org.owasp.dependencycheck.analyzer

Class OssIndexAnalyzer

java.lang.Object

org.owasp.dependencycheck.analyzer.AbstractAnalyzer

org.owasp.dependencycheck.analyzer.OssIndexAnalyzer

All Implemented Interfaces:

Analyzer

public class OssIndexAnalyzer
extends AbstractAnalyzer

Enrich dependency information from Sonatype OSS index.

Since:

5.0.0

Author:

Jason Dillon

Field Summary

Fields

Modifier and Type	Field and Description
static String	REFERENCE_TYPE The reference type.

Constructor Summary

Constructors

Constructor and Description
OssIndexAnalyzer()

Method Summary

Modifier and Type	Method and Description
protected void	analyzeDependency(Dependency dependency, Engine engine) Analyzes a given dependency.
protected void	closeAnalyzer() Closes a given Analyzer.
AnalysisPhase	getAnalysisPhase() Returns the phase that the analyzer is intended to run in.
protected String	getAnalyzerEnabledSettingKey() Returns the setting key to determine if the analyzer is enabled.
String	getName() Returns the name of the analyzer.
boolean	supportsParallelProcessing() Run without parallel support.

Methods inherited from class org.owasp.dependencycheck.analyzer.AbstractAnalyzer

analyze, close, getSettings, initialize, isEnabled, prepare, prepareAnalyzer, setEnabled

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

REFERENCE_TYPE

public static final String REFERENCE_TYPE

The reference type.

See Also:

Constant Field Values

Constructor Detail

OssIndexAnalyzer

public OssIndexAnalyzer()

Method Detail

getName

public String getName()

Description copied from interface: Analyzer

Returns the name of the analyzer.

Returns:

the name of the analyzer.

getAnalysisPhase

public AnalysisPhase getAnalysisPhase()

Description copied from interface: Analyzer

Returns the phase that the analyzer is intended to run in.

Returns:

the phase that the analyzer is intended to run in.

getAnalyzerEnabledSettingKey

protected String getAnalyzerEnabledSettingKey()

Description copied from class: AbstractAnalyzer

Returns the setting key to determine if the analyzer is enabled.

Specified by:

getAnalyzerEnabledSettingKey in class AbstractAnalyzer

Returns:

the key for the analyzer's enabled property

supportsParallelProcessing

public boolean supportsParallelProcessing()

Run without parallel support.

Specified by:

supportsParallelProcessing in interface Analyzer

Overrides:

supportsParallelProcessing in class AbstractAnalyzer

Returns:

false

closeAnalyzer

protected void closeAnalyzer()
                      throws Exception

Description copied from class: AbstractAnalyzer

Closes a given Analyzer. This will be skipped if the analyzer is disabled.

Overrides:

closeAnalyzer in class AbstractAnalyzer

Throws:

Exception - thrown if there is an exception

analyzeDependency

protected void analyzeDependency(Dependency dependency,
                                 Engine engine)
                          throws AnalysisException

Description copied from class: AbstractAnalyzer

Analyzes a given dependency. If the dependency is an archive, such as a WAR or EAR, the contents are extracted, scanned, and added to the list of dependencies within the engine.

Specified by:

analyzeDependency in class AbstractAnalyzer

Parameters:

dependency - the dependency to analyze

engine - the engine scanning

Throws:

AnalysisException - thrown if there is an analysis exception