Coverage Report - org.owasp.dependencycheck.cli.CliParser
 
Classes in this File Line Coverage Branch Coverage Complexity
CliParser
64%
86/134
37%
27/72
1.857
CliParser$ARGUMENT
N/A
N/A
1.857
 
 1  
 /*
 2  
  * This file is part of dependency-check-cli.
 3  
  *
 4  
  * Licensed under the Apache License, Version 2.0 (the "License");
 5  
  * you may not use this file except in compliance with the License.
 6  
  * You may obtain a copy of the License at
 7  
  *
 8  
  *     http://www.apache.org/licenses/LICENSE-2.0
 9  
  *
 10  
  * Unless required by applicable law or agreed to in writing, software
 11  
  * distributed under the License is distributed on an "AS IS" BASIS,
 12  
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 13  
  * See the License for the specific language governing permissions and
 14  
  * limitations under the License.
 15  
  *
 16  
  * Copyright (c) 2012 Jeremy Long. All Rights Reserved.
 17  
  */
 18  
 package org.owasp.dependencycheck.cli;
 19  
 
 20  
 import java.io.File;
 21  
 import java.io.FileNotFoundException;
 22  
 import java.util.logging.Logger;
 23  
 import org.apache.commons.cli.CommandLine;
 24  
 import org.apache.commons.cli.CommandLineParser;
 25  
 import org.apache.commons.cli.HelpFormatter;
 26  
 import org.apache.commons.cli.Option;
 27  
 import org.apache.commons.cli.OptionBuilder;
 28  
 import org.apache.commons.cli.OptionGroup;
 29  
 import org.apache.commons.cli.Options;
 30  
 import org.apache.commons.cli.ParseException;
 31  
 import org.apache.commons.cli.PosixParser;
 32  
 import org.owasp.dependencycheck.reporting.ReportGenerator.Format;
 33  
 import org.owasp.dependencycheck.utils.InvalidSettingException;
 34  
 import org.owasp.dependencycheck.utils.Settings;
 35  
 
 36  
 /**
 37  
  * A utility to parse command line arguments for the DependencyCheck.
 38  
  *
 39  
  * @author Jeremy Long <jeremy.long@owasp.org>
 40  
  */
 41  
 public final class CliParser {
 42  
 
 43  
     /**
 44  
      * The logger.
 45  
      */
 46  1
     private static final Logger LOGGER = Logger.getLogger(CliParser.class.getName());
 47  
     /**
 48  
      * The command line.
 49  
      */
 50  
     private CommandLine line;
 51  
     /**
 52  
      * Indicates whether the arguments are valid.
 53  
      */
 54  
     private boolean isValid = true;
 55  
 
 56  
     /**
 57  
      * Parses the arguments passed in and captures the results for later use.
 58  
      *
 59  
      * @param args the command line arguments
 60  
      * @throws FileNotFoundException is thrown when a 'file' argument does not point to a file that exists.
 61  
      * @throws ParseException is thrown when a Parse Exception occurs.
 62  
      */
 63  
     public void parse(String[] args) throws FileNotFoundException, ParseException {
 64  9
         line = parseArgs(args);
 65  
 
 66  7
         if (line != null) {
 67  7
             validateArgs();
 68  
         }
 69  6
     }
 70  
 
 71  
     /**
 72  
      * Parses the command line arguments.
 73  
      *
 74  
      * @param args the command line arguments
 75  
      * @return the results of parsing the command line arguments
 76  
      * @throws ParseException if the arguments are invalid
 77  
      */
 78  
     private CommandLine parseArgs(String[] args) throws ParseException {
 79  9
         final CommandLineParser parser = new PosixParser();
 80  9
         final Options options = createCommandLineOptions();
 81  9
         return parser.parse(options, args);
 82  
     }
 83  
 
 84  
     /**
 85  
      * Validates that the command line arguments are valid.
 86  
      *
 87  
      * @throws FileNotFoundException if there is a file specified by either the SCAN or CPE command line arguments that
 88  
      * does not exist.
 89  
      * @throws ParseException is thrown if there is an exception parsing the command line.
 90  
      */
 91  
     private void validateArgs() throws FileNotFoundException, ParseException {
 92  7
         if (isRunScan()) {
 93  2
             validatePathExists(getScanFiles(), ARGUMENT.SCAN);
 94  1
             validatePathExists(getReportDirectory(), ARGUMENT.OUT);
 95  1
             if (getPathToMono() != null) {
 96  0
                 validatePathExists(getPathToMono(), ARGUMENT.PATH_TO_MONO);
 97  
             }
 98  1
             if (!line.hasOption(ARGUMENT.APP_NAME)) {
 99  0
                 throw new ParseException("Missing 'app' argument; the scan cannot be run without the an application name.");
 100  
             }
 101  1
             if (line.hasOption(ARGUMENT.OUTPUT_FORMAT)) {
 102  0
                 final String format = line.getOptionValue(ARGUMENT.OUTPUT_FORMAT);
 103  
                 try {
 104  0
                     Format.valueOf(format);
 105  0
                 } catch (IllegalArgumentException ex) {
 106  0
                     final String msg = String.format("An invalid 'format' of '%s' was specified. "
 107  
                             + "Supported output formats are XML, HTML, VULN, or ALL", format);
 108  0
                     throw new ParseException(msg);
 109  0
                 }
 110  
             }
 111  
         }
 112  6
     }
 113  
 
 114  
     /**
 115  
      * Validates whether or not the path(s) points at a file that exists; if the path(s) does not point to an existing
 116  
      * file a FileNotFoundException is thrown.
 117  
      *
 118  
      * @param paths the paths to validate if they exists
 119  
      * @param optType the option being validated (e.g. scan, out, etc.)
 120  
      * @throws FileNotFoundException is thrown if one of the paths being validated does not exist.
 121  
      */
 122  
     private void validatePathExists(String[] paths, String optType) throws FileNotFoundException {
 123  3
         for (String path : paths) {
 124  2
             validatePathExists(path, optType);
 125  
         }
 126  1
     }
 127  
 
 128  
     /**
 129  
      * Validates whether or not the path points at a file that exists; if the path does not point to an existing file a
 130  
      * FileNotFoundException is thrown.
 131  
      *
 132  
      * @param path the paths to validate if they exists
 133  
      * @param argumentName the argument being validated (e.g. scan, out, etc.)
 134  
      * @throws FileNotFoundException is thrown if the path being validated does not exist.
 135  
      */
 136  
     private void validatePathExists(String path, String argumentName) throws FileNotFoundException {
 137  3
         if (!path.contains("*.")) {
 138  3
             final File f = new File(path);
 139  3
             if (!f.exists()) {
 140  1
                 isValid = false;
 141  1
                 final String msg = String.format("Invalid '%s' argument: '%s'", argumentName, path);
 142  1
                 throw new FileNotFoundException(msg);
 143  
             }
 144  
         } // else { // TODO add a validation for *.zip extensions rather then relying on the engine to validate it.
 145  2
     }
 146  
 
 147  
     /**
 148  
      * Generates an Options collection that is used to parse the command line and to display the help message.
 149  
      *
 150  
      * @return the command line options used for parsing the command line
 151  
      */
 152  
     @SuppressWarnings("static-access")
 153  
     private Options createCommandLineOptions() {
 154  
 
 155  9
         final Options options = new Options();
 156  9
         addStandardOptions(options);
 157  9
         addAdvancedOptions(options);
 158  9
         addDeprecatedOptions(options);
 159  9
         return options;
 160  
     }
 161  
 
 162  
     /**
 163  
      * Adds the standard command line options to the given options collection.
 164  
      *
 165  
      * @param options a collection of command line arguments
 166  
      * @throws IllegalArgumentException thrown if there is an exception
 167  
      */
 168  
     @SuppressWarnings("static-access")
 169  
     private void addStandardOptions(final Options options) throws IllegalArgumentException {
 170  11
         final Option help = new Option(ARGUMENT.HELP_SHORT, ARGUMENT.HELP, false,
 171  
                 "Print this message.");
 172  
 
 173  11
         final Option advancedHelp = OptionBuilder.withLongOpt(ARGUMENT.ADVANCED_HELP)
 174  
                 .withDescription("Print the advanced help message.").create();
 175  
 
 176  11
         final Option version = new Option(ARGUMENT.VERSION_SHORT, ARGUMENT.VERSION,
 177  
                 false, "Print the version information.");
 178  
 
 179  11
         final Option noUpdate = new Option(ARGUMENT.DISABLE_AUTO_UPDATE_SHORT, ARGUMENT.DISABLE_AUTO_UPDATE,
 180  
                 false, "Disables the automatic updating of the CPE data.");
 181  
 
 182  11
         final Option appName = OptionBuilder.withArgName("name").hasArg().withLongOpt(ARGUMENT.APP_NAME)
 183  
                 .withDescription("The name of the application being scanned. This is a required argument.")
 184  
                 .create(ARGUMENT.APP_NAME_SHORT);
 185  
 
 186  11
         final Option path = OptionBuilder.withArgName("path").hasArg().withLongOpt(ARGUMENT.SCAN)
 187  
                 .withDescription("The path to scan - this option can be specified multiple times. To limit the scan"
 188  
                         + " to specific file types *.[ext] can be added to the end of the path.")
 189  
                 .create(ARGUMENT.SCAN_SHORT);
 190  
 
 191  11
         final Option props = OptionBuilder.withArgName("file").hasArg().withLongOpt(ARGUMENT.PROP)
 192  
                 .withDescription("A property file to load.")
 193  
                 .create(ARGUMENT.PROP_SHORT);
 194  
 
 195  11
         final Option out = OptionBuilder.withArgName("folder").hasArg().withLongOpt(ARGUMENT.OUT)
 196  
                 .withDescription("The folder to write reports to. This defaults to the current directory.")
 197  
                 .create(ARGUMENT.OUT_SHORT);
 198  
 
 199  11
         final Option outputFormat = OptionBuilder.withArgName("format").hasArg().withLongOpt(ARGUMENT.OUTPUT_FORMAT)
 200  
                 .withDescription("The output format to write to (XML, HTML, VULN, ALL). The default is HTML.")
 201  
                 .create(ARGUMENT.OUTPUT_FORMAT_SHORT);
 202  
 
 203  11
         final Option verboseLog = OptionBuilder.withArgName("file").hasArg().withLongOpt(ARGUMENT.VERBOSE_LOG)
 204  
                 .withDescription("The file path to write verbose logging information.")
 205  
                 .create(ARGUMENT.VERBOSE_LOG_SHORT);
 206  
 
 207  11
         final Option suppressionFile = OptionBuilder.withArgName("file").hasArg().withLongOpt(ARGUMENT.SUPPRESSION_FILE)
 208  
                 .withDescription("The file path to the suppression XML file.")
 209  
                 .create();
 210  
 
 211  
         //This is an option group because it can be specified more then once.
 212  11
         final OptionGroup og = new OptionGroup();
 213  11
         og.addOption(path);
 214  
 
 215  11
         options.addOptionGroup(og)
 216  
                 .addOption(out)
 217  
                 .addOption(outputFormat)
 218  
                 .addOption(appName)
 219  
                 .addOption(version)
 220  
                 .addOption(help)
 221  
                 .addOption(advancedHelp)
 222  
                 .addOption(noUpdate)
 223  
                 .addOption(props)
 224  
                 .addOption(verboseLog)
 225  
                 .addOption(suppressionFile);
 226  11
     }
 227  
 
 228  
     /**
 229  
      * Adds the advanced command line options to the given options collection. These are split out for purposes of being
 230  
      * able to display two different help messages.
 231  
      *
 232  
      * @param options a collection of command line arguments
 233  
      * @throws IllegalArgumentException thrown if there is an exception
 234  
      */
 235  
     @SuppressWarnings("static-access")
 236  
     private void addAdvancedOptions(final Options options) throws IllegalArgumentException {
 237  
 
 238  9
         final Option data = OptionBuilder.withArgName("path").hasArg().withLongOpt(ARGUMENT.DATA_DIRECTORY)
 239  
                 .withDescription("The location of the H2 Database file. This option should generally not be set.")
 240  
                 .create(ARGUMENT.DATA_DIRECTORY_SHORT);
 241  
 
 242  9
         final Option connectionTimeout = OptionBuilder.withArgName("timeout").hasArg().withLongOpt(ARGUMENT.CONNECTION_TIMEOUT)
 243  
                 .withDescription("The connection timeout (in milliseconds) to use when downloading resources.")
 244  
                 .create(ARGUMENT.CONNECTION_TIMEOUT_SHORT);
 245  
 
 246  9
         final Option proxyServer = OptionBuilder.withArgName("server").hasArg().withLongOpt(ARGUMENT.PROXY_SERVER)
 247  
                 .withDescription("The proxy server to use when downloading resources.")
 248  
                 .create();
 249  
 
 250  9
         final Option proxyPort = OptionBuilder.withArgName("port").hasArg().withLongOpt(ARGUMENT.PROXY_PORT)
 251  
                 .withDescription("The proxy port to use when downloading resources.")
 252  
                 .create();
 253  
 
 254  9
         final Option proxyUsername = OptionBuilder.withArgName("user").hasArg().withLongOpt(ARGUMENT.PROXY_USERNAME)
 255  
                 .withDescription("The proxy username to use when downloading resources.")
 256  
                 .create();
 257  
 
 258  9
         final Option proxyPassword = OptionBuilder.withArgName("pass").hasArg().withLongOpt(ARGUMENT.PROXY_PASSWORD)
 259  
                 .withDescription("The proxy password to use when downloading resources.")
 260  
                 .create();
 261  
 
 262  9
         final Option connectionString = OptionBuilder.withArgName("connStr").hasArg().withLongOpt(ARGUMENT.CONNECTION_STRING)
 263  
                 .withDescription("The connection string to the database.")
 264  
                 .create();
 265  
 
 266  9
         final Option dbUser = OptionBuilder.withArgName("user").hasArg().withLongOpt(ARGUMENT.DB_NAME)
 267  
                 .withDescription("The username used to connect to the database.")
 268  
                 .create();
 269  
 
 270  9
         final Option dbPassword = OptionBuilder.withArgName("password").hasArg().withLongOpt(ARGUMENT.DB_PASSWORD)
 271  
                 .withDescription("The password for connecting to the database.")
 272  
                 .create();
 273  
 
 274  9
         final Option dbDriver = OptionBuilder.withArgName("driver").hasArg().withLongOpt(ARGUMENT.DB_DRIVER)
 275  
                 .withDescription("The database driver name.")
 276  
                 .create();
 277  
 
 278  9
         final Option dbDriverPath = OptionBuilder.withArgName("path").hasArg().withLongOpt(ARGUMENT.DB_DRIVER_PATH)
 279  
                 .withDescription("The path to the database driver; note, this does not need to be set unless the JAR is outside of the classpath.")
 280  
                 .create();
 281  
 
 282  9
         final Option disableJarAnalyzer = OptionBuilder.withLongOpt(ARGUMENT.DISABLE_JAR)
 283  
                 .withDescription("Disable the Jar Analyzer.")
 284  
                 .create();
 285  9
         final Option disableArchiveAnalyzer = OptionBuilder.withLongOpt(ARGUMENT.DISABLE_ARCHIVE)
 286  
                 .withDescription("Disable the Archive Analyzer.")
 287  
                 .create();
 288  9
         final Option disableNuspecAnalyzer = OptionBuilder.withLongOpt(ARGUMENT.DISABLE_NUSPEC)
 289  
                 .withDescription("Disable the Nuspec Analyzer.")
 290  
                 .create();
 291  9
         final Option disableAssemblyAnalyzer = OptionBuilder.withLongOpt(ARGUMENT.DISABLE_ASSEMBLY)
 292  
                 .withDescription("Disable the .NET Assembly Analyzer.")
 293  
                 .create();
 294  
 
 295  9
         final Option disableNexusAnalyzer = OptionBuilder.withLongOpt(ARGUMENT.DISABLE_NEXUS)
 296  
                 .withDescription("Disable the Nexus Analyzer.")
 297  
                 .create();
 298  
 
 299  9
         final Option nexusUrl = OptionBuilder.withArgName("url").hasArg().withLongOpt(ARGUMENT.NEXUS_URL)
 300  
                 .withDescription("The url to the Nexus Server.")
 301  
                 .create();
 302  
 
 303  9
         final Option nexusUsesProxy = OptionBuilder.withArgName("true/false").hasArg().withLongOpt(ARGUMENT.NEXUS_USES_PROXY)
 304  
                 .withDescription("Whether or not the configured proxy should be used when connecting to Nexus.")
 305  
                 .create();
 306  
 
 307  9
         final Option additionalZipExtensions = OptionBuilder.withArgName("extensions").hasArg()
 308  
                 .withLongOpt(ARGUMENT.ADDITIONAL_ZIP_EXTENSIONS)
 309  
                 .withDescription("A comma separated list of additional extensions to be scanned as ZIP files "
 310  
                         + "(ZIP, EAR, WAR are already treated as zip files)")
 311  
                 .create();
 312  
 
 313  9
         final Option pathToMono = OptionBuilder.withArgName("path").hasArg().withLongOpt(ARGUMENT.PATH_TO_MONO)
 314  
                 .withDescription("The path to Mono for .NET Assembly analysis on non-windows systems.")
 315  
                 .create();
 316  
 
 317  9
         options.addOption(proxyPort)
 318  
                 .addOption(proxyServer)
 319  
                 .addOption(proxyUsername)
 320  
                 .addOption(proxyPassword)
 321  
                 .addOption(connectionTimeout)
 322  
                 .addOption(connectionString)
 323  
                 .addOption(dbUser)
 324  
                 .addOption(data)
 325  
                 .addOption(dbPassword)
 326  
                 .addOption(dbDriver)
 327  
                 .addOption(dbDriverPath)
 328  
                 .addOption(disableJarAnalyzer)
 329  
                 .addOption(disableArchiveAnalyzer)
 330  
                 .addOption(disableAssemblyAnalyzer)
 331  
                 .addOption(disableNuspecAnalyzer)
 332  
                 .addOption(disableNexusAnalyzer)
 333  
                 .addOption(nexusUrl)
 334  
                 .addOption(nexusUsesProxy)
 335  
                 .addOption(additionalZipExtensions)
 336  
                 .addOption(pathToMono);
 337  9
     }
 338  
 
 339  
     /**
 340  
      * Adds the deprecated command line options to the given options collection. These are split out for purposes of not
 341  
      * including them in the help message. We need to add the deprecated options so as not to break existing scripts.
 342  
      *
 343  
      * @param options a collection of command line arguments
 344  
      * @throws IllegalArgumentException thrown if there is an exception
 345  
      */
 346  
     @SuppressWarnings("static-access")
 347  
     private void addDeprecatedOptions(final Options options) throws IllegalArgumentException {
 348  
 
 349  9
         final Option proxyServer = OptionBuilder.withArgName("url").hasArg().withLongOpt(ARGUMENT.PROXY_URL)
 350  
                 .withDescription("The proxy url argument is deprecated, use proxyserver instead.")
 351  
                 .create();
 352  
 
 353  9
         options.addOption(proxyServer);
 354  9
     }
 355  
 
 356  
     /**
 357  
      * Determines if the 'version' command line argument was passed in.
 358  
      *
 359  
      * @return whether or not the 'version' command line argument was passed in
 360  
      */
 361  
     public boolean isGetVersion() {
 362  7
         return (line != null) && line.hasOption(ARGUMENT.VERSION);
 363  
     }
 364  
 
 365  
     /**
 366  
      * Determines if the 'help' command line argument was passed in.
 367  
      *
 368  
      * @return whether or not the 'help' command line argument was passed in
 369  
      */
 370  
     public boolean isGetHelp() {
 371  7
         return (line != null) && line.hasOption(ARGUMENT.HELP);
 372  
     }
 373  
 
 374  
     /**
 375  
      * Determines if the 'scan' command line argument was passed in.
 376  
      *
 377  
      * @return whether or not the 'scan' command line argument was passed in
 378  
      */
 379  
     public boolean isRunScan() {
 380  14
         return (line != null) && isValid && line.hasOption(ARGUMENT.SCAN);
 381  
     }
 382  
 
 383  
     /**
 384  
      * Returns true if the disableJar command line argument was specified.
 385  
      *
 386  
      * @return true if the disableJar command line argument was specified; otherwise false
 387  
      */
 388  
     public boolean isJarDisabled() {
 389  0
         return (line != null) && line.hasOption(ARGUMENT.DISABLE_JAR);
 390  
     }
 391  
 
 392  
     /**
 393  
      * Returns true if the disableArchive command line argument was specified.
 394  
      *
 395  
      * @return true if the disableArchive command line argument was specified; otherwise false
 396  
      */
 397  
     public boolean isArchiveDisabled() {
 398  0
         return (line != null) && line.hasOption(ARGUMENT.DISABLE_ARCHIVE);
 399  
     }
 400  
 
 401  
     /**
 402  
      * Returns true if the disableNuspec command line argument was specified.
 403  
      *
 404  
      * @return true if the disableNuspec command line argument was specified; otherwise false
 405  
      */
 406  
     public boolean isNuspecDisabled() {
 407  0
         return (line != null) && line.hasOption(ARGUMENT.DISABLE_NUSPEC);
 408  
     }
 409  
 
 410  
     /**
 411  
      * Returns true if the disableAssembly command line argument was specified.
 412  
      *
 413  
      * @return true if the disableAssembly command line argument was specified; otherwise false
 414  
      */
 415  
     public boolean isAssemblyDisabled() {
 416  0
         return (line != null) && line.hasOption(ARGUMENT.DISABLE_ASSEMBLY);
 417  
     }
 418  
 
 419  
     /**
 420  
      * Returns true if the disableNexus command line argument was specified.
 421  
      *
 422  
      * @return true if the disableNexus command line argument was specified; otherwise false
 423  
      */
 424  
     public boolean isNexusDisabled() {
 425  0
         return (line != null) && line.hasOption(ARGUMENT.DISABLE_NEXUS);
 426  
     }
 427  
 
 428  
     /**
 429  
      * Returns the url to the nexus server if one was specified.
 430  
      *
 431  
      * @return the url to the nexus server; if none was specified this will return null;
 432  
      */
 433  
     public String getNexusUrl() {
 434  0
         if (line == null || !line.hasOption(ARGUMENT.NEXUS_URL)) {
 435  0
             return null;
 436  
         } else {
 437  0
             return line.getOptionValue(ARGUMENT.NEXUS_URL);
 438  
         }
 439  
     }
 440  
 
 441  
     /**
 442  
      * Returns true if the Nexus Analyzer should use the configured proxy to connect to Nexus; otherwise false is
 443  
      * returned.
 444  
      *
 445  
      * @return true if the Nexus Analyzer should use the configured proxy to connect to Nexus; otherwise false
 446  
      */
 447  
     public boolean isNexusUsesProxy() {
 448  
         // If they didn't specify whether Nexus needs to use the proxy, we should
 449  
         // still honor the property if it's set.
 450  0
         if (line == null || !line.hasOption(ARGUMENT.NEXUS_USES_PROXY)) {
 451  
             try {
 452  0
                 return Settings.getBoolean(Settings.KEYS.ANALYZER_NEXUS_PROXY);
 453  0
             } catch (InvalidSettingException ise) {
 454  0
                 return true;
 455  
             }
 456  
         } else {
 457  0
             return Boolean.parseBoolean(line.getOptionValue(ARGUMENT.NEXUS_USES_PROXY));
 458  
         }
 459  
     }
 460  
 
 461  
     /**
 462  
      * Displays the command line help message to the standard output.
 463  
      */
 464  
     public void printHelp() {
 465  2
         final HelpFormatter formatter = new HelpFormatter();
 466  2
         final Options options = new Options();
 467  2
         addStandardOptions(options);
 468  2
         if (line != null && line.hasOption(ARGUMENT.ADVANCED_HELP)) {
 469  0
             addAdvancedOptions(options);
 470  
         }
 471  2
         final String helpMsg = String.format("%n%s"
 472  
                 + " can be used to identify if there are any known CVE vulnerabilities in libraries utilized by an application. "
 473  
                 + "%s will automatically update required data from the Internet, such as the CVE and CPE data files from nvd.nist.gov.%n%n",
 474  
                 Settings.getString("application.name", "DependencyCheck"),
 475  
                 Settings.getString("application.name", "DependencyCheck"));
 476  
 
 477  2
         formatter.printHelp(Settings.getString("application.name", "DependencyCheck"),
 478  
                 helpMsg,
 479  
                 options,
 480  
                 "",
 481  
                 true);
 482  
 
 483  2
     }
 484  
 
 485  
     /**
 486  
      * Retrieves the file command line parameter(s) specified for the 'scan' argument.
 487  
      *
 488  
      * @return the file paths specified on the command line for scan
 489  
      */
 490  
     public String[] getScanFiles() {
 491  3
         return line.getOptionValues(ARGUMENT.SCAN);
 492  
     }
 493  
 
 494  
     /**
 495  
      * Returns the directory to write the reports to specified on the command line.
 496  
      *
 497  
      * @return the path to the reports directory.
 498  
      */
 499  
     public String getReportDirectory() {
 500  1
         return line.getOptionValue(ARGUMENT.OUT, ".");
 501  
     }
 502  
 
 503  
     /**
 504  
      * Returns the path to Mono for .NET Assembly analysis on non-windows systems.
 505  
      *
 506  
      * @return the path to Mono
 507  
      */
 508  
     public String getPathToMono() {
 509  1
         return line.getOptionValue(ARGUMENT.PATH_TO_MONO);
 510  
     }
 511  
 
 512  
     /**
 513  
      * Returns the output format specified on the command line. Defaults to HTML if no format was specified.
 514  
      *
 515  
      * @return the output format name.
 516  
      */
 517  
     public String getReportFormat() {
 518  0
         return line.getOptionValue(ARGUMENT.OUTPUT_FORMAT, "HTML");
 519  
     }
 520  
 
 521  
     /**
 522  
      * Returns the application name specified on the command line.
 523  
      *
 524  
      * @return the application name.
 525  
      */
 526  
     public String getApplicationName() {
 527  0
         return line.getOptionValue(ARGUMENT.APP_NAME);
 528  
     }
 529  
 
 530  
     /**
 531  
      * Returns the connection timeout.
 532  
      *
 533  
      * @return the connection timeout
 534  
      */
 535  
     public String getConnectionTimeout() {
 536  0
         return line.getOptionValue(ARGUMENT.CONNECTION_TIMEOUT);
 537  
     }
 538  
 
 539  
     /**
 540  
      * Returns the proxy server.
 541  
      *
 542  
      * @return the proxy server
 543  
      */
 544  
     public String getProxyServer() {
 545  
 
 546  0
         String server = line.getOptionValue(ARGUMENT.PROXY_SERVER);
 547  0
         if (server == null) {
 548  0
             server = line.getOptionValue(ARGUMENT.PROXY_URL);
 549  0
             if (server != null) {
 550  0
                 LOGGER.warning("An old command line argument 'proxyurl' was detected; use proxyserver instead");
 551  
             }
 552  
         }
 553  0
         return server;
 554  
     }
 555  
 
 556  
     /**
 557  
      * Returns the proxy port.
 558  
      *
 559  
      * @return the proxy port
 560  
      */
 561  
     public String getProxyPort() {
 562  0
         return line.getOptionValue(ARGUMENT.PROXY_PORT);
 563  
     }
 564  
 
 565  
     /**
 566  
      * Returns the proxy username.
 567  
      *
 568  
      * @return the proxy username
 569  
      */
 570  
     public String getProxyUsername() {
 571  0
         return line.getOptionValue(ARGUMENT.PROXY_USERNAME);
 572  
     }
 573  
 
 574  
     /**
 575  
      * Returns the proxy password.
 576  
      *
 577  
      * @return the proxy password
 578  
      */
 579  
     public String getProxyPassword() {
 580  0
         return line.getOptionValue(ARGUMENT.PROXY_PASSWORD);
 581  
     }
 582  
 
 583  
     /**
 584  
      * Get the value of dataDirectory.
 585  
      *
 586  
      * @return the value of dataDirectory
 587  
      */
 588  
     public String getDataDirectory() {
 589  0
         return line.getOptionValue(ARGUMENT.DATA_DIRECTORY);
 590  
     }
 591  
 
 592  
     /**
 593  
      * Returns the properties file specified on the command line.
 594  
      *
 595  
      * @return the properties file specified on the command line
 596  
      */
 597  
     public File getPropertiesFile() {
 598  0
         final String path = line.getOptionValue(ARGUMENT.PROP);
 599  0
         if (path != null) {
 600  0
             return new File(path);
 601  
         }
 602  0
         return null;
 603  
     }
 604  
 
 605  
     /**
 606  
      * Returns the path to the verbose log file.
 607  
      *
 608  
      * @return the path to the verbose log file
 609  
      */
 610  
     public String getVerboseLog() {
 611  0
         return line.getOptionValue(ARGUMENT.VERBOSE_LOG);
 612  
     }
 613  
 
 614  
     /**
 615  
      * Returns the path to the suppression file.
 616  
      *
 617  
      * @return the path to the suppression file
 618  
      */
 619  
     public String getSuppressionFile() {
 620  0
         return line.getOptionValue(ARGUMENT.SUPPRESSION_FILE);
 621  
     }
 622  
 
 623  
     /**
 624  
      * <p>
 625  
      * Prints the manifest information to standard output.</p>
 626  
      * <ul><li>Implementation-Title: ${pom.name}</li>
 627  
      * <li>Implementation-Version: ${pom.version}</li></ul>
 628  
      */
 629  
     public void printVersionInfo() {
 630  1
         final String version = String.format("%s version %s",
 631  
                 Settings.getString("application.name", "DependencyCheck"),
 632  
                 Settings.getString("application.version", "Unknown"));
 633  1
         System.out.println(version);
 634  1
     }
 635  
 
 636  
     /**
 637  
      * Checks if the auto update feature has been disabled. If it has been disabled via the command line this will
 638  
      * return false.
 639  
      *
 640  
      * @return if auto-update is allowed.
 641  
      */
 642  
     public boolean isAutoUpdate() {
 643  0
         return (line == null) || !line.hasOption(ARGUMENT.DISABLE_AUTO_UPDATE);
 644  
     }
 645  
 
 646  
     /**
 647  
      * Returns the database driver name if specified; otherwise null is returned.
 648  
      *
 649  
      * @return the database driver name if specified; otherwise null is returned
 650  
      */
 651  
     public String getDatabaseDriverName() {
 652  0
         return line.getOptionValue(ARGUMENT.DB_DRIVER);
 653  
     }
 654  
 
 655  
     /**
 656  
      * Returns the database driver path if specified; otherwise null is returned.
 657  
      *
 658  
      * @return the database driver name if specified; otherwise null is returned
 659  
      */
 660  
     public String getDatabaseDriverPath() {
 661  0
         return line.getOptionValue(ARGUMENT.DB_DRIVER_PATH);
 662  
     }
 663  
 
 664  
     /**
 665  
      * Returns the database connection string if specified; otherwise null is returned.
 666  
      *
 667  
      * @return the database connection string if specified; otherwise null is returned
 668  
      */
 669  
     public String getConnectionString() {
 670  0
         return line.getOptionValue(ARGUMENT.CONNECTION_STRING);
 671  
     }
 672  
 
 673  
     /**
 674  
      * Returns the database database user name if specified; otherwise null is returned.
 675  
      *
 676  
      * @return the database database user name if specified; otherwise null is returned
 677  
      */
 678  
     public String getDatabaseUser() {
 679  0
         return line.getOptionValue(ARGUMENT.DB_NAME);
 680  
     }
 681  
 
 682  
     /**
 683  
      * Returns the database database password if specified; otherwise null is returned.
 684  
      *
 685  
      * @return the database database password if specified; otherwise null is returned
 686  
      */
 687  
     public String getDatabasePassword() {
 688  0
         return line.getOptionValue(ARGUMENT.DB_PASSWORD);
 689  
     }
 690  
 
 691  
     /**
 692  
      * Returns the additional Extensions if specified; otherwise null is returned.
 693  
      *
 694  
      * @return the additional Extensions; otherwise null is returned
 695  
      */
 696  
     public String getAdditionalZipExtensions() {
 697  0
         return line.getOptionValue(ARGUMENT.ADDITIONAL_ZIP_EXTENSIONS);
 698  
     }
 699  
 
 700  
     /**
 701  
      * A collection of static final strings that represent the possible command line arguments.
 702  
      */
 703  
     public static class ARGUMENT {
 704  
 
 705  
         /**
 706  
          * The long CLI argument name specifying the directory/file to scan.
 707  
          */
 708  
         public static final String SCAN = "scan";
 709  
         /**
 710  
          * The short CLI argument name specifying the directory/file to scan.
 711  
          */
 712  
         public static final String SCAN_SHORT = "s";
 713  
         /**
 714  
          * The long CLI argument name specifying that the CPE/CVE/etc. data should not be automatically updated.
 715  
          */
 716  
         public static final String DISABLE_AUTO_UPDATE = "noupdate";
 717  
         /**
 718  
          * The short CLI argument name specifying that the CPE/CVE/etc. data should not be automatically updated.
 719  
          */
 720  
         public static final String DISABLE_AUTO_UPDATE_SHORT = "n";
 721  
         /**
 722  
          * The long CLI argument name specifying the directory to write the reports to.
 723  
          */
 724  
         public static final String OUT = "out";
 725  
         /**
 726  
          * The short CLI argument name specifying the directory to write the reports to.
 727  
          */
 728  
         public static final String OUT_SHORT = "o";
 729  
         /**
 730  
          * The long CLI argument name specifying the output format to write the reports to.
 731  
          */
 732  
         public static final String OUTPUT_FORMAT = "format";
 733  
         /**
 734  
          * The short CLI argument name specifying the output format to write the reports to.
 735  
          */
 736  
         public static final String OUTPUT_FORMAT_SHORT = "f";
 737  
         /**
 738  
          * The long CLI argument name specifying the name of the application to be scanned.
 739  
          */
 740  
         public static final String APP_NAME = "app";
 741  
         /**
 742  
          * The short CLI argument name specifying the name of the application to be scanned.
 743  
          */
 744  
         public static final String APP_NAME_SHORT = "a";
 745  
         /**
 746  
          * The long CLI argument name asking for help.
 747  
          */
 748  
         public static final String HELP = "help";
 749  
         /**
 750  
          * The long CLI argument name asking for advanced help.
 751  
          */
 752  
         public static final String ADVANCED_HELP = "advancedHelp";
 753  
         /**
 754  
          * The short CLI argument name asking for help.
 755  
          */
 756  
         public static final String HELP_SHORT = "h";
 757  
         /**
 758  
          * The long CLI argument name asking for the version.
 759  
          */
 760  
         public static final String VERSION_SHORT = "v";
 761  
         /**
 762  
          * The short CLI argument name asking for the version.
 763  
          */
 764  
         public static final String VERSION = "version";
 765  
         /**
 766  
          * The CLI argument name indicating the proxy port.
 767  
          */
 768  
         public static final String PROXY_PORT = "proxyport";
 769  
         /**
 770  
          * The CLI argument name indicating the proxy server.
 771  
          */
 772  
         public static final String PROXY_SERVER = "proxyserver";
 773  
         /**
 774  
          * The CLI argument name indicating the proxy url.
 775  
          *
 776  
          * @deprecated use {@link org.owasp.dependencycheck.cli.CliParser.ArgumentName#PROXY_SERVER} instead
 777  
          */
 778  
         @Deprecated
 779  
         public static final String PROXY_URL = "proxyurl";
 780  
         /**
 781  
          * The CLI argument name indicating the proxy username.
 782  
          */
 783  
         public static final String PROXY_USERNAME = "proxyuser";
 784  
         /**
 785  
          * The CLI argument name indicating the proxy password.
 786  
          */
 787  
         public static final String PROXY_PASSWORD = "proxypass";
 788  
         /**
 789  
          * The short CLI argument name indicating the connection timeout.
 790  
          */
 791  
         public static final String CONNECTION_TIMEOUT_SHORT = "c";
 792  
         /**
 793  
          * The CLI argument name indicating the connection timeout.
 794  
          */
 795  
         public static final String CONNECTION_TIMEOUT = "connectiontimeout";
 796  
         /**
 797  
          * The short CLI argument name for setting the location of an additional properties file.
 798  
          */
 799  
         public static final String PROP_SHORT = "P";
 800  
         /**
 801  
          * The CLI argument name for setting the location of an additional properties file.
 802  
          */
 803  
         public static final String PROP = "propertyfile";
 804  
         /**
 805  
          * The CLI argument name for setting the location of the data directory.
 806  
          */
 807  
         public static final String DATA_DIRECTORY = "data";
 808  
         /**
 809  
          * The short CLI argument name for setting the location of the data directory.
 810  
          */
 811  
         public static final String DATA_DIRECTORY_SHORT = "d";
 812  
         /**
 813  
          * The CLI argument name for setting the location of the data directory.
 814  
          */
 815  
         public static final String VERBOSE_LOG = "log";
 816  
         /**
 817  
          * The short CLI argument name for setting the location of the data directory.
 818  
          */
 819  
         public static final String VERBOSE_LOG_SHORT = "l";
 820  
         /**
 821  
          * The CLI argument name for setting the location of the suppression file.
 822  
          */
 823  
         public static final String SUPPRESSION_FILE = "suppression";
 824  
         /**
 825  
          * Disables the Jar Analyzer.
 826  
          */
 827  
         public static final String DISABLE_JAR = "disableJar";
 828  
         /**
 829  
          * Disables the Archive Analyzer.
 830  
          */
 831  
         public static final String DISABLE_ARCHIVE = "disableArchive";
 832  
         /**
 833  
          * Disables the Assembly Analyzer.
 834  
          */
 835  
         public static final String DISABLE_ASSEMBLY = "disableAssembly";
 836  
         /**
 837  
          * Disables the Nuspec Analyzer.
 838  
          */
 839  
         public static final String DISABLE_NUSPEC = "disableNuspec";
 840  
         /**
 841  
          * Disables the Nexus Analyzer.
 842  
          */
 843  
         public static final String DISABLE_NEXUS = "disableNexus";
 844  
         /**
 845  
          * The URL of the nexus server.
 846  
          */
 847  
         public static final String NEXUS_URL = "nexus";
 848  
         /**
 849  
          * Whether or not the defined proxy should be used when connecting to Nexus.
 850  
          */
 851  
         public static final String NEXUS_USES_PROXY = "nexusUsesProxy";
 852  
         /**
 853  
          * The CLI argument name for setting the connection string.
 854  
          */
 855  
         public static final String CONNECTION_STRING = "connectionString";
 856  
         /**
 857  
          * The CLI argument name for setting the database user name.
 858  
          */
 859  
         public static final String DB_NAME = "dbUser";
 860  
         /**
 861  
          * The CLI argument name for setting the database password.
 862  
          */
 863  
         public static final String DB_PASSWORD = "dbPassword";
 864  
         /**
 865  
          * The CLI argument name for setting the database driver name.
 866  
          */
 867  
         public static final String DB_DRIVER = "dbDriverName";
 868  
         /**
 869  
          * The CLI argument name for setting the path to the database driver; in case it is not on the class path.
 870  
          */
 871  
         public static final String DB_DRIVER_PATH = "dbDriverPath";
 872  
         /**
 873  
          * The CLI argument name for setting the path to mono for .NET Assembly analysis on non-windows systems.
 874  
          */
 875  
         public static final String PATH_TO_MONO = "mono";
 876  
         /**
 877  
          * The CLI argument name for setting extra extensions.
 878  
          */
 879  
         public static final String ADDITIONAL_ZIP_EXTENSIONS = "zipExtensions";
 880  
     }
 881  
 }