10) {
<a class="jxr_linenumber" name="L798" href="#L798">798</a> checkForFailure(engine.getDependencies());
<a class="jxr_linenumber" name="L799" href="#L799">799</a> }
<a class="jxr_linenumber" name="L800" href="#L800">800</a> <strong class="jxr_keyword">if</strong> (<strong class="jxr_keyword">this</strong>.showSummary) {
<a class="jxr_linenumber" name="L801" href="#L801">801</a> showSummary(engine.getDependencies());
<a class="jxr_linenumber" name="L802" href="#L802">802</a> }
<a class="jxr_linenumber" name="L803" href="#L803">803</a> } <strong class="jxr_keyword">catch</strong> (IOException ex) {
<a class="jxr_linenumber" name="L804" href="#L804">804</a> Logger.getLogger(DependencyCheckTask.<strong class="jxr_keyword">class</strong>.getName()).log(Level.FINE,
<a class="jxr_linenumber" name="L805" href="#L805">805</a> <span class="jxr_string">"Unable to generate dependency-check report"</span>, ex);
<a class="jxr_linenumber" name="L806" href="#L806">806</a> <strong class="jxr_keyword">throw</strong> <strong class="jxr_keyword">new</strong> BuildException(<span class="jxr_string">"Unable to generate dependency-check report"</span>, ex);
<a class="jxr_linenumber" name="L807" href="#L807">807</a> } <strong class="jxr_keyword">catch</strong> (Exception ex) {
<a class="jxr_linenumber" name="L808" href="#L808">808</a> Logger.getLogger(DependencyCheckTask.<strong class="jxr_keyword">class</strong>.getName()).log(Level.FINE,
<a class="jxr_linenumber" name="L809" href="#L809">809</a> <span class="jxr_string">"An exception occurred; unable to continue task"</span>, ex);
<a class="jxr_linenumber" name="L810" href="#L810">810</a> <strong class="jxr_keyword">throw</strong> <strong class="jxr_keyword">new</strong> BuildException(<span class="jxr_string">"An exception occurred; unable to continue task"</span>, ex);
<a class="jxr_linenumber" name="L811" href="#L811">811</a> }
<a class="jxr_linenumber" name="L812" href="#L812">812</a> } <strong class="jxr_keyword">catch</strong> (DatabaseException ex) {
<a class="jxr_linenumber" name="L813" href="#L813">813</a> Logger.getLogger(DependencyCheckTask.<strong class="jxr_keyword">class</strong>.getName()).log(Level.SEVERE,
<a class="jxr_linenumber" name="L814" href="#L814">814</a> <span class="jxr_string">"Unable to connect to the dependency-check database; analysis has stopped"</span>);
<a class="jxr_linenumber" name="L815" href="#L815">815</a> Logger.getLogger(DependencyCheckTask.<strong class="jxr_keyword">class</strong>.getName()).log(Level.FINE, <span class="jxr_string">""</span>, ex);
<a class="jxr_linenumber" name="L816" href="#L816">816</a> } <strong class="jxr_keyword">finally</strong> {
<a class="jxr_linenumber" name="L817" href="#L817">817</a> <strong class="jxr_keyword">if</strong> (engine != <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="L818" href="#L818">818</a> engine.cleanup();
<a class="jxr_linenumber" name="L819" href="#L819">819</a> }
<a class="jxr_linenumber" name="L820" href="#L820">820</a> }
<a class="jxr_linenumber" name="L821" href="#L821">821</a> }
<a class="jxr_linenumber" name="L822" href="#L822">822</a>
<a class="jxr_linenumber" name="L823" href="#L823">823</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L824" href="#L824">824</a> <em class="jxr_javadoccomment"> * Validate the configuration to ensure the parameters have been properly configured/initialized.</em>
<a class="jxr_linenumber" name="L825" href="#L825">825</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L826" href="#L826">826</a> <em class="jxr_javadoccomment"> * @throws BuildException if the task was not configured correctly.</em>
<a class="jxr_linenumber" name="L827" href="#L827">827</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L828" href="#L828">828</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">class</strong> <a href="../../../../org/owasp/dependencycheck/taskdefs/DependencyCheckTask.html">ReportFormats</a> <strong class="jxr_keyword">extends</strong> EnumeratedAttribute {
<a class="jxr_linenumber" name="L829" href="#L829">829</a>
<a class="jxr_linenumber" name="L830" href="#L830">830</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L831" href="#L831">831</a> <em class="jxr_javadoccomment"> * Returns the list of values for the report format.</em>
<a class="jxr_linenumber" name="L832" href="#L832">832</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L833" href="#L833">833</a> <em class="jxr_javadoccomment"> * @return the list of values for the report format</em>
<a class="jxr_linenumber" name="L834" href="#L834">834</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L835" href="#L835">835</a> @Override
<a class="jxr_linenumber" name="L836" href="#L836">836</a> <strong class="jxr_keyword">public</strong> String[] getValues() {
<a class="jxr_linenumber" name="L837" href="#L837">837</a> <strong class="jxr_keyword">int</strong> i = 0;
<a class="jxr_linenumber" name="L838" href="#L838">838</a> <strong class="jxr_keyword">final</strong> Format[] formats = Format.values();
<a class="jxr_linenumber" name="L839" href="#L839">839</a> <strong class="jxr_keyword">final</strong> String[] values = <strong class="jxr_keyword">new</strong> String[formats.length];
<a class="jxr_linenumber" name="L840" href="#L840">840</a> <strong class="jxr_keyword">for</strong> (Format format : formats) {
<a class="jxr_linenumber" name="L841" href="#L841">841</a> values[i++] = format.name();
<a class="jxr_linenumber" name="L842" href="#L842">842</a> }
<a class="jxr_linenumber" name="L843" href="#L843">843</a> <strong class="jxr_keyword">return</strong> values;
<a class="jxr_linenumber" name="L844" href="#L844">844</a> }
<a class="jxr_linenumber" name="L845" href="#L845">845</a> }
<a class="jxr_linenumber" name="L846" href="#L846">846</a> }
<a class="jxr_linenumber" name="L828" href="#L828">828</a> <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">void</strong> validateConfiguration() <strong class="jxr_keyword">throws</strong> BuildException {
<a class="jxr_linenumber" name="L829" href="#L829">829</a> <strong class="jxr_keyword">if</strong> (path == <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="L830" href="#L830">830</a> <strong class="jxr_keyword">throw</strong> <strong class="jxr_keyword">new</strong> BuildException(<span class="jxr_string">"No project dependencies have been defined to analyze."</span>);
<a class="jxr_linenumber" name="L831" href="#L831">831</a> }
<a class="jxr_linenumber" name="L832" href="#L832">832</a> <strong class="jxr_keyword">if</strong> (failBuildOnCVSS &lt; 0 || failBuildOnCVSS &gt; 11) {
<a class="jxr_linenumber" name="L833" href="#L833">833</a> <strong class="jxr_keyword">throw</strong> <strong class="jxr_keyword">new</strong> BuildException(<span class="jxr_string">"Invalid configuration, failBuildOnCVSS must be between 0 and 11."</span>);
<a class="jxr_linenumber" name="L834" href="#L834">834</a> }
<a class="jxr_linenumber" name="L835" href="#L835">835</a> }
<a class="jxr_linenumber" name="L836" href="#L836">836</a>
<a class="jxr_linenumber" name="L837" href="#L837">837</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L838" href="#L838">838</a> <em class="jxr_javadoccomment"> * Takes the properties supplied and updates the dependency-check settings. Additionally, this sets the system</em>
<a class="jxr_linenumber" name="L839" href="#L839">839</a> <em class="jxr_javadoccomment"> * properties required to change the proxy url, port, and connection timeout.</em>
<a class="jxr_linenumber" name="L840" href="#L840">840</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L841" href="#L841">841</a> <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">void</strong> populateSettings() {
<a class="jxr_linenumber" name="L842" href="#L842">842</a> InputStream taskProperties = <strong class="jxr_keyword">null</strong>;
<a class="jxr_linenumber" name="L843" href="#L843">843</a> <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="L844" href="#L844">844</a> taskProperties = <strong class="jxr_keyword">this</strong>.getClass().getClassLoader().getResourceAsStream(PROPERTIES_FILE);
<a class="jxr_linenumber" name="L845" href="#L845">845</a> Settings.mergeProperties(taskProperties);
<a class="jxr_linenumber" name="L846" href="#L846">846</a> } <strong class="jxr_keyword">catch</strong> (IOException ex) {
<a class="jxr_linenumber" name="L847" href="#L847">847</a> Logger.getLogger(DependencyCheckTask.<strong class="jxr_keyword">class</strong>.getName()).log(Level.WARNING, <span class="jxr_string">"Unable to load the dependency-check ant task.properties file."</span>);
<a class="jxr_linenumber" name="L848" href="#L848">848</a> Logger.getLogger(DependencyCheckTask.<strong class="jxr_keyword">class</strong>.getName()).log(Level.FINE, <strong class="jxr_keyword">null</strong>, ex);
<a class="jxr_linenumber" name="L849" href="#L849">849</a> } <strong class="jxr_keyword">finally</strong> {
<a class="jxr_linenumber" name="L850" href="#L850">850</a> <strong class="jxr_keyword">if</strong> (taskProperties != <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="L851" href="#L851">851</a> <strong class="jxr_keyword">try</strong> {
<a class="jxr_linenumber" name="L852" href="#L852">852</a> taskProperties.close();
<a class="jxr_linenumber" name="L853" href="#L853">853</a> } <strong class="jxr_keyword">catch</strong> (IOException ex) {
<a class="jxr_linenumber" name="L854" href="#L854">854</a> Logger.getLogger(DependencyCheckTask.<strong class="jxr_keyword">class</strong>.getName()).log(Level.FINEST, <strong class="jxr_keyword">null</strong>, ex);
<a class="jxr_linenumber" name="L855" href="#L855">855</a> }
<a class="jxr_linenumber" name="L856" href="#L856">856</a> }
<a class="jxr_linenumber" name="L857" href="#L857">857</a> }
<a class="jxr_linenumber" name="L858" href="#L858">858</a> <strong class="jxr_keyword">if</strong> (dataDirectory != <strong class="jxr_keyword">null</strong>) {
<a class="jxr_linenumber" name="L859" href="#L859">859</a> Settings.setString(Settings.KEYS.DATA_DIRECTORY, dataDirectory);
<a class="jxr_linenumber" name="L860" href="#L860">860</a> } <strong class="jxr_keyword">else</strong> {
<a class="jxr_linenumber" name="L861" href="#L861">861</a> <strong class="jxr_keyword">final</strong> File jarPath = <strong class="jxr_keyword">new</strong> File(DependencyCheckTask.<strong class="jxr_keyword">class</strong>.getProtectionDomain().getCodeSource().getLocation().getPath());
<a class="jxr_linenumber" name="L862" href="#L862">862</a> <strong class="jxr_keyword">final</strong> File base = jarPath.getParentFile();
<a class="jxr_linenumber" name="L863" href="#L863">863</a> <strong class="jxr_keyword">final</strong> String sub = Settings.getString(Settings.KEYS.DATA_DIRECTORY);
<a class="jxr_linenumber" name="L864" href="#L864">864</a> <strong class="jxr_keyword">final</strong> File dataDir = <strong class="jxr_keyword">new</strong> File(base, sub);
<a class="jxr_linenumber" name="L865" href="#L865">865</a> Settings.setString(Settings.KEYS.DATA_DIRECTORY, dataDir.getAbsolutePath());
<a class="jxr_linenumber" name="L866" href="#L866">866</a> }
<a class="jxr_linenumber" name="L867" href="#L867">867</a>
<a class="jxr_linenumber" name="L868" href="#L868">868</a> Settings.setBoolean(Settings.KEYS.AUTO_UPDATE, autoUpdate);
<a class="jxr_linenumber" name="L869" href="#L869">869</a>
<a class="jxr_linenumber" name="L870" href="#L870">870</a> <strong class="jxr_keyword">if</strong> (proxyUrl != <strong class="jxr_keyword">null</strong> &amp;&amp; !proxyUrl.isEmpty()) {
<a class="jxr_linenumber" name="L871" href="#L871">871</a> Settings.setString(Settings.KEYS.PROXY_URL, proxyUrl);
<a class="jxr_linenumber" name="L872" href="#L872">872</a> }
<a class="jxr_linenumber" name="L873" href="#L873">873</a> <strong class="jxr_keyword">if</strong> (proxyPort != <strong class="jxr_keyword">null</strong> &amp;&amp; !proxyPort.isEmpty()) {
<a class="jxr_linenumber" name="L874" href="#L874">874</a> Settings.setString(Settings.KEYS.PROXY_PORT, proxyPort);
<a class="jxr_linenumber" name="L875" href="#L875">875</a> }
<a class="jxr_linenumber" name="L876" href="#L876">876</a> <strong class="jxr_keyword">if</strong> (proxyUsername != <strong class="jxr_keyword">null</strong> &amp;&amp; !proxyUsername.isEmpty()) {
<a class="jxr_linenumber" name="L877" href="#L877">877</a> Settings.setString(Settings.KEYS.PROXY_USERNAME, proxyUsername);
<a class="jxr_linenumber" name="L878" href="#L878">878</a> }
<a class="jxr_linenumber" name="L879" href="#L879">879</a> <strong class="jxr_keyword">if</strong> (proxyPassword != <strong class="jxr_keyword">null</strong> &amp;&amp; !proxyPassword.isEmpty()) {
<a class="jxr_linenumber" name="L880" href="#L880">880</a> Settings.setString(Settings.KEYS.PROXY_PASSWORD, proxyPassword);
<a class="jxr_linenumber" name="L881" href="#L881">881</a> }
<a class="jxr_linenumber" name="L882" href="#L882">882</a> <strong class="jxr_keyword">if</strong> (connectionTimeout != <strong class="jxr_keyword">null</strong> &amp;&amp; !connectionTimeout.isEmpty()) {
<a class="jxr_linenumber" name="L883" href="#L883">883</a> Settings.setString(Settings.KEYS.CONNECTION_TIMEOUT, connectionTimeout);
<a class="jxr_linenumber" name="L884" href="#L884">884</a> }
<a class="jxr_linenumber" name="L885" href="#L885">885</a> <strong class="jxr_keyword">if</strong> (suppressionFile != <strong class="jxr_keyword">null</strong> &amp;&amp; !suppressionFile.isEmpty()) {
<a class="jxr_linenumber" name="L886" href="#L886">886</a> Settings.setString(Settings.KEYS.SUPPRESSION_FILE, suppressionFile);
<a class="jxr_linenumber" name="L887" href="#L887">887</a> }
<a class="jxr_linenumber" name="L888" href="#L888">888</a> Settings.setBoolean(Settings.KEYS.ANALYZER_NEXUS_ENABLED, nexusAnalyzerEnabled);
<a class="jxr_linenumber" name="L889" href="#L889">889</a> <strong class="jxr_keyword">if</strong> (nexusUrl != <strong class="jxr_keyword">null</strong> &amp;&amp; !nexusUrl.isEmpty()) {
<a class="jxr_linenumber" name="L890" href="#L890">890</a> Settings.setString(Settings.KEYS.ANALYZER_NEXUS_URL, nexusUrl);
<a class="jxr_linenumber" name="L891" href="#L891">891</a> }
<a class="jxr_linenumber" name="L892" href="#L892">892</a> Settings.setBoolean(Settings.KEYS.ANALYZER_NEXUS_PROXY, nexusUsesProxy);
<a class="jxr_linenumber" name="L893" href="#L893">893</a> <strong class="jxr_keyword">if</strong> (databaseDriverName != <strong class="jxr_keyword">null</strong> &amp;&amp; !databaseDriverName.isEmpty()) {
<a class="jxr_linenumber" name="L894" href="#L894">894</a> Settings.setString(Settings.KEYS.DB_DRIVER_NAME, databaseDriverName);
<a class="jxr_linenumber" name="L895" href="#L895">895</a> }
<a class="jxr_linenumber" name="L896" href="#L896">896</a> <strong class="jxr_keyword">if</strong> (databaseDriverPath != <strong class="jxr_keyword">null</strong> &amp;&amp; !databaseDriverPath.isEmpty()) {
<a class="jxr_linenumber" name="L897" href="#L897">897</a> Settings.setString(Settings.KEYS.DB_DRIVER_PATH, databaseDriverPath);
<a class="jxr_linenumber" name="L898" href="#L898">898</a> }
<a class="jxr_linenumber" name="L899" href="#L899">899</a> <strong class="jxr_keyword">if</strong> (connectionString != <strong class="jxr_keyword">null</strong> &amp;&amp; !connectionString.isEmpty()) {
<a class="jxr_linenumber" name="L900" href="#L900">900</a> Settings.setString(Settings.KEYS.DB_CONNECTION_STRING, connectionString);
<a class="jxr_linenumber" name="L901" href="#L901">901</a> }
<a class="jxr_linenumber" name="L902" href="#L902">902</a> <strong class="jxr_keyword">if</strong> (databaseUser != <strong class="jxr_keyword">null</strong> &amp;&amp; !databaseUser.isEmpty()) {
<a class="jxr_linenumber" name="L903" href="#L903">903</a> Settings.setString(Settings.KEYS.DB_USER, databaseUser);
<a class="jxr_linenumber" name="L904" href="#L904">904</a> }
<a class="jxr_linenumber" name="L905" href="#L905">905</a> <strong class="jxr_keyword">if</strong> (databasePassword != <strong class="jxr_keyword">null</strong> &amp;&amp; !databasePassword.isEmpty()) {
<a class="jxr_linenumber" name="L906" href="#L906">906</a> Settings.setString(Settings.KEYS.DB_PASSWORD, databasePassword);
<a class="jxr_linenumber" name="L907" href="#L907">907</a> }
<a class="jxr_linenumber" name="L908" href="#L908">908</a> <strong class="jxr_keyword">if</strong> (zipExtensions != <strong class="jxr_keyword">null</strong> &amp;&amp; !zipExtensions.isEmpty()) {
<a class="jxr_linenumber" name="L909" href="#L909">909</a> Settings.setString(Settings.KEYS.ADDITIONAL_ZIP_EXTENSIONS, zipExtensions);
<a class="jxr_linenumber" name="L910" href="#L910">910</a> }
<a class="jxr_linenumber" name="L911" href="#L911">911</a> <strong class="jxr_keyword">if</strong> (cveUrl12Modified != <strong class="jxr_keyword">null</strong> &amp;&amp; !cveUrl12Modified.isEmpty()) {
<a class="jxr_linenumber" name="L912" href="#L912">912</a> Settings.setString(Settings.KEYS.CVE_MODIFIED_12_URL, cveUrl12Modified);
<a class="jxr_linenumber" name="L913" href="#L913">913</a> }
<a class="jxr_linenumber" name="L914" href="#L914">914</a> <strong class="jxr_keyword">if</strong> (cveUrl20Modified != <strong class="jxr_keyword">null</strong> &amp;&amp; !cveUrl20Modified.isEmpty()) {
<a class="jxr_linenumber" name="L915" href="#L915">915</a> Settings.setString(Settings.KEYS.CVE_MODIFIED_20_URL, cveUrl20Modified);
<a class="jxr_linenumber" name="L916" href="#L916">916</a> }
<a class="jxr_linenumber" name="L917" href="#L917">917</a> <strong class="jxr_keyword">if</strong> (cveUrl12Base != <strong class="jxr_keyword">null</strong> &amp;&amp; !cveUrl12Base.isEmpty()) {
<a class="jxr_linenumber" name="L918" href="#L918">918</a> Settings.setString(Settings.KEYS.CVE_SCHEMA_1_2, cveUrl12Base);
<a class="jxr_linenumber" name="L919" href="#L919">919</a> }
<a class="jxr_linenumber" name="L920" href="#L920">920</a> <strong class="jxr_keyword">if</strong> (cveUrl20Base != <strong class="jxr_keyword">null</strong> &amp;&amp; !cveUrl20Base.isEmpty()) {
<a class="jxr_linenumber" name="L921" href="#L921">921</a> Settings.setString(Settings.KEYS.CVE_SCHEMA_2_0, cveUrl20Base);
<a class="jxr_linenumber" name="L922" href="#L922">922</a> }
<a class="jxr_linenumber" name="L923" href="#L923">923</a> }
<a class="jxr_linenumber" name="L924" href="#L924">924</a>
<a class="jxr_linenumber" name="L925" href="#L925">925</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L926" href="#L926">926</a> <em class="jxr_javadoccomment"> * Checks to see if a vulnerability has been identified with a CVSS score that is above the threshold set in the</em>
<a class="jxr_linenumber" name="L927" href="#L927">927</a> <em class="jxr_javadoccomment"> * configuration.</em>
<a class="jxr_linenumber" name="L928" href="#L928">928</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L929" href="#L929">929</a> <em class="jxr_javadoccomment"> * @param dependencies the list of dependency objects</em>
<a class="jxr_linenumber" name="L930" href="#L930">930</a> <em class="jxr_javadoccomment"> * @throws BuildException thrown if a CVSS score is found that is higher then the threshold set</em>
<a class="jxr_linenumber" name="L931" href="#L931">931</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L932" href="#L932">932</a> <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">void</strong> checkForFailure(List&lt;Dependency&gt; dependencies) <strong class="jxr_keyword">throws</strong> BuildException {
<a class="jxr_linenumber" name="L933" href="#L933">933</a> <strong class="jxr_keyword">final</strong> StringBuilder ids = <strong class="jxr_keyword">new</strong> StringBuilder();
<a class="jxr_linenumber" name="L934" href="#L934">934</a> <strong class="jxr_keyword">for</strong> (Dependency d : dependencies) {
<a class="jxr_linenumber" name="L935" href="#L935">935</a> <strong class="jxr_keyword">for</strong> (Vulnerability v : d.getVulnerabilities()) {
<a class="jxr_linenumber" name="L936" href="#L936">936</a> <strong class="jxr_keyword">if</strong> (v.getCvssScore() &gt;= failBuildOnCVSS) {
<a class="jxr_linenumber" name="L937" href="#L937">937</a> <strong class="jxr_keyword">if</strong> (ids.length() == 0) {
<a class="jxr_linenumber" name="L938" href="#L938">938</a> ids.append(v.getName());
<a class="jxr_linenumber" name="L939" href="#L939">939</a> } <strong class="jxr_keyword">else</strong> {
<a class="jxr_linenumber" name="L940" href="#L940">940</a> ids.append(<span class="jxr_string">", "</span>).append(v.getName());
<a class="jxr_linenumber" name="L941" href="#L941">941</a> }
<a class="jxr_linenumber" name="L942" href="#L942">942</a> }
<a class="jxr_linenumber" name="L943" href="#L943">943</a> }
<a class="jxr_linenumber" name="L944" href="#L944">944</a> }
<a class="jxr_linenumber" name="L945" href="#L945">945</a> <strong class="jxr_keyword">if</strong> (ids.length() &gt; 0) {
<a class="jxr_linenumber" name="L946" href="#L946">946</a> <strong class="jxr_keyword">final</strong> String msg = String.format(<span class="jxr_string">"%n%nDependency-Check Failure:%n"</span>
<a class="jxr_linenumber" name="L947" href="#L947">947</a> + <span class="jxr_string">"One or more dependencies were identified with vulnerabilities that have a CVSS score greater then '%.1f': %s%n"</span>
<a class="jxr_linenumber" name="L948" href="#L948">948</a> + <span class="jxr_string">"See the dependency-check report for more details.%n%n"</span>, failBuildOnCVSS, ids.toString());
<a class="jxr_linenumber" name="L949" href="#L949">949</a> <strong class="jxr_keyword">throw</strong> <strong class="jxr_keyword">new</strong> BuildException(msg);
<a class="jxr_linenumber" name="L950" href="#L950">950</a> }
<a class="jxr_linenumber" name="L951" href="#L951">951</a> }
<a class="jxr_linenumber" name="L952" href="#L952">952</a>
<a class="jxr_linenumber" name="L953" href="#L953">953</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L954" href="#L954">954</a> <em class="jxr_javadoccomment"> * Generates a warning message listing a summary of dependencies and their associated CPE and CVE entries.</em>
<a class="jxr_linenumber" name="L955" href="#L955">955</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L956" href="#L956">956</a> <em class="jxr_javadoccomment"> * @param dependencies a list of dependency objects</em>
<a class="jxr_linenumber" name="L957" href="#L957">957</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L958" href="#L958">958</a> <strong class="jxr_keyword">private</strong> <strong class="jxr_keyword">void</strong> showSummary(List&lt;Dependency&gt; dependencies) {
<a class="jxr_linenumber" name="L959" href="#L959">959</a> <strong class="jxr_keyword">final</strong> StringBuilder summary = <strong class="jxr_keyword">new</strong> StringBuilder();
<a class="jxr_linenumber" name="L960" href="#L960">960</a> <strong class="jxr_keyword">for</strong> (Dependency d : dependencies) {
<a class="jxr_linenumber" name="L961" href="#L961">961</a> <strong class="jxr_keyword">boolean</strong> firstEntry = <strong class="jxr_keyword">true</strong>;
<a class="jxr_linenumber" name="L962" href="#L962">962</a> <strong class="jxr_keyword">final</strong> StringBuilder ids = <strong class="jxr_keyword">new</strong> StringBuilder();
<a class="jxr_linenumber" name="L963" href="#L963">963</a> <strong class="jxr_keyword">for</strong> (Vulnerability v : d.getVulnerabilities()) {
<a class="jxr_linenumber" name="L964" href="#L964">964</a> <strong class="jxr_keyword">if</strong> (firstEntry) {
<a class="jxr_linenumber" name="L965" href="#L965">965</a> firstEntry = false;
<a class="jxr_linenumber" name="L966" href="#L966">966</a> } <strong class="jxr_keyword">else</strong> {
<a class="jxr_linenumber" name="L967" href="#L967">967</a> ids.append(<span class="jxr_string">", "</span>);
<a class="jxr_linenumber" name="L968" href="#L968">968</a> }
<a class="jxr_linenumber" name="L969" href="#L969">969</a> ids.append(v.getName());
<a class="jxr_linenumber" name="L970" href="#L970">970</a> }
<a class="jxr_linenumber" name="L971" href="#L971">971</a> <strong class="jxr_keyword">if</strong> (ids.length() &gt; 0) {
<a class="jxr_linenumber" name="L972" href="#L972">972</a> summary.append(d.getFileName()).append(<span class="jxr_string">" ("</span>);
<a class="jxr_linenumber" name="L973" href="#L973">973</a> firstEntry = <strong class="jxr_keyword">true</strong>;
<a class="jxr_linenumber" name="L974" href="#L974">974</a> <strong class="jxr_keyword">for</strong> (Identifier id : d.getIdentifiers()) {
<a class="jxr_linenumber" name="L975" href="#L975">975</a> <strong class="jxr_keyword">if</strong> (firstEntry) {
<a class="jxr_linenumber" name="L976" href="#L976">976</a> firstEntry = false;
<a class="jxr_linenumber" name="L977" href="#L977">977</a> } <strong class="jxr_keyword">else</strong> {
<a class="jxr_linenumber" name="L978" href="#L978">978</a> summary.append(<span class="jxr_string">", "</span>);
<a class="jxr_linenumber" name="L979" href="#L979">979</a> }
<a class="jxr_linenumber" name="L980" href="#L980">980</a> summary.append(id.getValue());
<a class="jxr_linenumber" name="L981" href="#L981">981</a> }
<a class="jxr_linenumber" name="L982" href="#L982">982</a> summary.append(<span class="jxr_string">") : "</span>).append(ids).append(NEW_LINE);
<a class="jxr_linenumber" name="L983" href="#L983">983</a> }
<a class="jxr_linenumber" name="L984" href="#L984">984</a> }
<a class="jxr_linenumber" name="L985" href="#L985">985</a> <strong class="jxr_keyword">if</strong> (summary.length() &gt; 0) {
<a class="jxr_linenumber" name="L986" href="#L986">986</a> <strong class="jxr_keyword">final</strong> String msg = String.format(<span class="jxr_string">"%n%n"</span>
<a class="jxr_linenumber" name="L987" href="#L987">987</a> + <span class="jxr_string">"One or more dependencies were identified with known vulnerabilities:%n%n%s"</span>
<a class="jxr_linenumber" name="L988" href="#L988">988</a> + <span class="jxr_string">"%n%nSee the dependency-check report for more details.%n%n"</span>, summary.toString());
<a class="jxr_linenumber" name="L989" href="#L989">989</a> Logger.getLogger(DependencyCheckTask.<strong class="jxr_keyword">class</strong>.getName()).log(Level.WARNING, msg);
<a class="jxr_linenumber" name="L990" href="#L990">990</a> }
<a class="jxr_linenumber" name="L991" href="#L991">991</a> }
<a class="jxr_linenumber" name="L992" href="#L992">992</a>
<a class="jxr_linenumber" name="L993" href="#L993">993</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L994" href="#L994">994</a> <em class="jxr_javadoccomment"> * An enumeration of supported report formats: "ALL", "HTML", "XML", "VULN", etc..</em>
<a class="jxr_linenumber" name="L995" href="#L995">995</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L996" href="#L996">996</a> <strong class="jxr_keyword">public</strong> <strong class="jxr_keyword">static</strong> <strong class="jxr_keyword">class</strong> <a href="../../../../org/owasp/dependencycheck/taskdefs/DependencyCheckTask.html">ReportFormats</a> <strong class="jxr_keyword">extends</strong> EnumeratedAttribute {
<a class="jxr_linenumber" name="L997" href="#L997">997</a>
<a class="jxr_linenumber" name="L998" href="#L998">998</a> <em class="jxr_javadoccomment">/**</em>
<a class="jxr_linenumber" name="L999" href="#L999">999</a> <em class="jxr_javadoccomment"> * Returns the list of values for the report format.</em>
<a class="jxr_linenumber" name="L1000" href="#L1000">1000</a> <em class="jxr_javadoccomment"> *</em>
<a class="jxr_linenumber" name="L1001" href="#L1001">1001</a> <em class="jxr_javadoccomment"> * @return the list of values for the report format</em>
<a class="jxr_linenumber" name="L1002" href="#L1002">1002</a> <em class="jxr_javadoccomment"> */</em>
<a class="jxr_linenumber" name="L1003" href="#L1003">1003</a> @Override
<a class="jxr_linenumber" name="L1004" href="#L1004">1004</a> <strong class="jxr_keyword">public</strong> String[] getValues() {
<a class="jxr_linenumber" name="L1005" href="#L1005">1005</a> <strong class="jxr_keyword">int</strong> i = 0;
<a class="jxr_linenumber" name="L1006" href="#L1006">1006</a> <strong class="jxr_keyword">final</strong> Format[] formats = Format.values();
<a class="jxr_linenumber" name="L1007" href="#L1007">1007</a> <strong class="jxr_keyword">final</strong> String[] values = <strong class="jxr_keyword">new</strong> String[formats.length];
<a class="jxr_linenumber" name="L1008" href="#L1008">1008</a> <strong class="jxr_keyword">for</strong> (Format format : formats) {
<a class="jxr_linenumber" name="L1009" href="#L1009">1009</a> values[i++] = format.name();
<a class="jxr_linenumber" name="L1010" href="#L1010">1010</a> }
<a class="jxr_linenumber" name="L1011" href="#L1011">1011</a> <strong class="jxr_keyword">return</strong> values;
<a class="jxr_linenumber" name="L1012" href="#L1012">1012</a> }
<a class="jxr_linenumber" name="L1013" href="#L1013">1013</a> }
<a class="jxr_linenumber" name="L1014" href="#L1014">1014</a> }
</pre>
<hr/>
<div id="footer">Copyright &#169; 2012&#x2013;2014 <a href="http://www.owasp.org">OWASP</a>. All rights reserved.</div>