| 1 | |
|
| 2 | |
|
| 3 | |
|
| 4 | |
|
| 5 | |
|
| 6 | |
|
| 7 | |
|
| 8 | |
|
| 9 | |
|
| 10 | |
|
| 11 | |
|
| 12 | |
|
| 13 | |
|
| 14 | |
|
| 15 | |
|
| 16 | |
|
| 17 | |
|
| 18 | |
|
| 19 | |
package org.owasp.dependencycheck; |
| 20 | |
|
| 21 | |
import java.io.File; |
| 22 | |
import java.io.FileNotFoundException; |
| 23 | |
import java.io.IOException; |
| 24 | |
import java.io.InputStream; |
| 25 | |
import java.util.List; |
| 26 | |
import java.util.logging.Level; |
| 27 | |
import java.util.logging.Logger; |
| 28 | |
import org.apache.commons.cli.ParseException; |
| 29 | |
import org.owasp.dependencycheck.reporting.ReportGenerator; |
| 30 | |
import org.owasp.dependencycheck.dependency.Dependency; |
| 31 | |
import org.owasp.dependencycheck.cli.CliParser; |
| 32 | |
import org.owasp.dependencycheck.utils.LogUtils; |
| 33 | |
import org.owasp.dependencycheck.utils.Settings; |
| 34 | |
|
| 35 | |
|
| 36 | |
|
| 37 | |
|
| 38 | |
|
| 39 | |
|
| 40 | |
|
| 41 | |
|
| 42 | |
|
| 43 | |
|
| 44 | |
|
| 45 | |
|
| 46 | |
|
| 47 | |
|
| 48 | |
|
| 49 | |
|
| 50 | |
|
| 51 | |
|
| 52 | |
|
| 53 | |
|
| 54 | |
|
| 55 | |
|
| 56 | |
|
| 57 | 0 | public class App { |
| 58 | |
|
| 59 | |
|
| 60 | |
|
| 61 | |
|
| 62 | |
private static final String LOG_PROPERTIES_FILE = "log.properties"; |
| 63 | |
|
| 64 | |
|
| 65 | |
|
| 66 | |
|
| 67 | |
|
| 68 | |
|
| 69 | |
public static void main(String[] args) { |
| 70 | 0 | final App app = new App(); |
| 71 | 0 | app.run(args); |
| 72 | 0 | } |
| 73 | |
|
| 74 | |
|
| 75 | |
|
| 76 | |
|
| 77 | |
|
| 78 | |
|
| 79 | |
public void run(String[] args) { |
| 80 | |
|
| 81 | 0 | final CliParser cli = new CliParser(); |
| 82 | |
try { |
| 83 | 0 | cli.parse(args); |
| 84 | 0 | } catch (FileNotFoundException ex) { |
| 85 | 0 | System.err.println(ex.getMessage()); |
| 86 | 0 | cli.printHelp(); |
| 87 | 0 | return; |
| 88 | 0 | } catch (ParseException ex) { |
| 89 | 0 | System.err.println(ex.getMessage()); |
| 90 | 0 | cli.printHelp(); |
| 91 | 0 | return; |
| 92 | 0 | } |
| 93 | |
|
| 94 | 0 | final InputStream in = App.class.getClassLoader().getResourceAsStream(LOG_PROPERTIES_FILE); |
| 95 | 0 | LogUtils.prepareLogger(in, cli.getVerboseLog()); |
| 96 | |
|
| 97 | 0 | if (cli.isGetVersion()) { |
| 98 | 0 | cli.printVersionInfo(); |
| 99 | 0 | } else if (cli.isRunScan()) { |
| 100 | 0 | updateSettings(cli.isAutoUpdate(), cli.getConnectionTimeout(), cli.getProxyUrl(), |
| 101 | |
cli.getProxyPort(), cli.getProxyUsername(), cli.getProxyPassword(), |
| 102 | |
cli.getDataDirectory(), cli.getPropertiesFile(), cli.getSuppressionFile()); |
| 103 | 0 | runScan(cli.getReportDirectory(), cli.getReportFormat(), cli.getApplicationName(), cli.getScanFiles()); |
| 104 | |
} else { |
| 105 | 0 | cli.printHelp(); |
| 106 | |
} |
| 107 | 0 | } |
| 108 | |
|
| 109 | |
|
| 110 | |
|
| 111 | |
|
| 112 | |
|
| 113 | |
|
| 114 | |
|
| 115 | |
|
| 116 | |
|
| 117 | |
|
| 118 | |
|
| 119 | |
private void runScan(String reportDirectory, String outputFormat, String applicationName, String[] files) { |
| 120 | 0 | final Engine scanner = new Engine(); |
| 121 | |
|
| 122 | 0 | for (String file : files) { |
| 123 | 0 | scanner.scan(file); |
| 124 | |
} |
| 125 | |
|
| 126 | 0 | scanner.analyzeDependencies(); |
| 127 | 0 | final List<Dependency> dependencies = scanner.getDependencies(); |
| 128 | |
|
| 129 | 0 | final ReportGenerator report = new ReportGenerator(applicationName, dependencies, scanner.getAnalyzers()); |
| 130 | |
try { |
| 131 | 0 | report.generateReports(reportDirectory, outputFormat); |
| 132 | 0 | } catch (IOException ex) { |
| 133 | 0 | Logger.getLogger(App.class.getName()).log(Level.SEVERE, "There was an IO error while attempting to generate the report."); |
| 134 | 0 | Logger.getLogger(App.class.getName()).log(Level.INFO, null, ex); |
| 135 | 0 | } catch (Exception ex) { |
| 136 | 0 | Logger.getLogger(App.class.getName()).log(Level.SEVERE, "There was an error while attempting to generate the report."); |
| 137 | 0 | Logger.getLogger(App.class.getName()).log(Level.INFO, null, ex); |
| 138 | 0 | } |
| 139 | 0 | } |
| 140 | |
|
| 141 | |
|
| 142 | |
|
| 143 | |
|
| 144 | |
|
| 145 | |
|
| 146 | |
|
| 147 | |
|
| 148 | |
|
| 149 | |
|
| 150 | |
|
| 151 | |
|
| 152 | |
|
| 153 | |
|
| 154 | |
|
| 155 | |
|
| 156 | |
private void updateSettings(boolean autoUpdate, String connectionTimeout, String proxyUrl, String proxyPort, |
| 157 | |
String proxyUser, String proxyPass, String dataDirectory, File propertiesFile, |
| 158 | |
String suppressionFile) { |
| 159 | |
|
| 160 | 0 | if (propertiesFile != null) { |
| 161 | |
try { |
| 162 | 0 | Settings.mergeProperties(propertiesFile); |
| 163 | 0 | } catch (FileNotFoundException ex) { |
| 164 | 0 | final String msg = String.format("Unable to load properties file '%s'", propertiesFile.getPath()); |
| 165 | 0 | Logger.getLogger(App.class.getName()).log(Level.SEVERE, msg); |
| 166 | 0 | Logger.getLogger(App.class.getName()).log(Level.FINE, null, ex); |
| 167 | 0 | } catch (IOException ex) { |
| 168 | 0 | final String msg = String.format("Unable to find properties file '%s'", propertiesFile.getPath()); |
| 169 | 0 | Logger.getLogger(App.class.getName()).log(Level.SEVERE, msg); |
| 170 | 0 | Logger.getLogger(App.class.getName()).log(Level.FINE, null, ex); |
| 171 | 0 | } |
| 172 | |
} |
| 173 | 0 | if (dataDirectory != null) { |
| 174 | 0 | Settings.setString(Settings.KEYS.DATA_DIRECTORY, dataDirectory); |
| 175 | 0 | } else if (System.getProperty("basedir") != null) { |
| 176 | 0 | final File dataDir = new File(System.getProperty("basedir"), "data"); |
| 177 | 0 | Settings.setString(Settings.KEYS.DATA_DIRECTORY, dataDir.getAbsolutePath()); |
| 178 | 0 | } else { |
| 179 | 0 | final File jarPath = new File(App.class.getProtectionDomain().getCodeSource().getLocation().getPath()); |
| 180 | 0 | final File base = jarPath.getParentFile(); |
| 181 | 0 | final String sub = Settings.getString(Settings.KEYS.DATA_DIRECTORY); |
| 182 | 0 | final File dataDir = new File(base, sub); |
| 183 | 0 | Settings.setString(Settings.KEYS.DATA_DIRECTORY, dataDir.getAbsolutePath()); |
| 184 | |
} |
| 185 | 0 | Settings.setBoolean(Settings.KEYS.AUTO_UPDATE, autoUpdate); |
| 186 | 0 | if (proxyUrl != null && !proxyUrl.isEmpty()) { |
| 187 | 0 | Settings.setString(Settings.KEYS.PROXY_URL, proxyUrl); |
| 188 | |
} |
| 189 | 0 | if (proxyPort != null && !proxyPort.isEmpty()) { |
| 190 | 0 | Settings.setString(Settings.KEYS.PROXY_PORT, proxyPort); |
| 191 | |
} |
| 192 | 0 | if (proxyUser != null && !proxyUser.isEmpty()) { |
| 193 | 0 | Settings.setString(Settings.KEYS.PROXY_USERNAME, proxyUser); |
| 194 | |
} |
| 195 | 0 | if (proxyPass != null && !proxyPass.isEmpty()) { |
| 196 | 0 | Settings.setString(Settings.KEYS.PROXY_PASSWORD, proxyPass); |
| 197 | |
} |
| 198 | 0 | if (connectionTimeout != null && !connectionTimeout.isEmpty()) { |
| 199 | 0 | Settings.setString(Settings.KEYS.CONNECTION_TIMEOUT, connectionTimeout); |
| 200 | |
} |
| 201 | 0 | if (suppressionFile != null && !suppressionFile.isEmpty()) { |
| 202 | 0 | Settings.setString(Settings.KEYS.SUPPRESSION_FILE, suppressionFile); |
| 203 | |
} |
| 204 | 0 | } |
| 205 | |
} |