org.owasp.dependencycheck.analyzer

Class NvdCveAnalyzer

java.lang.Object

org.owasp.dependencycheck.analyzer.AbstractAnalyzer

org.owasp.dependencycheck.analyzer.NvdCveAnalyzer

All Implemented Interfaces:

Analyzer

@ThreadSafe
public class NvdCveAnalyzer
extends AbstractAnalyzer

NvdCveAnalyzer is a utility class that takes a project dependency and attempts to discern if there is an associated CVEs. It uses the the identifiers found by other analyzers to lookup the CVE data.

Author:

Jeremy Long

Constructor Summary

Constructors

Constructor and Description
NvdCveAnalyzer()

Method Summary

Modifier and Type	Method and Description
protected void	analyzeDependency(Dependency dependency, Engine engine) Analyzes a dependency and attempts to determine if there are any CPE identifiers for this dependency.
AnalysisPhase	getAnalysisPhase() Returns the analysis phase that this analyzer should run in.
protected String	getAnalyzerEnabledSettingKey() Returns the setting key to determine if the analyzer is enabled.
String	getName() Returns the name of this analyzer.

Methods inherited from class org.owasp.dependencycheck.analyzer.AbstractAnalyzer

analyze, close, closeAnalyzer, getSettings, initialize, isEnabled, prepare, prepareAnalyzer, setEnabled, supportsParallelProcessing

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

NvdCveAnalyzer

public NvdCveAnalyzer()

Method Detail

analyzeDependency

protected void analyzeDependency(Dependency dependency,
                                 Engine engine)
                          throws AnalysisException

Analyzes a dependency and attempts to determine if there are any CPE identifiers for this dependency.

Specified by:

analyzeDependency in class AbstractAnalyzer

Parameters:

dependency - The Dependency to analyze

engine - The analysis engine

Throws:

AnalysisException - thrown if there is an issue analyzing the dependency

getName

public String getName()

Returns the name of this analyzer.

Returns:

the name of this analyzer.

getAnalysisPhase

public AnalysisPhase getAnalysisPhase()

Returns the analysis phase that this analyzer should run in.

Returns:

the analysis phase that this analyzer should run in.

getAnalyzerEnabledSettingKey

protected String getAnalyzerEnabledSettingKey()

Returns the setting key to determine if the analyzer is enabled.

Specified by:

getAnalyzerEnabledSettingKey in class AbstractAnalyzer

Returns:

the key for the analyzer's enabled property