Checkstyle Results
The following document contains the results of Checkstyle 9.3 with file:/home/runner/work/DependencyCheck/DependencyCheck/src/main/config/checkstyle-checks.xml ruleset.
Summary
| Files | |||
|---|---|---|---|
| 359 | 0 | 0 | 217 |
Details
org/owasp/dependencycheck/Engine.java
| Severity | Category | Rule | Message | Line |
|---|---|---|---|---|
| imports | AvoidStarImport | Using the '.*' form of import should be avoided - org.owasp.dependencycheck.analyzer.AnalysisPhase.*. | 74 |
org/owasp/dependencycheck/agent/DependencyCheckScanAgent.java
| Severity | Category | Rule | Message | Line |
|---|---|---|---|---|
| coding | FinalLocalVariable | Variable 'version' should be declared final. | 868 | |
| sizes | LineLength | Line is longer than 150 characters (found 153). | 1016 |
org/owasp/dependencycheck/analyzer/AbstractSuppressionAnalyzer.java
| Severity | Category | Rule | Message | Line |
|---|---|---|---|---|
| sizes | LineLength | Line is longer than 150 characters (found 157). | 157 | |
| coding | FinalLocalVariable | Variable 'ruleList' should be declared final. | 188 | |
| coding | FinalLocalVariable | Variable 'baseSuppressionURL' should be declared final. | 189 | |
| coding | FinalLocalVariable | Variable 'repoFile' should be declared final. | 233 | |
| sizes | LineLength | Line is longer than 150 characters (found 181). | 240 | |
| coding | FinalLocalVariable | Variable 'hostedSuppressionSnapshotURL' should be declared final. | 241 | |
| javadoc | JavadocMethod | Expected @param tag for 'engine'. | 260 | |
| coding | FinalLocalVariable | Variable 'ds' should be declared final. | 261 |
org/owasp/dependencycheck/analyzer/CentralAnalyzer.java
| Severity | Category | Rule | Message | Line |
|---|---|---|---|---|
| whitespace | OperatorWrap | '+' should be on a new line. | 312 | |
| whitespace | OperatorWrap | '+' should be on a new line. | 322 | |
| whitespace | OperatorWrap | '+' should be on a new line. | 323 | |
| whitespace | OperatorWrap | '+' should be on a new line. | 329 |
org/owasp/dependencycheck/analyzer/OssIndexAnalyzer.java
| Severity | Category | Rule | Message | Line |
|---|---|---|---|---|
| whitespace | OperatorWrap | '+' should be on a new line. | 140 | |
| whitespace | OperatorWrap | '+' should be on a new line. | 141 | |
| whitespace | OperatorWrap | '+' should be on a new line. | 142 | |
| whitespace | OperatorWrap | '+' should be on a new line. | 146 | |
| whitespace | OperatorWrap | '+' should be on a new line. | 147 | |
| whitespace | OperatorWrap | '+' should be on a new line. | 151 | |
| whitespace | OperatorWrap | '+' should be on a new line. | 152 | |
| whitespace | OperatorWrap | '+' should be on a new line. | 153 | |
| coding | FinalLocalVariable | Variable 'error' should be declared final. | 186 | |
| coding | FinalLocalVariable | Variable 'logMessage' should be declared final. | 192 | |
| javadoc | JavadocVariable | Missing a Javadoc comment. | 274 | |
| javadoc | JavadocVariable | Missing a Javadoc comment. | 275 | |
| javadoc | JavadocVariable | Missing a Javadoc comment. | 276 | |
| javadoc | JavadocVariable | Missing a Javadoc comment. | 277 | |
| javadoc | JavadocVariable | Missing a Javadoc comment. | 278 | |
| javadoc | JavadocVariable | Missing a Javadoc comment. | 280 | |
| design | VisibilityModifier | Variable 'statusCode' must be private and have accessor methods. | 280 | |
| javadoc | JavadocVariable | Missing a Javadoc comment. | 281 | |
| design | VisibilityModifier | Variable 'userMessage' must be private and have accessor methods. | 281 | |
| javadoc | JavadocVariable | Missing a Javadoc comment. | 282 | |
| design | VisibilityModifier | Variable 'fatal' must be private and have accessor methods. | 282 | |
| javadoc | JavadocVariable | Missing a Javadoc comment. | 283 | |
| design | VisibilityModifier | Variable 'messageSuffix' must be private and have accessor methods. | 283 |
org/owasp/dependencycheck/analyzer/PoetryAnalyzer.java
| Severity | Category | Rule | Message | Line |
|---|---|---|---|---|
| header | RegexpHeader | Line does not match expected header line of '^ \*\s*$'. | 15 |
org/owasp/dependencycheck/analyzer/RetireJsAnalyzer.java
| Severity | Category | Rule | Message | Line |
|---|---|---|---|---|
| sizes | OuterTypeNumber | Outer types defined is 2 (max allowed is 1). | 18 | |
| coding | FinalLocalVariable | Variable 'ds' should be declared final. | 223 | |
| design | FinalClass | Class RetireJsLibrary should be declared as final. | 320 | |
| javadoc | JavadocVariable | Missing a Javadoc comment. | 321 | |
| javadoc | JavadocVariable | Missing a Javadoc comment. | 323 | |
| coding | FinalLocalVariable | Variable 'vulns' should be declared final. | 357 | |
| javadoc | JavadocVariable | Missing a Javadoc comment. | 375 | |
| javadoc | JavadocVariable | Missing a Javadoc comment. | 378 | |
| javadoc | JavadocVariable | Missing a Javadoc comment. | 379 | |
| javadoc | JavadocVariable | Missing a Javadoc comment. | 382 | |
| javadoc | JavadocVariable | Missing a Javadoc comment. | 383 | |
| coding | FinalLocalVariable | Variable 'discoveredVulnerabilities' should be declared final. | 405 | |
| coding | FinalLocalVariable | Variable 'references' should be declared final. | 455 | |
| sizes | LineLength | Line is longer than 150 characters (found 170). | 478 | |
| javadoc | JavadocVariable | Missing a Javadoc comment. | 482 | |
| javadoc | JavadocVariable | Missing a Javadoc comment. | 483 | |
| javadoc | JavadocVariable | Missing a Javadoc comment. | 484 | |
| javadoc | JavadocVariable | Missing a Javadoc comment. | 485 |
org/owasp/dependencycheck/analyzer/RubyBundleAuditAnalyzer.java
| Severity | Category | Rule | Message | Line |
|---|---|---|---|---|
| imports | UnusedImports | Unused import - org.owasp.dependencycheck.data.nvdcve.CveDB. | 24 | |
| imports | UnusedImports | Unused import - java.util.Collections. | 41 | |
| coding | FinalLocalVariable | Variable 'bundleAuditVersionDetails' should be declared final. | 202 |
org/owasp/dependencycheck/analyzer/VulnerabilitySuppressionAnalyzer.java
| Severity | Category | Rule | Message | Line |
|---|---|---|---|---|
| sizes | LineLength | Line is longer than 150 characters (found 176). | 79 |
org/owasp/dependencycheck/analyzer/YarnAuditAnalyzer.java
| Severity | Category | Rule | Message | Line |
|---|---|---|---|---|
| coding | FinalLocalVariable | Variable 'args' should be declared final. | 124 | |
| sizes | LineLength | Line is longer than 150 characters (found 213). | 134 | |
| whitespace | WhitespaceAround | '{' is not preceded with whitespace. | 165 | |
| whitespace | OperatorWrap | '+' should be on a new line. | 167 | |
| coding | FinalLocalVariable | Variable 'fileValue' should be declared final. | 181 | |
| coding | FinalLocalVariable | Variable 'dependencyDirectory' should be declared final. | 240 | |
| sizes | LineLength | Line is longer than 150 characters (found 170). | 278 |
org/owasp/dependencycheck/data/artifactory/ArtifactorySearchResponseHandler.java
| Severity | Category | Rule | Message | Line |
|---|---|---|---|---|
| whitespace | OperatorWrap | '+' should be on a new line. | 163 | |
| whitespace | OperatorWrap | '+' should be on a new line. | 164 | |
| sizes | LineLength | Line is longer than 150 characters (found 198). | 165 |
org/owasp/dependencycheck/data/nvdcve/CveDB.java
| Severity | Category | Rule | Message | Line |
|---|---|---|---|---|
| sizes | FileLength | File length is 2,366 lines (max allowed is 2,000). | 1 | |
| sizes | MethodCount | Total number of methods is 89 (max allowed is 80). | 91 | |
| sizes | MethodLength | Method getVulnerability length is 334 lines (max allowed is 180). | 720 | |
| sizes | LineLength | Line is longer than 150 characters (found 151). | 1010 | |
| sizes | MethodLength | Method updateOrInsertVulnerability length is 212 lines (max allowed is 180). | 1173 |
org/owasp/dependencycheck/data/ossindex/OssIndexClientProvider.java
| Severity | Category | Rule | Message | Line |
|---|---|---|---|---|
| sizes | LineLength | Line is longer than 150 characters (found 168). | 95 |
org/owasp/dependencycheck/data/update/EngineVersionCheck.java
| Severity | Category | Rule | Message | Line |
|---|---|---|---|---|
| sizes | LineLength | Line is longer than 150 characters (found 156). | 220 |
org/owasp/dependencycheck/data/update/HostedSuppressionsDataSource.java
| Severity | Category | Rule | Message | Line |
|---|---|---|---|---|
| javadoc | MissingJavadocMethod | Missing a Javadoc comment. | 78 | |
| javadoc | JavadocStyle | First sentence should end with a period. | 82 | |
| javadoc | MissingJavadocMethod | Missing a Javadoc comment. | 110 | |
| coding | FinalLocalVariable | Variable 'fileName' should be declared final. | 115 | |
| whitespace | OperatorWrap | '||' should be on a new line. | 124 | |
| coding | FinalLocalVariable | Variable 'forceupdate' should be declared final. | 129 | |
| coding | FinalLocalVariable | Variable 'autoupdate' should be declared final. | 130 | |
| coding | FinalLocalVariable | Variable 'validFor' should be declared final. | 131 |
org/owasp/dependencycheck/data/update/NvdApiDataSource.java
| Severity | Category | Rule | Message | Line |
|---|---|---|---|---|
| sizes | LineLength | Line is longer than 150 characters (found 175). | 138 | |
| sizes | LineLength | Line is longer than 150 characters (found 162). | 378 | |
| coding | FinalLocalVariable | Variable 'yearRange' should be declared final. | 533 | |
| coding | FinalLocalVariable | Variable 'startYear' should be declared final. | 534 | |
| coding | FinalLocalVariable | Variable 'endYear' should be declared final. | 535 | |
| sizes | LineLength | Line is longer than 150 characters (found 165). | 592 | |
| coding | FinalLocalVariable | Variable 'metaFeedUrl' should be declared final. | 611 | |
| coding | FinalLocalVariable | Variable 'lmd' should be declared final. | 617 | |
| coding | FinalLocalVariable | Variable 'content' should be declared final. | 723 | |
| coding | FinalLocalVariable | Variable 'props' should be declared final. | 724 | |
| coding | FinalLocalVariable | Variable 'yearRange' should be declared final. | 733 | |
| coding | FinalLocalVariable | Variable 'lastModifiedDateProperties' should be declared final. | 734 | |
| sizes | LineLength | Line is longer than 150 characters (found 196). | 742 |
org/owasp/dependencycheck/data/update/RetireJSDataSource.java
| Severity | Category | Rule | Message | Line |
|---|---|---|---|---|
| javadoc | MissingJavadocMethod | Missing a Javadoc comment. | 97 | |
| coding | FinalLocalVariable | Variable 'fileName' should be declared final. | 103 | |
| coding | FinalLocalVariable | Variable 'forceupdate' should be declared final. | 118 | |
| coding | FinalLocalVariable | Variable 'autoupdate' should be declared final. | 119 | |
| coding | FinalLocalVariable | Variable 'validFor' should be declared final. | 120 |
org/owasp/dependencycheck/dependency/IncludedByReference.java
| Severity | Category | Rule | Message | Line |
|---|---|---|---|---|
| blocks | NeedBraces | 'if' construct must use '{}'s. | 79 | |
| coding | FinalLocalVariable | Variable 'that' should be declared final. | 80 |
org/owasp/dependencycheck/dependency/naming/CpeIdentifier.java
| Severity | Category | Rule | Message | Line |
|---|---|---|---|---|
| javadoc | JavadocMethod | @return tag should be present and have description. | 216 | |
| javadoc | JavadocMethod | Expected @param tag for 'cpe'. | 216 | |
| sizes | LineLength | Line is longer than 150 characters (found 160). | 220 | |
| javadoc | JavadocMethod | @return tag should be present and have description. | 229 | |
| javadoc | JavadocMethod | Expected @param tag for 'vendor'. | 229 | |
| javadoc | JavadocMethod | Expected @param tag for 'product'. | 229 | |
| javadoc | JavadocMethod | Expected @param tag for 'version'. | 229 | |
| javadoc | JavadocMethod | @return tag should be present and have description. | 239 | |
| javadoc | JavadocMethod | Expected @param tag for 'cpe'. | 239 |
org/owasp/dependencycheck/processing/BundlerAuditProcessor.java
| Severity | Category | Rule | Message | Line |
|---|---|---|---|---|
| sizes | LineLength | Line is longer than 150 characters (found 159). | 245 |
org/owasp/dependencycheck/reporting/EscapeTool.java
| Severity | Category | Rule | Message | Line |
|---|---|---|---|---|
| javadoc | MissingJavadocMethod | Missing a Javadoc comment. | 62 | |
| javadoc | MissingJavadocMethod | Missing a Javadoc comment. | 79 | |
| javadoc | MissingJavadocMethod | Missing a Javadoc comment. | 96 |
org/owasp/dependencycheck/reporting/ReportGenerator.java
| Severity | Category | Rule | Message | Line |
|---|---|---|---|---|
| sizes | LineLength | Line is longer than 150 characters (found 177). | 128 | |
| coding | FinalLocalVariable | Variable 'logTag' should be declared final. | 407 | |
| coding | FinalLocalVariable | Variable 'input' should be declared final. | 408 |
org/owasp/dependencycheck/utils/CvssUtil.java
| Severity | Category | Rule | Message | Line |
|---|---|---|---|---|
| javadoc | MissingJavadocMethod | Missing a Javadoc comment. | 232 | |
| coding | FinalLocalVariable | Variable 'parts' should be declared final. | 259 | |
| coding | FinalLocalVariable | Variable 'values' should be declared final. | 260 | |
| coding | FinalLocalVariable | Variable 'kv' should be declared final. | 262 | |
| coding | FinalLocalVariable | Variable 'version' should be declared final. | 268 | |
| coding | FinalLocalVariable | Variable 'attackVector' should be declared final. | 270 | |
| sizes | LineLength | Line is longer than 150 characters (found 153). | 271 | |
| coding | FinalLocalVariable | Variable 'attackComplexity' should be declared final. | 271 | |
| sizes | LineLength | Line is longer than 150 characters (found 159). | 272 | |
| coding | FinalLocalVariable | Variable 'attackRequirements' should be declared final. | 272 | |
| sizes | LineLength | Line is longer than 150 characters (found 159). | 273 | |
| coding | FinalLocalVariable | Variable 'privilegesRequired' should be declared final. | 273 | |
| coding | FinalLocalVariable | Variable 'userInteraction' should be declared final. | 274 | |
| coding | FinalLocalVariable | Variable 'vulnConfidentialityImpact' should be declared final. | 275 | |
| coding | FinalLocalVariable | Variable 'vulnIntegrityImpact' should be declared final. | 276 | |
| coding | FinalLocalVariable | Variable 'vulnAvailabilityImpact' should be declared final. | 277 | |
| coding | FinalLocalVariable | Variable 'subConfidentialityImpact' should be declared final. | 278 | |
| coding | FinalLocalVariable | Variable 'subIntegrityImpact' should be declared final. | 279 | |
| coding | FinalLocalVariable | Variable 'subAvailabilityImpact' should be declared final. | 280 | |
| sizes | LineLength | Line is longer than 150 characters (found 186). | 281 | |
| coding | FinalLocalVariable | Variable 'exploitMaturity' should be declared final. | 281 | |
| sizes | LineLength | Line is longer than 150 characters (found 196). | 282 | |
| coding | FinalLocalVariable | Variable 'confidentialityRequirement' should be declared final. | 282 | |
| sizes | LineLength | Line is longer than 150 characters (found 190). | 283 | |
| coding | FinalLocalVariable | Variable 'integrityRequirement' should be declared final. | 283 | |
| sizes | LineLength | Line is longer than 150 characters (found 193). | 284 | |
| coding | FinalLocalVariable | Variable 'availabilityRequirement' should be declared final. | 284 | |
| sizes | LineLength | Line is longer than 150 characters (found 210). | 285 | |
| coding | FinalLocalVariable | Variable 'modifiedAttackVector' should be declared final. | 285 | |
| sizes | LineLength | Line is longer than 150 characters (found 226). | 286 | |
| coding | FinalLocalVariable | Variable 'modifiedAttackComplexity' should be declared final. | 286 | |
| sizes | LineLength | Line is longer than 150 characters (found 234). | 287 | |
| coding | FinalLocalVariable | Variable 'modifiedAttackRequirements' should be declared final. | 287 | |
| sizes | LineLength | Line is longer than 150 characters (found 234). | 288 | |
| coding | FinalLocalVariable | Variable 'modifiedPrivilegesRequired' should be declared final. | 288 | |
| sizes | LineLength | Line is longer than 150 characters (found 222). | 289 | |
| coding | FinalLocalVariable | Variable 'modifiedUserInteraction' should be declared final. | 289 | |
| sizes | LineLength | Line is longer than 150 characters (found 196). | 290 | |
| coding | FinalLocalVariable | Variable 'modifiedVulnConfidentialityImpact' should be declared final. | 290 | |
| sizes | LineLength | Line is longer than 150 characters (found 190). | 291 | |
| coding | FinalLocalVariable | Variable 'modifiedVulnIntegrityImpact' should be declared final. | 291 | |
| sizes | LineLength | Line is longer than 150 characters (found 193). | 292 | |
| coding | FinalLocalVariable | Variable 'modifiedVulnAvailabilityImpact' should be declared final. | 292 | |
| sizes | LineLength | Line is longer than 150 characters (found 198). | 293 | |
| coding | FinalLocalVariable | Variable 'modifiedSubConfidentialityImpact' should be declared final. | 293 | |
| sizes | LineLength | Line is longer than 150 characters (found 195). | 294 | |
| coding | FinalLocalVariable | Variable 'modifiedSubIntegrityImpact' should be declared final. | 294 | |
| sizes | LineLength | Line is longer than 150 characters (found 198). | 295 | |
| coding | FinalLocalVariable | Variable 'modifiedSubAvailabilityImpact' should be declared final. | 295 | |
| coding | FinalLocalVariable | Variable 'safety' should be declared final. | 296 | |
| sizes | LineLength | Line is longer than 150 characters (found 172). | 297 | |
| coding | FinalLocalVariable | Variable 'automatable' should be declared final. | 297 | |
| sizes | LineLength | Line is longer than 150 characters (found 158). | 298 | |
| coding | FinalLocalVariable | Variable 'recovery' should be declared final. | 298 | |
| sizes | LineLength | Line is longer than 150 characters (found 174). | 299 | |
| coding | FinalLocalVariable | Variable 'valueDensity' should be declared final. | 299 | |
| sizes | LineLength | Line is longer than 150 characters (found 236). | 300 | |
| coding | FinalLocalVariable | Variable 'vulnerabilityResponseEffort' should be declared final. | 300 | |
| sizes | LineLength | Line is longer than 150 characters (found 186). | 301 | |
| coding | FinalLocalVariable | Variable 'providerUrgency' should be declared final. | 301 | |
| coding | FinalLocalVariable | Variable 'baseSeverity' should be declared final. | 303 | |
| coding | FinalLocalVariable | Variable 'threatScore' should be declared final. | 305 | |
| coding | FinalLocalVariable | Variable 'threatSeverity' should be declared final. | 306 | |
| coding | FinalLocalVariable | Variable 'environmentalScore' should be declared final. | 307 | |
| coding | FinalLocalVariable | Variable 'environmentalSeverity' should be declared final. | 308 | |
| coding | FinalLocalVariable | Variable 'cvssData' should be declared final. | 310 |
org/owasp/dependencycheck/xml/pom/PomParser.java
| Severity | Category | Rule | Message | Line |
|---|---|---|---|---|
| imports | UnusedImports | Unused import - javax.xml.parsers.SAXParser. | 29 |
org/owasp/dependencycheck/xml/suppression/PropertyType.java
| Severity | Category | Rule | Message | Line |
|---|---|---|---|---|
| javadoc | JavadocVariable | Missing a Javadoc comment. | 52 | |
| javadoc | MissingJavadocMethod | Missing a Javadoc comment. | 66 | |
| javadoc | MissingJavadocMethod | Missing a Javadoc comment. | 70 | |
| javadoc | MissingJavadocMethod | Missing a Javadoc comment. | 74 | |
| javadoc | MissingJavadocMethod | Missing a Javadoc comment. | 78 |
org/owasp/dependencycheck/xml/suppression/SuppressionHandler.java
| Severity | Category | Rule | Message | Line |
|---|---|---|---|---|
| javadoc | JavadocVariable | Missing a Javadoc comment. | 127 | |
| javadoc | JavadocVariable | Missing a Javadoc comment. | 128 | |
| coding | FinalLocalVariable | Variable 'base' should be declared final. | 160 | |
| coding | FinalLocalVariable | Variable 'until' should be declared final. | 161 | |
| javadoc | JavadocMethod | Expected @param tag for 'attributes'. | 177 | |
| coding | FinalLocalVariable | Variable 'untilStr' should be declared final. | 178 | |
| whitespace | WhitespaceAfter | 'if' is not followed by whitespace. | 240 |
org/owasp/dependencycheck/xml/suppression/SuppressionParser.java
| Severity | Category | Rule | Message | Line |
|---|---|---|---|---|
| sizes | LineLength | Line is longer than 150 characters (found 160). | 121 |
org/owasp/dependencycheck/xml/suppression/SuppressionRule.java
| Severity | Category | Rule | Message | Line |
|---|---|---|---|---|
| coding | FinalLocalVariable | Variable 'v2SuppressionThreshold' should be declared final. | 666 | |
| coding | FinalLocalVariable | Variable 'v3SuppressionThreshold' should be declared final. | 667 | |
| coding | FinalLocalVariable | Variable 'v4SuppressionThreshold' should be declared final. | 668 | |
| coding | FinalLocalVariable | Variable 'v2Score' should be declared final. | 670 | |
| coding | FinalLocalVariable | Variable 'v3Score' should be declared final. | 671 | |
| coding | FinalLocalVariable | Variable 'v4Score' should be declared final. | 672 | |
| coding | FinalLocalVariable | Variable 'cvssV2CheckSuppressing' should be declared final. | 676 | |
| coding | FinalLocalVariable | Variable 'cvssV3CheckSuppressing' should be declared final. | 677 | |
| coding | FinalLocalVariable | Variable 'cvssV4CheckSuppressing' should be declared final. | 678 | |
| coding | FinalLocalVariable | Variable 'cpe22Uri' should be declared final. | 718 | |
| coding | FinalLocalVariable | Variable 'candidate' should be declared final. | 729 | |
| blocks | NeedBraces | 'if' construct must use '{}'s. | 824 | |
| blocks | NeedBraces | 'if' construct must use '{}'s. | 825 | |
| coding | FinalLocalVariable | Variable 'that' should be declared final. | 826 | |
| sizes | LineLength | Line is longer than 150 characters (found 159). | 845 |

