Package org.owasp.dependencycheck.data.update

Class NvdApiDataSource

    • Nested Class Summary

      Nested Classes 
      Modifier and Type Class Description
      protected static class  NvdApiDataSource.FeedUrl  

    • Method Summary

      All Methods Instance Methods Concrete Methods 
      Modifier and Type Method Description
      protected java.util.Properties getRemoteDataFeedCacheProperties​(NvdApiDataSource.FeedUrl dataFeedUrl)
      Downloads the metadata properties of the NVD API cache / data feed.
      protected java.util.Map<java.lang.String,​java.lang.String> getUpdatesNeeded​(NvdApiDataSource.FeedUrl feedUrl, java.util.Properties cacheProperties, java.time.ZonedDateTime now)
      Determines if the index needs to be updated.
      boolean purge​(Engine engine)
      Deletes any locally cached data.
      boolean update​(Engine engine)
      Determines if an update to the current data store is needed, if it is the new data is downloaded from the Internet and imported into the current cached data store.

      • Methods inherited from class java.lang.Object

        clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

    • Constructor Detail

      • NvdApiDataSource

        public NvdApiDataSource()

    • Method Detail

      • update

        public boolean update​(Engine engine)
               throws UpdateException
        Description copied from interface: CachedWebDataSource
        Determines if an update to the current data store is needed, if it is the new data is downloaded from the Internet and imported into the current cached data store.
        Specified by:
        update in interface CachedWebDataSource
        Parameters:
        engine - a reference to the dependency-check engine
        Returns:
        whether or not an update was made to the CveDB
        Throws:
        UpdateException - is thrown if there is an exception downloading the data or updating the data store.

      • purge

        public boolean purge​(Engine engine)
        Description copied from interface: CachedWebDataSource
        Deletes any locally cached data.
        Specified by:
        purge in interface CachedWebDataSource
        Parameters:
        engine - a reference to the dependency-check engine
        Returns:
        true if the purge was successful; otherwise false

      • getUpdatesNeeded

        protected final java.util.Map<java.lang.String,​java.lang.String> getUpdatesNeeded​(NvdApiDataSource.FeedUrl feedUrl,
                                                                                        java.util.Properties cacheProperties,
                                                                                        java.time.ZonedDateTime now)
                                                                                 throws UpdateException
        Determines if the index needs to be updated. This is done by fetching the NVD CVE meta data and checking the last update date. If the data needs to be refreshed this method will return the NvdCveUrl for the files that need to be updated.
        Parameters:
        feedUrl - a parsed NVD cache / data feed URL
        cacheProperties - the properties from the remote NVD API cache or data feed
        now - the start time of the update process
        Returns:
        the map of key to URLs - where the key is the year or `modified`
        Throws:
        UpdateException - Is thrown if there is an issue with the last updated properties file

      • getRemoteDataFeedCacheProperties

        protected final java.util.Properties getRemoteDataFeedCacheProperties​(NvdApiDataSource.FeedUrl dataFeedUrl)
                                                               throws UpdateException
        Downloads the metadata properties of the NVD API cache / data feed.
        Parameters:
        dataFeedUrl - a parsed NVD cache / data feed URL
        Returns:
        the cache properties
        Throws:
        UpdateException - thrown if the properties file could not be downloaded