mirror of
https://github.com/ysoftdevs/DependencyCheck.git
synced 2026-01-16 08:36:55 +01:00
1158 lines
34 KiB
HTML
1158 lines
34 KiB
HTML
<!DOCTYPE html>
|
|
<!--
|
|
| Generated by Apache Maven Doxia at 2014-11-16
|
|
| Rendered using Apache Maven Fluido Skin 1.3.1
|
|
-->
|
|
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
|
|
<head>
|
|
<meta charset="UTF-8" />
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
|
|
<meta name="Date-Revision-yyyymmdd" content="20141116" />
|
|
<meta http-equiv="Content-Language" content="en" />
|
|
<title>dependency-check-maven -
|
|
dependency-check:check</title>
|
|
<link rel="stylesheet" href="./css/apache-maven-fluido-1.3.1.min.css" />
|
|
<link rel="stylesheet" href="./css/site.css" />
|
|
<link rel="stylesheet" href="./css/print.css" media="print" />
|
|
|
|
|
|
<script type="text/javascript" src="./js/apache-maven-fluido-1.3.1.min.js"></script>
|
|
|
|
|
|
|
|
<style type="text/css">#bannerLeft { margin-top:50px !important }</style>
|
|
|
|
</head>
|
|
<body class="topBarDisabled">
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<a href="http://github.com/jeremylong/DependencyCheck">
|
|
<img style="position: absolute; top: 0; right: 0; border: 0; z-index: 10000;"
|
|
src="https://s3.amazonaws.com/github/ribbons/forkme_right_gray_6d6d6d.png"
|
|
alt="Fork me on GitHub">
|
|
</a>
|
|
|
|
|
|
|
|
|
|
<div class="container-fluid">
|
|
<div id="banner">
|
|
<div class="pull-left">
|
|
<div id="bannerLeft">
|
|
<h2>dependency-check-maven</h2>
|
|
</div>
|
|
</div>
|
|
<div class="pull-right"> </div>
|
|
<div class="clear"><hr/></div>
|
|
</div>
|
|
|
|
<div id="breadcrumbs">
|
|
<ul class="breadcrumb">
|
|
|
|
|
|
<li class="">
|
|
<a href="../../../../../../../../../../../../c:/Users/jeremy/Documents/NetBeansProjects/DependencyCheck/target/site/1.2.6/#" title="">
|
|
</a>
|
|
<span class="divider">/</span>
|
|
</li>
|
|
<li class="">
|
|
<a href="../index.html" title="dependency-check">
|
|
dependency-check</a>
|
|
<span class="divider">/</span>
|
|
</li>
|
|
<li class="active ">
|
|
dependency-check:check</li>
|
|
|
|
|
|
|
|
<li id="publishDate" class="pull-right"><span class="divider">|</span> Last Published: 2014-11-16</li>
|
|
<li id="projectVersion" class="pull-right">
|
|
Version: 1.2.6
|
|
</li>
|
|
|
|
</ul>
|
|
</div>
|
|
|
|
|
|
<div class="row-fluid">
|
|
<div id="leftColumn" class="span3">
|
|
<div class="well sidebar-nav">
|
|
|
|
|
|
<ul class="nav nav-list">
|
|
<li class="nav-header">Getting Started</li>
|
|
|
|
<li>
|
|
|
|
<a href="usage.html" title="Usage">
|
|
<i class="none"></i>
|
|
Usage</a>
|
|
</li>
|
|
|
|
<li>
|
|
|
|
<a href="configuration.html" title="Configuration">
|
|
<i class="none"></i>
|
|
Configuration</a>
|
|
</li>
|
|
<li class="nav-header">Project Documentation</li>
|
|
|
|
<li>
|
|
|
|
<a href="project-info.html" title="Project Information">
|
|
<i class="icon-chevron-right"></i>
|
|
Project Information</a>
|
|
</li>
|
|
|
|
<li>
|
|
|
|
<a href="project-reports.html" title="Project Reports">
|
|
<i class="icon-chevron-right"></i>
|
|
Project Reports</a>
|
|
</li>
|
|
</ul>
|
|
|
|
|
|
|
|
<hr />
|
|
|
|
<div id="poweredBy">
|
|
|
|
<script type="text/javascript" src="https://apis.google.com/js/plusone.js"></script>
|
|
|
|
|
|
<div class="g-plusone" data-href="http://maven.apache.org" data-size="tall" ></div>
|
|
|
|
<div class="clear"></div>
|
|
<div class="clear"></div>
|
|
|
|
|
|
|
|
<div id="twitter">
|
|
|
|
<a href="https://twitter.com/ctxt" class="twitter-follow-button" data-show-count="true" data-align="left" data-size="medium" data-show-screen-name="true" data-lang="en">Follow ctxt</a>
|
|
<script type="text/javascript">!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0];if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src="//platform.twitter.com/widgets.js";fjs.parentNode.insertBefore(js,fjs);}}(document,"script","twitter-wjs");</script>
|
|
|
|
</div>
|
|
<div class="clear"></div>
|
|
<div class="clear"></div>
|
|
<a href="./" title="Maven" class="builtBy">
|
|
<img class="builtBy" alt="built with maven" src="http://jeremylong.github.io/DependencyCheck/images/logos/maven-feather.png" />
|
|
</a>
|
|
<a href="http://www.jetbrains.com/idea/" title="IntelliJ" class="builtBy">
|
|
<img class="builtBy" alt="developed using" src="http://jeremylong.github.io/DependencyCheck/images/logos/logo_intellij_idea.png" width="170px" />
|
|
</a>
|
|
<a href="http://www.cloudbees.com/" title="Cloudbees" class="builtBy">
|
|
<img class="builtBy" alt="built on cloudbees" src="http://jeremylong.github.io/DependencyCheck/images/logos/Button-Built-on-CB-1.png" />
|
|
</a>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
|
|
<div id="bodyColumn" class="span9" >
|
|
|
|
|
|
|
|
<div class="section">
|
|
<h2>dependency-check:check<a name="dependency-check:check"></a></h2>
|
|
|
|
<p><b>Note</b>:This goal should be used as a Maven report.</p>
|
|
|
|
<p><b>Full name</b>:</p>
|
|
|
|
<p>org.owasp:dependency-check-maven:1.2.6:check</p>
|
|
|
|
<p><b>Description</b>:</p>
|
|
|
|
<div>Maven Plugin that checks project dependencies to see if they have
|
|
any known published vulnerabilities.</div>
|
|
|
|
<p><b>Attributes</b>:</p>
|
|
|
|
<ul>
|
|
|
|
<li>Requires a Maven project to be executed.</li>
|
|
|
|
<li>Requires dependency resolution of artifacts in scope: <tt>runtime+system</tt>.</li>
|
|
|
|
<li>The goal is thread-safe and supports parallel builds.</li>
|
|
|
|
<li>Binds by default to the <a class="externalLink" href="http://maven.apache.org/ref/current/maven-core/lifecycles.html">lifecycle phase</a>: <tt>compile</tt>.</li>
|
|
|
|
<li>Requires that Maven runs in online mode.</li>
|
|
</ul>
|
|
|
|
<div class="section">
|
|
<h3>Required Parameters<a name="Required_Parameters"></a></h3>
|
|
|
|
<table class="table table-striped" border="0">
|
|
|
|
<tr class="a">
|
|
|
|
<th>Name</th>
|
|
|
|
<th>Type</th>
|
|
|
|
<th>Since</th>
|
|
|
|
<th>Description</th>
|
|
</tr>
|
|
|
|
<tr class="b">
|
|
|
|
<td><b><a href="#autoUpdate">autoUpdate</a></b></td>
|
|
|
|
<td><tt>boolean</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>Sets whether auto-updating of the NVD CVE/CPE data is enabled. It
|
|
is not recommended that this be turned to false. Default is true.<br /><b>Default value is</b>: <tt>true</tt>.<br /><b>User property is</b>: <tt>autoupdate</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="a">
|
|
|
|
<td><b><a href="#dataFileName">dataFileName</a></b></td>
|
|
|
|
<td><tt>String</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>Sets whether or not the external report format should be used.<br /><b>Default value is</b>: <tt>dependency-check.ser</tt>.<br /><b>User property is</b>: <tt>metaFileName</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="b">
|
|
|
|
<td><b><a href="#failBuildOnCVSS">failBuildOnCVSS</a></b></td>
|
|
|
|
<td><tt>float</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>Specifies if the build should be failed if a CVSS score above a
|
|
specified level is identified. The default is 11 which means since
|
|
the CVSS scores are 0-10, by default the build will never fail.<br /><b>Default value is</b>: <tt>11</tt>.<br /><b>User property is</b>: <tt>failBuildOnCVSS</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="a">
|
|
|
|
<td><b><a href="#format">format</a></b></td>
|
|
|
|
<td><tt>String</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>The report format to be generated (HTML, XML, VULN, ALL). This
|
|
configuration option has no affect if using this within the Site
|
|
plugin unless the externalReport is set to true. Default is HTML.<br /><b>Default value is</b>: <tt>HTML</tt>.<br /><b>User property is</b>: <tt>format</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="b">
|
|
|
|
<td><b><a href="#outputDirectory">outputDirectory</a></b></td>
|
|
|
|
<td><tt>File</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>The output directory. This generally maps to "target".<br /><b>Default value is</b>: <tt>${project.build.directory}</tt>.<br /></td>
|
|
</tr>
|
|
|
|
<tr class="a">
|
|
|
|
<td><b><a href="#reportOutputDirectory">reportOutputDirectory</a></b></td>
|
|
|
|
<td><tt>File</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>Specifies the destination directory for the generated
|
|
Dependency-Check report. This generally maps to "target/site".<br /><b>Default value is</b>: <tt>${project.reporting.outputDirectory}</tt>.<br /><b>User property is</b>: <tt>reportOutputDirectory</tt>.</td>
|
|
</tr>
|
|
</table>
|
|
</div>
|
|
|
|
<div class="section">
|
|
<h3>Optional Parameters<a name="Optional_Parameters"></a></h3>
|
|
|
|
<table class="table table-striped" border="0">
|
|
|
|
<tr class="a">
|
|
|
|
<th>Name</th>
|
|
|
|
<th>Type</th>
|
|
|
|
<th>Since</th>
|
|
|
|
<th>Description</th>
|
|
</tr>
|
|
|
|
<tr class="b">
|
|
|
|
<td><b><a href="#aggregate">aggregate</a></b></td>
|
|
|
|
<td><tt>boolean</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>Generate aggregate reports in multi-module projects.<br /><b>Default value is</b>: <tt>false</tt>.<br /><b>User property is</b>: <tt>aggregate</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="a">
|
|
|
|
<td><b><a href="#archiveAnalyzerEnabled">archiveAnalyzerEnabled</a></b></td>
|
|
|
|
<td><tt>boolean</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>Whether or not the Archive Analyzer is enabled.<br /><b>Default value is</b>: <tt>true</tt>.<br /><b>User property is</b>: <tt>archiveAnalyzerEnabled</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="b">
|
|
|
|
<td><b><a href="#assemblyAnalyzerEnabled">assemblyAnalyzerEnabled</a></b></td>
|
|
|
|
<td><tt>boolean</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>Whether or not the .NET Assembly Analyzer is enabled.<br /><b>Default value is</b>: <tt>true</tt>.<br /><b>User property is</b>: <tt>assemblyAnalyzerEnabled</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="a">
|
|
|
|
<td><b><a href="#connectionString">connectionString</a></b></td>
|
|
|
|
<td><tt>String</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>The database connection string.<br /><b>User property is</b>: <tt>connectionString</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="b">
|
|
|
|
<td><b><a href="#connectionTimeout">connectionTimeout</a></b></td>
|
|
|
|
<td><tt>String</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>The Connection Timeout.<br /><b>User property is</b>: <tt>connectionTimeout</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="a">
|
|
|
|
<td><b><a href="#cveUrl12Base">cveUrl12Base</a></b></td>
|
|
|
|
<td><tt>String</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>Base Data Mirror URL for CVE 1.2.<br /><b>User property is</b>: <tt>cveUrl12Base</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="b">
|
|
|
|
<td><b><a href="#cveUrl12Modified">cveUrl12Modified</a></b></td>
|
|
|
|
<td><tt>String</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>Data Mirror URL for CVE 1.2.<br /><b>User property is</b>: <tt>cveUrl12Modified</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="a">
|
|
|
|
<td><b><a href="#cveUrl20Base">cveUrl20Base</a></b></td>
|
|
|
|
<td><tt>String</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>Data Mirror URL for CVE 2.0.<br /><b>User property is</b>: <tt>cveUrl20Base</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="b">
|
|
|
|
<td><b><a href="#cveUrl20Modified">cveUrl20Modified</a></b></td>
|
|
|
|
<td><tt>String</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>Data Mirror URL for CVE 2.0.<br /><b>User property is</b>: <tt>cveUrl20Modified</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="a">
|
|
|
|
<td><b><a href="#dataDirectory">dataDirectory</a></b></td>
|
|
|
|
<td><tt>String</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>The data directory, hold DC SQL DB.<br /><b>User property is</b>: <tt>dataDirectory</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="b">
|
|
|
|
<td><b><a href="#databaseDriverName">databaseDriverName</a></b></td>
|
|
|
|
<td><tt>String</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>The database driver name. An example would be org.h2.Driver.<br /><b>User property is</b>: <tt>databaseDriverName</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="a">
|
|
|
|
<td><b><a href="#databaseDriverPath">databaseDriverPath</a></b></td>
|
|
|
|
<td><tt>String</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>The path to the database driver if it is not on the class path.<br /><b>User property is</b>: <tt>databaseDriverPath</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="b">
|
|
|
|
<td><b><a href="#databasePassword">databasePassword</a></b></td>
|
|
|
|
<td><tt>String</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>The password to use when connecting to the database.<br /><b>User property is</b>: <tt>databasePassword</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="a">
|
|
|
|
<td><b><a href="#databaseUser">databaseUser</a></b></td>
|
|
|
|
<td><tt>String</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>The database user name.<br /><b>User property is</b>: <tt>databaseUser</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="b">
|
|
|
|
<td><b><a href="#externalReport">externalReport</a></b></td>
|
|
|
|
<td><tt>String</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td><b>Deprecated.</b> the internal report is no longer supported<br /><b>User property is</b>: <tt>externalReport</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="a">
|
|
|
|
<td><b><a href="#jarAnalyzerEnabled">jarAnalyzerEnabled</a></b></td>
|
|
|
|
<td><tt>boolean</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>Whether or not the Jar Analyzer is enabled.<br /><b>Default value is</b>: <tt>true</tt>.<br /><b>User property is</b>: <tt>jarAnalyzerEnabled</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="b">
|
|
|
|
<td><b><a href="#logFile">logFile</a></b></td>
|
|
|
|
<td><tt>String</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>The path to the verbose log.<br /><b>User property is</b>: <tt>logfile</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="a">
|
|
|
|
<td><b><a href="#mavenSettings">mavenSettings</a></b></td>
|
|
|
|
<td><tt>Settings</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>The maven settings.<br /><b>Default value is</b>: <tt>${settings}</tt>.<br /><b>User property is</b>: <tt>mavenSettings</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="b">
|
|
|
|
<td><b><a href="#mavenSettingsProxyId">mavenSettingsProxyId</a></b></td>
|
|
|
|
<td><tt>String</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>The maven settings proxy id.<br /><b>User property is</b>: <tt>mavenSettingsProxyId</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="a">
|
|
|
|
<td><b><a href="#nexusAnalyzerEnabled">nexusAnalyzerEnabled</a></b></td>
|
|
|
|
<td><tt>boolean</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>Whether or not the Nexus Analyzer is enabled.<br /><b>Default value is</b>: <tt>true</tt>.<br /><b>User property is</b>: <tt>nexusAnalyzerEnabled</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="b">
|
|
|
|
<td><b><a href="#nexusUrl">nexusUrl</a></b></td>
|
|
|
|
<td><tt>String</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>Whether or not the Nexus Analyzer is enabled.<br /><b>User property is</b>: <tt>nexusUrl</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="a">
|
|
|
|
<td><b><a href="#nexusUsesProxy">nexusUsesProxy</a></b></td>
|
|
|
|
<td><tt>boolean</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>Whether or not the configured proxy is used to connect to Nexus.<br /><b>Default value is</b>: <tt>true</tt>.<br /><b>User property is</b>: <tt>nexusUsesProxy</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="b">
|
|
|
|
<td><b><a href="#nuspecAnalyzerEnabled">nuspecAnalyzerEnabled</a></b></td>
|
|
|
|
<td><tt>boolean</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>Whether or not the .NET Nuspec Analyzer is enabled.<br /><b>Default value is</b>: <tt>true</tt>.<br /><b>User property is</b>: <tt>nuspecAnalyzerEnabled</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="a">
|
|
|
|
<td><b><a href="#pathToMono">pathToMono</a></b></td>
|
|
|
|
<td><tt>String</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>The path to mono for .NET Assembly analysis on non-windows systems.<br /><b>User property is</b>: <tt>pathToMono</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="b">
|
|
|
|
<td><b><a href="#proxyUrl">proxyUrl</a></b></td>
|
|
|
|
<td><tt>String</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td><b>Deprecated.</b> Please use mavenSettings instead<br /><b>User property is</b>: <tt>proxyUrl</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="a">
|
|
|
|
<td><b><a href="#showSummary">showSummary</a></b></td>
|
|
|
|
<td><tt>boolean</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>Flag indicating whether or not to show a summary in the output.<br /><b>Default value is</b>: <tt>true</tt>.<br /><b>User property is</b>: <tt>showSummary</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="b">
|
|
|
|
<td><b><a href="#skipProvidedScope">skipProvidedScope</a></b></td>
|
|
|
|
<td><tt>boolean</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>Skip Analysis for Provided Scope Dependencies.<br /><b>Default value is</b>: <tt>false</tt>.<br /><b>User property is</b>: <tt>skipProvidedScope</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="a">
|
|
|
|
<td><b><a href="#skipRuntimeScope">skipRuntimeScope</a></b></td>
|
|
|
|
<td><tt>boolean</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>Skip Analysis for Runtime Scope Dependencies.<br /><b>Default value is</b>: <tt>false</tt>.<br /><b>User property is</b>: <tt>skipRuntimeScope</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="b">
|
|
|
|
<td><b><a href="#skipTestScope">skipTestScope</a></b></td>
|
|
|
|
<td><tt>boolean</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>Skip Analysis for Test Scope Dependencies.<br /><b>Default value is</b>: <tt>true</tt>.<br /><b>User property is</b>: <tt>skipTestScope</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="a">
|
|
|
|
<td><b><a href="#suppressionFile">suppressionFile</a></b></td>
|
|
|
|
<td><tt>String</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>The path to the suppression file.<br /><b>User property is</b>: <tt>suppressionFile</tt>.</td>
|
|
</tr>
|
|
|
|
<tr class="b">
|
|
|
|
<td><b><a href="#zipExtensions">zipExtensions</a></b></td>
|
|
|
|
<td><tt>String</tt></td>
|
|
|
|
<td><tt>-</tt></td>
|
|
|
|
<td>A comma-separated list of file extensions to add to analysis next
|
|
to jar, zip, ....<br /><b>User property is</b>: <tt>zipExtensions</tt>.</td>
|
|
</tr>
|
|
</table>
|
|
</div>
|
|
|
|
<div class="section">
|
|
<h3>Parameter Details<a name="Parameter_Details"></a></h3>
|
|
|
|
<p><b><a name="aggregate">aggregate</a>:</b></p>
|
|
|
|
<div>Generate aggregate reports in multi-module projects.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>boolean</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>aggregate</tt></li>
|
|
|
|
<li><b>Default</b>: <tt>false</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="archiveAnalyzerEnabled">archiveAnalyzerEnabled</a>:</b></p>
|
|
|
|
<div>Whether or not the Archive Analyzer is enabled.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>boolean</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>archiveAnalyzerEnabled</tt></li>
|
|
|
|
<li><b>Default</b>: <tt>true</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="assemblyAnalyzerEnabled">assemblyAnalyzerEnabled</a>:</b></p>
|
|
|
|
<div>Whether or not the .NET Assembly Analyzer is enabled.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>boolean</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>assemblyAnalyzerEnabled</tt></li>
|
|
|
|
<li><b>Default</b>: <tt>true</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="autoUpdate">autoUpdate</a>:</b></p>
|
|
|
|
<div>Sets whether auto-updating of the NVD CVE/CPE data is enabled. It
|
|
is not recommended that this be turned to false. Default is true.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>boolean</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>Yes</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>autoupdate</tt></li>
|
|
|
|
<li><b>Default</b>: <tt>true</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="connectionString">connectionString</a>:</b></p>
|
|
|
|
<div>The database connection string.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>java.lang.String</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>connectionString</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="connectionTimeout">connectionTimeout</a>:</b></p>
|
|
|
|
<div>The Connection Timeout.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>java.lang.String</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>connectionTimeout</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="cveUrl12Base">cveUrl12Base</a>:</b></p>
|
|
|
|
<div>Base Data Mirror URL for CVE 1.2.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>java.lang.String</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>cveUrl12Base</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="cveUrl12Modified">cveUrl12Modified</a>:</b></p>
|
|
|
|
<div>Data Mirror URL for CVE 1.2.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>java.lang.String</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>cveUrl12Modified</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="cveUrl20Base">cveUrl20Base</a>:</b></p>
|
|
|
|
<div>Data Mirror URL for CVE 2.0.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>java.lang.String</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>cveUrl20Base</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="cveUrl20Modified">cveUrl20Modified</a>:</b></p>
|
|
|
|
<div>Data Mirror URL for CVE 2.0.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>java.lang.String</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>cveUrl20Modified</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="dataDirectory">dataDirectory</a>:</b></p>
|
|
|
|
<div>The data directory, hold DC SQL DB.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>java.lang.String</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>dataDirectory</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="dataFileName">dataFileName</a>:</b></p>
|
|
|
|
<div>Sets whether or not the external report format should be used.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>java.lang.String</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>Yes</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>metaFileName</tt></li>
|
|
|
|
<li><b>Default</b>: <tt>dependency-check.ser</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="databaseDriverName">databaseDriverName</a>:</b></p>
|
|
|
|
<div>The database driver name. An example would be org.h2.Driver.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>java.lang.String</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>databaseDriverName</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="databaseDriverPath">databaseDriverPath</a>:</b></p>
|
|
|
|
<div>The path to the database driver if it is not on the class path.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>java.lang.String</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>databaseDriverPath</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="databasePassword">databasePassword</a>:</b></p>
|
|
|
|
<div>The password to use when connecting to the database.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>java.lang.String</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>databasePassword</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="databaseUser">databaseUser</a>:</b></p>
|
|
|
|
<div>The database user name.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>java.lang.String</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>databaseUser</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="externalReport">externalReport</a>:</b></p>
|
|
|
|
<div><b>Deprecated.</b> the internal report is no longer supported</div>
|
|
|
|
<div>Sets whether or not the external report format should be used.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>java.lang.String</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>externalReport</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="failBuildOnCVSS">failBuildOnCVSS</a>:</b></p>
|
|
|
|
<div>Specifies if the build should be failed if a CVSS score above a
|
|
specified level is identified. The default is 11 which means since
|
|
the CVSS scores are 0-10, by default the build will never fail.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>float</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>Yes</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>failBuildOnCVSS</tt></li>
|
|
|
|
<li><b>Default</b>: <tt>11</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="format">format</a>:</b></p>
|
|
|
|
<div>The report format to be generated (HTML, XML, VULN, ALL). This
|
|
configuration option has no affect if using this within the Site
|
|
plugin unless the externalReport is set to true. Default is HTML.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>java.lang.String</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>Yes</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>format</tt></li>
|
|
|
|
<li><b>Default</b>: <tt>HTML</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="jarAnalyzerEnabled">jarAnalyzerEnabled</a>:</b></p>
|
|
|
|
<div>Whether or not the Jar Analyzer is enabled.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>boolean</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>jarAnalyzerEnabled</tt></li>
|
|
|
|
<li><b>Default</b>: <tt>true</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="logFile">logFile</a>:</b></p>
|
|
|
|
<div>The path to the verbose log.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>java.lang.String</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>logfile</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="mavenSettings">mavenSettings</a>:</b></p>
|
|
|
|
<div>The maven settings.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>org.apache.maven.settings.Settings</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>mavenSettings</tt></li>
|
|
|
|
<li><b>Default</b>: <tt>${settings}</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="mavenSettingsProxyId">mavenSettingsProxyId</a>:</b></p>
|
|
|
|
<div>The maven settings proxy id.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>java.lang.String</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>mavenSettingsProxyId</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="nexusAnalyzerEnabled">nexusAnalyzerEnabled</a>:</b></p>
|
|
|
|
<div>Whether or not the Nexus Analyzer is enabled.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>boolean</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>nexusAnalyzerEnabled</tt></li>
|
|
|
|
<li><b>Default</b>: <tt>true</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="nexusUrl">nexusUrl</a>:</b></p>
|
|
|
|
<div>Whether or not the Nexus Analyzer is enabled.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>java.lang.String</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>nexusUrl</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="nexusUsesProxy">nexusUsesProxy</a>:</b></p>
|
|
|
|
<div>Whether or not the configured proxy is used to connect to Nexus.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>boolean</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>nexusUsesProxy</tt></li>
|
|
|
|
<li><b>Default</b>: <tt>true</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="nuspecAnalyzerEnabled">nuspecAnalyzerEnabled</a>:</b></p>
|
|
|
|
<div>Whether or not the .NET Nuspec Analyzer is enabled.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>boolean</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>nuspecAnalyzerEnabled</tt></li>
|
|
|
|
<li><b>Default</b>: <tt>true</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="outputDirectory">outputDirectory</a>:</b></p>
|
|
|
|
<div>The output directory. This generally maps to "target".</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>java.io.File</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>Yes</tt></li>
|
|
|
|
<li><b>Default</b>: <tt>${project.build.directory}</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="pathToMono">pathToMono</a>:</b></p>
|
|
|
|
<div>The path to mono for .NET Assembly analysis on non-windows systems.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>java.lang.String</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>pathToMono</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="proxyUrl">proxyUrl</a>:</b></p>
|
|
|
|
<div><b>Deprecated.</b> Please use mavenSettings instead</div>
|
|
|
|
<div>The Proxy URL.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>java.lang.String</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>proxyUrl</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="reportOutputDirectory">reportOutputDirectory</a>:</b></p>
|
|
|
|
<div>Specifies the destination directory for the generated
|
|
Dependency-Check report. This generally maps to "target/site".</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>java.io.File</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>Yes</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>reportOutputDirectory</tt></li>
|
|
|
|
<li><b>Default</b>: <tt>${project.reporting.outputDirectory}</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="showSummary">showSummary</a>:</b></p>
|
|
|
|
<div>Flag indicating whether or not to show a summary in the output.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>boolean</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>showSummary</tt></li>
|
|
|
|
<li><b>Default</b>: <tt>true</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="skipProvidedScope">skipProvidedScope</a>:</b></p>
|
|
|
|
<div>Skip Analysis for Provided Scope Dependencies.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>boolean</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>skipProvidedScope</tt></li>
|
|
|
|
<li><b>Default</b>: <tt>false</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="skipRuntimeScope">skipRuntimeScope</a>:</b></p>
|
|
|
|
<div>Skip Analysis for Runtime Scope Dependencies.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>boolean</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>skipRuntimeScope</tt></li>
|
|
|
|
<li><b>Default</b>: <tt>false</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="skipTestScope">skipTestScope</a>:</b></p>
|
|
|
|
<div>Skip Analysis for Test Scope Dependencies.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>boolean</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>skipTestScope</tt></li>
|
|
|
|
<li><b>Default</b>: <tt>true</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="suppressionFile">suppressionFile</a>:</b></p>
|
|
|
|
<div>The path to the suppression file.</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>java.lang.String</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>suppressionFile</tt></li>
|
|
</ul><hr />
|
|
<p><b><a name="zipExtensions">zipExtensions</a>:</b></p>
|
|
|
|
<div>A comma-separated list of file extensions to add to analysis next
|
|
to jar, zip, ....</div>
|
|
|
|
<ul>
|
|
|
|
<li><b>Type</b>: <tt>java.lang.String</tt></li>
|
|
|
|
<li><b>Required</b>: <tt>No</tt></li>
|
|
|
|
<li><b>User Property</b>: <tt>zipExtensions</tt></li>
|
|
</ul>
|
|
</div>
|
|
</div>
|
|
|
|
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<hr/>
|
|
|
|
<footer>
|
|
<div class="container-fluid">
|
|
<div class="row-fluid">
|
|
<p >Copyright © 2013–2014
|
|
<a href="http://www.owasp.org">OWASP</a>.
|
|
All rights reserved.
|
|
|
|
</p>
|
|
</div>
|
|
|
|
|
|
|
|
</div>
|
|
</footer>
|
|
</body>
|
|
</html>
|