Class NvdCveAnalyzer
- java.lang.Object
-
- org.owasp.dependencycheck.analyzer.AbstractAnalyzer
-
- org.owasp.dependencycheck.analyzer.NvdCveAnalyzer
-
- All Implemented Interfaces:
Analyzer
@ThreadSafe public class NvdCveAnalyzer extends AbstractAnalyzer
NvdCveAnalyzer is a utility class that takes a project dependency and attempts to discern if there is an associated CVEs. It uses the the identifiers found by other analyzers to lookup the CVE data.- Author:
- Jeremy Long
-
-
Constructor Summary
Constructors Constructor Description NvdCveAnalyzer()
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description protected voidanalyzeDependency(Dependency dependency, Engine engine)Analyzes a dependency and attempts to determine if there are any CPE identifiers for this dependency.AnalysisPhasegetAnalysisPhase()Returns the analysis phase that this analyzer should run in.protected java.lang.StringgetAnalyzerEnabledSettingKey()Returns the setting key to determine if the analyzer is enabled.java.lang.StringgetName()Returns the name of this analyzer.-
Methods inherited from class org.owasp.dependencycheck.analyzer.AbstractAnalyzer
analyze, close, closeAnalyzer, getSettings, initialize, isEnabled, prepare, prepareAnalyzer, setEnabled, supportsParallelProcessing
-
-
-
-
Method Detail
-
analyzeDependency
protected void analyzeDependency(Dependency dependency, Engine engine) throws AnalysisException
Analyzes a dependency and attempts to determine if there are any CPE identifiers for this dependency.- Specified by:
analyzeDependencyin classAbstractAnalyzer- Parameters:
dependency- The Dependency to analyzeengine- The analysis engine- Throws:
AnalysisException- thrown if there is an issue analyzing the dependency
-
getName
public java.lang.String getName()
Returns the name of this analyzer.- Returns:
- the name of this analyzer.
-
getAnalysisPhase
public AnalysisPhase getAnalysisPhase()
Returns the analysis phase that this analyzer should run in.- Returns:
- the analysis phase that this analyzer should run in.
-
getAnalyzerEnabledSettingKey
protected java.lang.String getAnalyzerEnabledSettingKey()
Returns the setting key to determine if the analyzer is enabled.
- Specified by:
getAnalyzerEnabledSettingKeyin classAbstractAnalyzer- Returns:
- the key for the analyzer's enabled property
-
-