| Package | Description |
|---|---|
| org.owasp.dependencycheck |
Includes the main entry point for dependency-check.
|
| org.owasp.dependencycheck.data.nvdcve |
Contains classes used to work with the NVD CVE data.
|
| org.owasp.dependencycheck.data.update |
Contains classes used to update the data stores.
The UpdateService will load, any correctly defined CachedWebDataSource(s) and call update() on them. |
| org.owasp.dependencycheck.data.update.nvd |
Contains classes used to download, parse, and load the NVD CVE data from NIST into the local database.
|
| Modifier and Type | Method and Description |
|---|---|
void |
Engine.doUpdates()
Cycles through the cached web data sources and calls update on all of
them.
|
void |
Engine.doUpdates(boolean remainOpen)
Cycles through the cached web data sources and calls update on all of
them.
|
| Modifier and Type | Method and Description |
|---|---|
void |
DatabaseProperties.save(NvdCveInfo updatedValue)
Saves the last updated information to the properties file.
|
void |
DatabaseProperties.save(String key,
String value)
Saves the key value pair to the properties store.
|
| Modifier and Type | Method and Description |
|---|---|
protected MetaProperties |
NvdCveUpdater.getMetaFile(String url)
Downloads the NVD CVE Meta file properties.
|
protected List<NvdCveInfo> |
NvdCveUpdater.getUpdatesNeeded()
Determines if the index needs to be updated.
|
protected boolean |
EngineVersionCheck.shouldUpdate(long lastChecked,
long now,
DatabaseProperties properties,
String currentVersion)
Determines if a new version of the dependency-check engine has been
released.
|
boolean |
NvdCveUpdater.update(Engine engine)
Downloads the latest NVD CVE XML file from the web and imports it into
the current CVE Database.
|
boolean |
CachedWebDataSource.update(Engine engine)
Determines if an update to the current data store is needed, if it is the
new data is downloaded from the Internet and imported into the current
cached data store.
|
boolean |
EngineVersionCheck.update(Engine engine)
Downloads the current released version number and compares it to the
running engine's version number.
|
boolean |
RetireJSDataSource.update(Engine engine)
Downloads the current RetireJS data source.
|
| Modifier and Type | Method and Description |
|---|---|
UpdateException |
ProcessTask.getException()
Get the value of exception.
|
| Modifier and Type | Method and Description |
|---|---|
void |
ProcessTask.setException(UpdateException exception)
Set the value of exception.
|
| Modifier and Type | Method and Description |
|---|---|
protected void |
ProcessTask.importJSON(File file)
Imports the NVD CVE JSON File into the database.
|
void |
NvdCveParser.parse(File file)
Parses the NVD JSON file and inserts/updates data into the database.
|
| Constructor and Description |
|---|
DownloadTask(NvdCveInfo nvdCveInfo,
ExecutorService processor,
CveDB cveDB,
Settings settings)
Simple constructor for the callable download task.
|
Copyright © 2012–2020 OWASP. All rights reserved.