Uses of Class
org.owasp.dependencycheck.analyzer.AbstractAnalyzer

Packages that use AbstractAnalyzer
Package
Description
Analyzers are used to inspect the identified dependencies, collect Evidence, and process the dependencies.
  • Uses of AbstractAnalyzer in org.owasp.dependencycheck.analyzer

    Modifier and Type
    Class
    Description
    class 
    This analyzer ensures dependencies that should be grouped together, to remove excess noise from the report, are grouped.
    class 
    The base FileTypeAnalyzer that all analyzers that have specific file types they analyze should extend.
    class 
    An abstract NPM analyzer that contains common methods for concrete implementations.
    class 
    Abstract base suppression analyzer that contains methods for parsing the suppression XML file.
    class 
    An analyzer that extracts files from archives and ensures any supported files contained within the archive are added to the dependency list.
    class 
    Analyzer which will attempt to locate a dependency, and the GAV information, by querying Artifactory for the dependency's hashes digest.
    class 
    Analyzer for getting company, product, and version information from a .NET assembly.
    class 
    Used to analyze Autoconf input files named configure.ac or configure.in.
    class 
    This analyzer is used to analyze SWIFT and Objective-C packages by collecting information from Cartfile files.
    class 
    Analyzer which will attempt to locate a dependency, and the GAV information, by querying Central for the dependency's SHA-1 digest.
    class 
    Used to analyze CMake build files, and collect information that can be used to determine the associated CPE.
    class 
    This analyzer is used to analyze SWIFT and Objective-C packages by collecting information from .podspec files.
    class 
    Used to analyze a composer.lock file for a composer PHP app.
    class 
    CPEAnalyzer is a utility class that takes a project dependency and attempts to discern if there is an associated CPE.
    class 
    This is no longer used as a standalone analyzer; rather this is called by the CPE Analyzer directly.
    class 
    This analyzer is used to analyze Dart packages by collecting information from pubspec lock and yaml files.
    class 
    This analyzer ensures dependencies that should be grouped together, to remove excess noise from the report, are grouped.
    class 
    This analyzer will merge dependencies, created from different source, into a single dependency.
    class 
     
    class 
    This analyzer attempts to remove some well known false positives - specifically regarding the java runtime.
    class 
    Takes a dependency and analyzes the filename and determines the hashes.
    class 
    Go lang dependency analyzer.
    class 
    Go mod dependency analyzer.
    class 
    This analyzer adds evidence to dependencies to enhance the accuracy of library identification.
    class 
    Used to load a JAR file and collect information that can be used to determine the associated CPE.
    class 
    This analyzer adds information about known exploited vulnerabilities.
    class 
    Analyzer which parses a libman.json file to gather module information.
    class 
    Analyzes MS Project files for dependencies.
    class 
    Analyzer which will attempt to locate a dependency on a Nexus service by SHA-1 digest of the dependency.
    class 
    Used to analyze Node Package Manager (npm) package-lock.json and npm-shrinkwrap.json files via NPM Audit API.
    class 
    Used to analyze Node Package Manager (npm) package.json files, and collect information that can be used to determine the associated CPE.
    class 
    NpmCPEAnalyzer takes a project dependency and attempts to discern if there is an associated CPE.
    class 
    Analyzer which parses a Nuget packages.config file to gather module information.
    class 
    Analyzer which will parse a Nuspec file to gather module information.
    class 
    NvdCveAnalyzer is a utility class that takes a project dependency and attempts to discern if there is an associated CVEs.
    class 
    Used to analyze OpenSSL source code present in the file system.
    class 
    Enrich dependency information from Sonatype OSS index.
    class 
    Takes a dependency and analyze the PE header for meta data that can be used to identify the library.
    class 
    Used to analyze Perl CPAN files.
    class 
    Used to analyze Maven pinned dependency files named *install*.json, a Java Maven dependency lockfile like Python's requirements.txt.
    class 
    Used to analyze pip dependency files named requirements.txt.
    class 
    Used to analyze dependencies defined in Pipfile.
    class 
    Used to analyze dependencies defined in Pipfile.lock.
    class 
     
    class 
    Poetry dependency analyzer.
    class 
    Used to analyze a Wheel or egg distribution files, or their contents in unzipped form, and collect information that can be used to determine the associated CPE.
    class 
    Used to analyze a Python package, and collect information that can be used to determine the associated CPE.
    class 
    The RetireJS analyzer uses the manually curated list of vulnerabilities from the RetireJS community along with the necessary information to assist in identifying vulnerable components.
    class 
    Used to analyze Ruby Bundler Gemspec.lock files utilizing the 3rd party bundle-audit tool.
    class 
    This analyzer accepts the fully resolved .gemspec created by the Ruby bundler (http://bundler.io) for better evidence results.
    class 
    Used to analyze Ruby Gem specifications and collect information that can be used to determine the associated CPE.
    class 
    This analyzer is used to analyze the SWIFT Package Manager (https://swift.org/package-manager/).
    class 
    This analyzer is used to analyze the SWIFT Package Resolved (https://swift.org/package-manager/).
    class 
    Log the unused suppression rules.
    class 
    This analyzer attempts to filter out erroneous version numbers collected.
    class 
    The suppression analyzer processes an externally defined XML document that complies with the suppressions.xsd schema.
    class