Package org.owasp.dependencycheck.utils

Class Settings.KEYS

  • Enclosing class:
    Settings
    public static final class Settings.KEYS
extends java.lang.Object
    The collection of keys used within the properties file.

    • Field Detail

      • APPLICATION_NAME

        public static final java.lang.String APPLICATION_NAME
        The key to obtain the application name.
        See Also:
        Constant Field Values

      • APPLICATION_VERSION

        public static final java.lang.String APPLICATION_VERSION
        The key to obtain the application version.
        See Also:
        Constant Field Values

      • ENGINE_VERSION_CHECK_URL

        public static final java.lang.String ENGINE_VERSION_CHECK_URL
        The key to obtain the URL to retrieve the current release version from.
        See Also:
        Constant Field Values

      • AUTO_UPDATE

        public static final java.lang.String AUTO_UPDATE
        The properties key indicating whether or not the cached data sources should be updated.
        See Also:
        Constant Field Values

      • DB_DRIVER_NAME

        public static final java.lang.String DB_DRIVER_NAME
        The database driver class name. If this is not in the properties file the embedded database is used.
        See Also:
        Constant Field Values

      • DB_DRIVER_PATH

        public static final java.lang.String DB_DRIVER_PATH
        The database driver class name. If this is not in the properties file the embedded database is used.
        See Also:
        Constant Field Values

      • DB_CONNECTION_STRING

        public static final java.lang.String DB_CONNECTION_STRING
        The database connection string. If this is not in the properties file the embedded database is used.
        See Also:
        Constant Field Values

      • DB_USER

        public static final java.lang.String DB_USER
        The username to use when connecting to the database.
        See Also:
        Constant Field Values

      • DB_PASSWORD

        public static final java.lang.String DB_PASSWORD
        The password to authenticate to the database.
        See Also:
        Constant Field Values

      • DATA_DIRECTORY

        public static final java.lang.String DATA_DIRECTORY
        The base path to use for the data directory (for embedded db and other cached resources from the Internet).
        See Also:
        Constant Field Values

      • H2_DATA_DIRECTORY

        public static final java.lang.String H2_DATA_DIRECTORY
        The base path to use for the H2 data directory (for embedded db).
        See Also:
        Constant Field Values

      • DB_FILE_NAME

        public static final java.lang.String DB_FILE_NAME
        The database file name.
        See Also:
        Constant Field Values

      • DB_VERSION

        public static final java.lang.String DB_VERSION
        The database schema version.
        See Also:
        Constant Field Values

      • CVE_CPE_STARTS_WITH_FILTER

        public static final java.lang.String CVE_CPE_STARTS_WITH_FILTER
        The starts with filter used to exclude CVE entries from the database. By default this is set to 'cpe:2.3:a:' which limits the CVEs imported to just those that are related to applications. If this were set to just 'cpe:2.3:' the OS, hardware, and application related CVEs would be imported.
        See Also:
        Constant Field Values

      • NVD_API_ENDPOINT

        public static final java.lang.String NVD_API_ENDPOINT
        The NVD API Endpoint.
        See Also:
        Constant Field Values

      • NVD_API_KEY

        public static final java.lang.String NVD_API_KEY
        API Key for the NVD API.
        See Also:
        Constant Field Values

      • NVD_API_DELAY

        public static final java.lang.String NVD_API_DELAY
        The delay between requests for the NVD API.
        See Also:
        Constant Field Values

      • NVD_API_MAX_RETRY_COUNT

        public static final java.lang.String NVD_API_MAX_RETRY_COUNT
        The maximum number of retry requests for a single call to the NVD API.
        See Also:
        Constant Field Values

      • NVD_API_VALID_FOR_HOURS

        public static final java.lang.String NVD_API_VALID_FOR_HOURS
        The properties key to control the skipping of the check for NVD updates.
        See Also:
        Constant Field Values

      • NVD_API_RESULTS_PER_PAGE

        public static final java.lang.String NVD_API_RESULTS_PER_PAGE
        The properties key to control the results per page lower than NVD's default of 2000 See #6863 for the rationale on allowing lower configurations.
        See Also:
        Constant Field Values

      • NVD_API_DATAFEED_VALID_FOR_DAYS

        public static final java.lang.String NVD_API_DATAFEED_VALID_FOR_DAYS
        The properties key that indicates how often the NVD API data feed needs to be updated before a full refresh is evaluated.
        See Also:
        Constant Field Values

      • NVD_API_DATAFEED_URL

        public static final java.lang.String NVD_API_DATAFEED_URL
        The URL for the NVD API Data Feed.
        See Also:
        Constant Field Values

      • NVD_API_DATAFEED_USER

        public static final java.lang.String NVD_API_DATAFEED_USER
        The username to use when connecting to the NVD Data feed.
        See Also:
        Constant Field Values

      • NVD_API_DATAFEED_PASSWORD

        public static final java.lang.String NVD_API_DATAFEED_PASSWORD
        The password to authenticate to the NVD Data feed.
        See Also:
        Constant Field Values

      • NVD_API_DATAFEED_START_YEAR

        public static final java.lang.String NVD_API_DATAFEED_START_YEAR
        The starting year for the NVD CVE Data feed cache.
        See Also:
        Constant Field Values

      • ANALYZER_NVD_CVE_ENABLED

        public static final java.lang.String ANALYZER_NVD_CVE_ENABLED
        The key to determine if the NVD CVE analyzer is enabled.
        See Also:
        Constant Field Values

      • CPE_MODIFIED_VALID_FOR_DAYS

        public static final java.lang.String CPE_MODIFIED_VALID_FOR_DAYS
        The properties key that indicates how often the CPE data needs to be updated.
        See Also:
        Constant Field Values

      • CPE_URL

        public static final java.lang.String CPE_URL
        The properties key for the URL to retrieve the CPE.
        See Also:
        Constant Field Values

      • KEV_URL

        public static final java.lang.String KEV_URL
        The properties key for the URL to retrieve the Known Exploited Vulnerabilities..
        See Also:
        Constant Field Values

      • KEV_USER

        public static final java.lang.String KEV_USER
        The properties key for the hosted suppressions username. For use when hosted suppressions are mirrored locally on a site requiring authentication
        See Also:
        Constant Field Values

      • KEV_PASSWORD

        public static final java.lang.String KEV_PASSWORD
        The properties key for the hosted suppressions password. For use when hosted suppressions are mirrored locally on a site requiring authentication
        See Also:
        Constant Field Values

      • KEV_CHECK_VALID_FOR_HOURS

        public static final java.lang.String KEV_CHECK_VALID_FOR_HOURS
        The properties key to control the skipping of the check for Known Exploited Vulnerabilities updates.
        See Also:
        Constant Field Values

      • PROXY_DISABLE_SCHEMAS

        public static final java.lang.String PROXY_DISABLE_SCHEMAS
        Whether or not if using basic auth with a proxy the system setting 'jdk.http.auth.tunneling.disabledSchemes' should be set to an empty string.
        See Also:
        Constant Field Values

      • PROXY_SERVER

        public static final java.lang.String PROXY_SERVER
        The properties key for the proxy server.
        See Also:
        Constant Field Values

      • PROXY_PORT

        public static final java.lang.String PROXY_PORT
        The properties key for the proxy port - this must be an integer value.
        See Also:
        Constant Field Values

      • PROXY_USERNAME

        public static final java.lang.String PROXY_USERNAME
        The properties key for the proxy username.
        See Also:
        Constant Field Values

      • PROXY_PASSWORD

        public static final java.lang.String PROXY_PASSWORD
        The properties key for the proxy password.
        See Also:
        Constant Field Values

      • PROXY_NON_PROXY_HOSTS

        public static final java.lang.String PROXY_NON_PROXY_HOSTS
        The properties key for the non proxy hosts.
        See Also:
        Constant Field Values

      • CONNECTION_TIMEOUT

        public static final java.lang.String CONNECTION_TIMEOUT
        The properties key for the connection timeout.
        See Also:
        Constant Field Values

      • CONNECTION_READ_TIMEOUT

        public static final java.lang.String CONNECTION_READ_TIMEOUT
        The properties key for the connection read timeout.
        See Also:
        Constant Field Values

      • TEMP_DIRECTORY

        public static final java.lang.String TEMP_DIRECTORY
        The location of the temporary directory.
        See Also:
        Constant Field Values

      • MAX_DOWNLOAD_THREAD_POOL_SIZE

        public static final java.lang.String MAX_DOWNLOAD_THREAD_POOL_SIZE
        The maximum number of threads to allocate when downloading files.
        See Also:
        Constant Field Values

      • ANALYSIS_TIMEOUT

        public static final java.lang.String ANALYSIS_TIMEOUT
        The properties key for the analysis timeout.
        See Also:
        Constant Field Values

      • SUPPRESSION_FILE

        public static final java.lang.String SUPPRESSION_FILE
        The key for the suppression file.
        See Also:
        Constant Field Values

      • SUPPRESSION_FILE_USER

        public static final java.lang.String SUPPRESSION_FILE_USER
        The username used when connecting to the suppressionFiles.
        See Also:
        Constant Field Values

      • SUPPRESSION_FILE_PASSWORD

        public static final java.lang.String SUPPRESSION_FILE_PASSWORD
        The password used when connecting to the suppressionFiles.
        See Also:
        Constant Field Values

      • HOSTED_SUPPRESSIONS_ENABLED

        public static final java.lang.String HOSTED_SUPPRESSIONS_ENABLED
        The key for the whether the hosted suppressions file datasource is enabled.
        See Also:
        Constant Field Values

      • HOSTED_SUPPRESSIONS_URL

        public static final java.lang.String HOSTED_SUPPRESSIONS_URL
        The key for the hosted suppressions file URL.
        See Also:
        Constant Field Values

      • HOSTED_SUPPRESSIONS_USER

        public static final java.lang.String HOSTED_SUPPRESSIONS_USER
        The properties key for the hosted suppressions username. For use when hosted suppressions are mirrored locally on a site requiring authentication
        See Also:
        Constant Field Values

      • HOSTED_SUPPRESSIONS_PASSWORD

        public static final java.lang.String HOSTED_SUPPRESSIONS_PASSWORD
        The properties key for the hosted suppressions password. For use when hosted suppressions are mirrored locally on a site requiring authentication
        See Also:
        Constant Field Values

      • HOSTED_SUPPRESSIONS_FORCEUPDATE

        public static final java.lang.String HOSTED_SUPPRESSIONS_FORCEUPDATE
        The properties key for defining whether the hosted suppressions file will be updated regardless of the autoupdate settings.
        See Also:
        Constant Field Values

      • HOSTED_SUPPRESSIONS_VALID_FOR_HOURS

        public static final java.lang.String HOSTED_SUPPRESSIONS_VALID_FOR_HOURS
        The properties key to control the skipping of the check for hosted suppressions file updates.
        See Also:
        Constant Field Values

      • HINTS_FILE

        public static final java.lang.String HINTS_FILE
        The key for the hint file.
        See Also:
        Constant Field Values

      • JUNIT_FAIL_ON_CVSS

        public static final java.lang.String JUNIT_FAIL_ON_CVSS
        The key for the property that controls what CVSS scores are considered failing test cases for the JUNIT repor.
        See Also:
        Constant Field Values

      • ANALYZER_JAR_ENABLED

        public static final java.lang.String ANALYZER_JAR_ENABLED
        The properties key for whether the Jar Analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_KNOWN_EXPLOITED_ENABLED

        public static final java.lang.String ANALYZER_KNOWN_EXPLOITED_ENABLED
        The properties key for whether the Known Exploited Vulnerability Analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_EXPERIMENTAL_ENABLED

        public static final java.lang.String ANALYZER_EXPERIMENTAL_ENABLED
        The properties key for whether experimental analyzers are loaded.
        See Also:
        Constant Field Values

      • ANALYZER_RETIRED_ENABLED

        public static final java.lang.String ANALYZER_RETIRED_ENABLED
        The properties key for whether experimental analyzers are loaded.
        See Also:
        Constant Field Values

      • ANALYZER_ARCHIVE_ENABLED

        public static final java.lang.String ANALYZER_ARCHIVE_ENABLED
        The properties key for whether the Archive analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_NODE_PACKAGE_ENABLED

        public static final java.lang.String ANALYZER_NODE_PACKAGE_ENABLED
        The properties key for whether the node.js package analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_NODE_PACKAGE_SKIPDEV

        public static final java.lang.String ANALYZER_NODE_PACKAGE_SKIPDEV
        The properties key for configure whether the Node Package analyzer should skip devDependencies.
        See Also:
        Constant Field Values

      • ANALYZER_NODE_AUDIT_ENABLED

        public static final java.lang.String ANALYZER_NODE_AUDIT_ENABLED
        The properties key for whether the Node Audit analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_YARN_AUDIT_ENABLED

        public static final java.lang.String ANALYZER_YARN_AUDIT_ENABLED
        The properties key for whether the Yarn Audit analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_PNPM_AUDIT_ENABLED

        public static final java.lang.String ANALYZER_PNPM_AUDIT_ENABLED
        The properties key for whether the Pnpm Audit analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_NODE_AUDIT_URL

        public static final java.lang.String ANALYZER_NODE_AUDIT_URL
        The properties key for supplying the URL to the Node Audit API.
        See Also:
        Constant Field Values

      • ANALYZER_NODE_AUDIT_SKIPDEV

        public static final java.lang.String ANALYZER_NODE_AUDIT_SKIPDEV
        The properties key for configure whether the Node Audit analyzer should skip devDependencies.
        See Also:
        Constant Field Values

      • ANALYZER_NODE_AUDIT_USE_CACHE

        public static final java.lang.String ANALYZER_NODE_AUDIT_USE_CACHE
        The properties key for whether node audit analyzer results will be cached.
        See Also:
        Constant Field Values

      • ANALYZER_RETIREJS_ENABLED

        public static final java.lang.String ANALYZER_RETIREJS_ENABLED
        The properties key for whether the RetireJS analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_RETIREJS_FILTERS

        public static final java.lang.String ANALYZER_RETIREJS_FILTERS
        The properties key for whether the RetireJS analyzer file content filters.
        See Also:
        Constant Field Values

      • ANALYZER_RETIREJS_FILTER_NON_VULNERABLE

        public static final java.lang.String ANALYZER_RETIREJS_FILTER_NON_VULNERABLE
        The properties key for whether the RetireJS analyzer should filter out non-vulnerable dependencies.
        See Also:
        Constant Field Values

      • ANALYZER_RETIREJS_REPO_JS_URL

        public static final java.lang.String ANALYZER_RETIREJS_REPO_JS_URL
        The properties key for defining the URL to the RetireJS repository.
        See Also:
        Constant Field Values

      • ANALYZER_RETIREJS_REPO_JS_USER

        public static final java.lang.String ANALYZER_RETIREJS_REPO_JS_USER
        The properties key for the Nexus search credentials username.
        See Also:
        Constant Field Values

      • ANALYZER_RETIREJS_REPO_JS_PASSWORD

        public static final java.lang.String ANALYZER_RETIREJS_REPO_JS_PASSWORD
        The properties key for the Nexus search credentials password.
        See Also:
        Constant Field Values

      • ANALYZER_RETIREJS_FORCEUPDATE

        public static final java.lang.String ANALYZER_RETIREJS_FORCEUPDATE
        The properties key for defining whether the RetireJS repository will be updated regardless of the autoupdate settings.
        See Also:
        Constant Field Values

      • ANALYZER_RETIREJS_REPO_VALID_FOR_HOURS

        public static final java.lang.String ANALYZER_RETIREJS_REPO_VALID_FOR_HOURS
        The properties key to control the skipping of the check for CVE updates.
        See Also:
        Constant Field Values

      • ANALYZER_COMPOSER_LOCK_ENABLED

        public static final java.lang.String ANALYZER_COMPOSER_LOCK_ENABLED
        The properties key for whether the PHP composer lock file analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_COMPOSER_LOCK_SKIP_DEV

        public static final java.lang.String ANALYZER_COMPOSER_LOCK_SKIP_DEV
        The properties key for whether the PHP composer lock file analyzer should skip dev packages.
        See Also:
        Constant Field Values

      • ANALYZER_CPANFILE_ENABLED

        public static final java.lang.String ANALYZER_CPANFILE_ENABLED
        The properties key for whether the Perl CPAN file file analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_PYTHON_DISTRIBUTION_ENABLED

        public static final java.lang.String ANALYZER_PYTHON_DISTRIBUTION_ENABLED
        The properties key for whether the Python Distribution analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_PYTHON_PACKAGE_ENABLED

        public static final java.lang.String ANALYZER_PYTHON_PACKAGE_ENABLED
        The properties key for whether the Python Package analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_MIX_AUDIT_ENABLED

        public static final java.lang.String ANALYZER_MIX_AUDIT_ENABLED
        The properties key for whether the Elixir mix audit analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_MIX_AUDIT_PATH

        public static final java.lang.String ANALYZER_MIX_AUDIT_PATH
        The path to mix_audit, if available.
        See Also:
        Constant Field Values

      • ANALYZER_GOLANG_MOD_ENABLED

        public static final java.lang.String ANALYZER_GOLANG_MOD_ENABLED
        The properties key for whether the Golang Mod analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_GOLANG_PATH

        public static final java.lang.String ANALYZER_GOLANG_PATH
        The path to go, if available.
        See Also:
        Constant Field Values

      • ANALYZER_YARN_PATH

        public static final java.lang.String ANALYZER_YARN_PATH
        The path to go, if available.
        See Also:
        Constant Field Values

      • ANALYZER_PNPM_PATH

        public static final java.lang.String ANALYZER_PNPM_PATH
        The path to pnpm, if available.
        See Also:
        Constant Field Values

      • ANALYZER_GOLANG_DEP_ENABLED

        public static final java.lang.String ANALYZER_GOLANG_DEP_ENABLED
        The properties key for whether the Golang Dep analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_RUBY_GEMSPEC_ENABLED

        public static final java.lang.String ANALYZER_RUBY_GEMSPEC_ENABLED
        The properties key for whether the Ruby Gemspec Analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_AUTOCONF_ENABLED

        public static final java.lang.String ANALYZER_AUTOCONF_ENABLED
        The properties key for whether the Autoconf analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_MAVEN_INSTALL_ENABLED

        public static final java.lang.String ANALYZER_MAVEN_INSTALL_ENABLED
        The properties key for whether the maven_install.json analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_PIP_ENABLED

        public static final java.lang.String ANALYZER_PIP_ENABLED
        The properties key for whether the pip analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_PIPFILE_ENABLED

        public static final java.lang.String ANALYZER_PIPFILE_ENABLED
        The properties key for whether the pipfile analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_POETRY_ENABLED

        public static final java.lang.String ANALYZER_POETRY_ENABLED
        The properties key for whether the Poetry analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_CMAKE_ENABLED

        public static final java.lang.String ANALYZER_CMAKE_ENABLED
        The properties key for whether the CMake analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_BUNDLE_AUDIT_ENABLED

        public static final java.lang.String ANALYZER_BUNDLE_AUDIT_ENABLED
        The properties key for whether the Ruby Bundler Audit analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_ASSEMBLY_ENABLED

        public static final java.lang.String ANALYZER_ASSEMBLY_ENABLED
        The properties key for whether the .NET Assembly analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_NUSPEC_ENABLED

        public static final java.lang.String ANALYZER_NUSPEC_ENABLED
        The properties key for whether the .NET Nuspec analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_NUGETCONF_ENABLED

        public static final java.lang.String ANALYZER_NUGETCONF_ENABLED
        The properties key for whether the .NET Nuget packages.config analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_LIBMAN_ENABLED

        public static final java.lang.String ANALYZER_LIBMAN_ENABLED
        The properties key for whether the Libman analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_MSBUILD_PROJECT_ENABLED

        public static final java.lang.String ANALYZER_MSBUILD_PROJECT_ENABLED
        The properties key for whether the .NET MSBuild Project analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_NEXUS_ENABLED

        public static final java.lang.String ANALYZER_NEXUS_ENABLED
        The properties key for whether the Nexus analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_NEXUS_URL

        public static final java.lang.String ANALYZER_NEXUS_URL
        The properties key for the Nexus search URL.
        See Also:
        Constant Field Values

      • ANALYZER_NEXUS_USER

        public static final java.lang.String ANALYZER_NEXUS_USER
        The properties key for the Nexus search credentials username.
        See Also:
        Constant Field Values

      • ANALYZER_NEXUS_PASSWORD

        public static final java.lang.String ANALYZER_NEXUS_PASSWORD
        The properties key for the Nexus search credentials password.
        See Also:
        Constant Field Values

      • ANALYZER_NEXUS_USES_PROXY

        public static final java.lang.String ANALYZER_NEXUS_USES_PROXY
        The properties key for using the proxy to reach Nexus.
        See Also:
        Constant Field Values

      • ANALYZER_ARTIFACTORY_ENABLED

        public static final java.lang.String ANALYZER_ARTIFACTORY_ENABLED
        The properties key for whether the Artifactory analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_ARTIFACTORY_URL

        public static final java.lang.String ANALYZER_ARTIFACTORY_URL
        The properties key for the Artifactory search URL.
        See Also:
        Constant Field Values

      • ANALYZER_ARTIFACTORY_API_USERNAME

        public static final java.lang.String ANALYZER_ARTIFACTORY_API_USERNAME
        The properties key for the Artifactory username.
        See Also:
        Constant Field Values

      • ANALYZER_ARTIFACTORY_API_TOKEN

        public static final java.lang.String ANALYZER_ARTIFACTORY_API_TOKEN
        The properties key for the Artifactory API token.
        See Also:
        Constant Field Values

      • ANALYZER_ARTIFACTORY_BEARER_TOKEN

        public static final java.lang.String ANALYZER_ARTIFACTORY_BEARER_TOKEN
        The properties key for the Artifactory bearer token (https://www.jfrog.com/confluence/display/RTF/Access+Tokens). It can be generated using: 
        curl -u yourUserName -X POST \
    "https://artifactory.techno.ingenico.com/artifactory/api/security/token" \
    -d "username=yourUserName"
        .
        See Also:
        Constant Field Values

      • ANALYZER_ARTIFACTORY_USES_PROXY

        public static final java.lang.String ANALYZER_ARTIFACTORY_USES_PROXY
        The properties key for using the proxy to reach Artifactory.
        See Also:
        Constant Field Values

      • ANALYZER_ARTIFACTORY_PARALLEL_ANALYSIS

        public static final java.lang.String ANALYZER_ARTIFACTORY_PARALLEL_ANALYSIS
        The properties key for whether the Artifactory analyzer should use parallel processing.
        See Also:
        Constant Field Values

      • ANALYZER_CENTRAL_ENABLED

        public static final java.lang.String ANALYZER_CENTRAL_ENABLED
        The properties key for whether the Central analyzer is enabled.
        See Also:
        Constant Field Values

      • MAVEN_LOCAL_REPO

        public static final java.lang.String MAVEN_LOCAL_REPO
        Key for the path to the local Maven repository.
        See Also:
        Constant Field Values

      • CENTRAL_CONTENT_URL

        public static final java.lang.String CENTRAL_CONTENT_URL
        Key for the URL to obtain content from Maven Central.
        See Also:
        Constant Field Values

      • ANALYZER_CENTRAL_PARALLEL_ANALYSIS

        public static final java.lang.String ANALYZER_CENTRAL_PARALLEL_ANALYSIS
        The properties key for whether the Central analyzer should use parallel processing.
        See Also:
        Constant Field Values

      • ANALYZER_CENTRAL_RETRY_COUNT

        public static final java.lang.String ANALYZER_CENTRAL_RETRY_COUNT
        The properties key for whether the Central analyzer should use parallel processing.
        See Also:
        Constant Field Values

      • ANALYZER_OPENSSL_ENABLED

        public static final java.lang.String ANALYZER_OPENSSL_ENABLED
        The properties key for whether the OpenSSL analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_COCOAPODS_ENABLED

        public static final java.lang.String ANALYZER_COCOAPODS_ENABLED
        The properties key for whether the cocoapods analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_CARTHAGE_ENABLED

        public static final java.lang.String ANALYZER_CARTHAGE_ENABLED
        The properties key for whether the carthage analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_SWIFT_PACKAGE_MANAGER_ENABLED

        public static final java.lang.String ANALYZER_SWIFT_PACKAGE_MANAGER_ENABLED
        The properties key for whether the SWIFT package manager analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_SWIFT_PACKAGE_RESOLVED_ENABLED

        public static final java.lang.String ANALYZER_SWIFT_PACKAGE_RESOLVED_ENABLED
        The properties key for whether the SWIFT package resolved analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_CENTRAL_URL

        public static final java.lang.String ANALYZER_CENTRAL_URL
        The properties key for the Central search URL.
        See Also:
        Constant Field Values

      • ANALYZER_CENTRAL_QUERY

        public static final java.lang.String ANALYZER_CENTRAL_QUERY
        The properties key for the Central search query.
        See Also:
        Constant Field Values

      • ANALYZER_CENTRAL_USE_CACHE

        public static final java.lang.String ANALYZER_CENTRAL_USE_CACHE
        The properties key for whether Central search results will be cached.
        See Also:
        Constant Field Values

      • ANALYZER_ASSEMBLY_DOTNET_PATH

        public static final java.lang.String ANALYZER_ASSEMBLY_DOTNET_PATH
        The path to dotnet core, if available.
        See Also:
        Constant Field Values

      • ANALYZER_BUNDLE_AUDIT_PATH

        public static final java.lang.String ANALYZER_BUNDLE_AUDIT_PATH
        The path to bundle-audit, if available.
        See Also:
        Constant Field Values

      • ANALYZER_BUNDLE_AUDIT_WORKING_DIRECTORY

        public static final java.lang.String ANALYZER_BUNDLE_AUDIT_WORKING_DIRECTORY
        The path to bundle-audit, if available.
        See Also:
        Constant Field Values

      • ADDITIONAL_ZIP_EXTENSIONS

        public static final java.lang.String ADDITIONAL_ZIP_EXTENSIONS
        The additional configured zip file extensions, if available.
        See Also:
        Constant Field Values

      • VFEED_DATA_FILE

        public static final java.lang.String VFEED_DATA_FILE
        The key to obtain the path to the VFEED data file.
        See Also:
        Constant Field Values

      • VFEED_CONNECTION_STRING

        public static final java.lang.String VFEED_CONNECTION_STRING
        The key to obtain the VFEED connection string.
        See Also:
        Constant Field Values

      • VFEED_DOWNLOAD_URL

        public static final java.lang.String VFEED_DOWNLOAD_URL
        The key to obtain the base download URL for the VFeed data file.
        See Also:
        Constant Field Values

      • VFEED_DOWNLOAD_FILE

        public static final java.lang.String VFEED_DOWNLOAD_FILE
        The key to obtain the download file name for the VFeed data.
        See Also:
        Constant Field Values

      • VFEED_UPDATE_STATUS

        public static final java.lang.String VFEED_UPDATE_STATUS
        The key to obtain the VFeed update status.
        See Also:
        Constant Field Values

      • DOWNLOADER_QUICK_QUERY_TIMESTAMP

        public static final java.lang.String DOWNLOADER_QUICK_QUERY_TIMESTAMP
        The key to the HTTP request method for query last modified date.
        See Also:
        Constant Field Values

      • DOWNLOADER_TLS_PROTOCOL_LIST

        public static final java.lang.String DOWNLOADER_TLS_PROTOCOL_LIST
        The key to HTTP protocol list to use.
        See Also:
        Constant Field Values

      • ANALYZER_CPE_ENABLED

        public static final java.lang.String ANALYZER_CPE_ENABLED
        The key to determine if the CPE analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_NPM_CPE_ENABLED

        public static final java.lang.String ANALYZER_NPM_CPE_ENABLED
        The key to determine if the NPM CPE analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_CPE_SUPPRESSION_ENABLED

        public static final java.lang.String ANALYZER_CPE_SUPPRESSION_ENABLED
        The key to determine if the CPE Suppression analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_DEPENDENCY_BUNDLING_ENABLED

        public static final java.lang.String ANALYZER_DEPENDENCY_BUNDLING_ENABLED
        The key to determine if the Dependency Bundling analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_DEPENDENCY_MERGING_ENABLED

        public static final java.lang.String ANALYZER_DEPENDENCY_MERGING_ENABLED
        The key to determine if the Dependency Merging analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_FALSE_POSITIVE_ENABLED

        public static final java.lang.String ANALYZER_FALSE_POSITIVE_ENABLED
        The key to determine if the False Positive analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_FILE_NAME_ENABLED

        public static final java.lang.String ANALYZER_FILE_NAME_ENABLED
        The key to determine if the File Name analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_PE_ENABLED

        public static final java.lang.String ANALYZER_PE_ENABLED
        The key to determine if the File Version analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_HINT_ENABLED

        public static final java.lang.String ANALYZER_HINT_ENABLED
        The key to determine if the Hint analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_VERSION_FILTER_ENABLED

        public static final java.lang.String ANALYZER_VERSION_FILTER_ENABLED
        The key to determine if the Version Filter analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_VULNERABILITY_SUPPRESSION_ENABLED

        public static final java.lang.String ANALYZER_VULNERABILITY_SUPPRESSION_ENABLED
        The key to determine if the Vulnerability Suppression analyzer is enabled.
        See Also:
        Constant Field Values

      • UPDATE_NVDCVE_ENABLED

        public static final java.lang.String UPDATE_NVDCVE_ENABLED
        The key to determine if the NVD CVE updater should be enabled.
        See Also:
        Constant Field Values

      • UPDATE_VERSION_CHECK_ENABLED

        public static final java.lang.String UPDATE_VERSION_CHECK_ENABLED
        The key to determine if dependency-check should check if there is a new version available.
        See Also:
        Constant Field Values

      • ECOSYSTEM_SKIP_CPEANALYZER

        public static final java.lang.String ECOSYSTEM_SKIP_CPEANALYZER
        The key to determine which ecosystems should skip the CPE analysis.
        See Also:
        Constant Field Values

      • ENABLE_BATCH_UPDATES

        public static final java.lang.String ENABLE_BATCH_UPDATES
        Adds capabilities to batch insert. Tested on PostgreSQL and H2.
        See Also:
        Constant Field Values

      • MAX_BATCH_SIZE

        public static final java.lang.String MAX_BATCH_SIZE
        Size of database batch inserts.
        See Also:
        Constant Field Values

      • WRITELOCK_SHUTDOWN_HOOK

        public static final java.lang.String WRITELOCK_SHUTDOWN_HOOK
        The key that specifies the class name of the Write Lock shutdown hook.
        See Also:
        Constant Field Values

      • ANALYZER_OSSINDEX_ENABLED

        public static final java.lang.String ANALYZER_OSSINDEX_ENABLED
        The properties key for whether the Sonatype OSS Index analyzer is enabled.
        See Also:
        Constant Field Values

      • ANALYZER_OSSINDEX_USE_CACHE

        public static final java.lang.String ANALYZER_OSSINDEX_USE_CACHE
        The properties key for whether the Sonatype OSS Index should use a local cache.
        See Also:
        Constant Field Values

      • ANALYZER_OSSINDEX_URL

        public static final java.lang.String ANALYZER_OSSINDEX_URL
        The properties key for the Sonatype OSS Index URL.
        See Also:
        Constant Field Values

      • ANALYZER_OSSINDEX_USER

        public static final java.lang.String ANALYZER_OSSINDEX_USER
        The properties key for the Sonatype OSS Index user.
        See Also:
        Constant Field Values

      • ANALYZER_OSSINDEX_PASSWORD

        public static final java.lang.String ANALYZER_OSSINDEX_PASSWORD
        The properties key for the Sonatype OSS Index password.
        See Also:
        Constant Field Values

      • ANALYZER_OSSINDEX_BATCH_SIZE

        public static final java.lang.String ANALYZER_OSSINDEX_BATCH_SIZE
        The properties key for the Sonatype OSS batch-size.
        See Also:
        Constant Field Values

      • ANALYZER_OSSINDEX_REQUEST_DELAY

        public static final java.lang.String ANALYZER_OSSINDEX_REQUEST_DELAY
        The properties key for the Sonatype OSS Request Delay. Amount of time in seconds to wait before executing a request against the Sonatype OSS Rest API
        See Also:
        Constant Field Values

      • ANALYZER_OSSINDEX_WARN_ONLY_ON_REMOTE_ERRORS

        public static final java.lang.String ANALYZER_OSSINDEX_WARN_ONLY_ON_REMOTE_ERRORS
        The properties key for only warning about Sonatype OSS Index remote errors instead of failing the request.
        See Also:
        Constant Field Values

      • ANALYZER_DART_ENABLED

        public static final java.lang.String ANALYZER_DART_ENABLED
        The properties key for whether the Dart analyzer is enabled.
        See Also:
        Constant Field Values

      • PRETTY_PRINT

        public static final java.lang.String PRETTY_PRINT
        The properties key for whether to pretty print the XML/JSON reports.
        See Also:
        Constant Field Values

      • MASKED_PROPERTIES

        public static final java.lang.String MASKED_PROPERTIES
        The properties key setting which other keys should be considered sensitive and subsequently masked when logged.
        See Also:
        Constant Field Values

      • MAX_QUERY_SIZE_DEFAULT

        public static final java.lang.String MAX_QUERY_SIZE_DEFAULT
        The properties key for the default max query size for Lucene query results.
        See Also:
        Constant Field Values

      • MAX_QUERY_SIZE_PREFIX

        public static final java.lang.String MAX_QUERY_SIZE_PREFIX
        The properties key prefix for the default max query size for Lucene query results; append the ecosystem to obtain the default query size.
        See Also:
        Constant Field Values