Package org.owasp.dependencycheck

Class CliParser.ARGUMENT

  • Enclosing class:
    CliParser
    public static class CliParser.ARGUMENT
extends java.lang.Object
    A collection of static final strings that represent the possible command line arguments.

    • Field Summary

      Fields 
      Modifier and Type Field Description
      static java.lang.String ADDITIONAL_ZIP_EXTENSIONS
      The CLI argument name for setting extra extensions.
      static java.lang.String ADVANCED_HELP
      The long CLI argument name asking for advanced help.
      static java.lang.String ARTIFACTORY_API_TOKEN
      The CLI argument for indicating the Artifactory API token.
      static java.lang.String ARTIFACTORY_BEARER_TOKEN
      The CLI argument for indicating the Artifactory bearer token.
      static java.lang.String ARTIFACTORY_ENABLED
      The CLI argument for indicating if the Artifactory analyzer should be enabled.
      static java.lang.String ARTIFACTORY_PARALLEL_ANALYSIS
      The CLI argument for indicating if the Artifactory analyzer should use the parallel analysis.
      static java.lang.String ARTIFACTORY_URL
      The CLI argument for indicating if the Artifactory analyzer should use the proxy.
      static java.lang.String ARTIFACTORY_USERNAME
      The CLI argument for indicating the Artifactory username.
      static java.lang.String ARTIFACTORY_USES_PROXY
      The CLI argument for indicating if the Artifactory analyzer should use the proxy.
      static java.lang.String CENTRAL_BEARER_TOKEN
      The token for bearer authentication to the alternative Maven Central Search.
      static java.lang.String CENTRAL_PASSWORD
      The password for basic authentication to the alternative Maven Central Search.
      static java.lang.String CENTRAL_URL
      The alternative URL for Maven Central Search.
      static java.lang.String CENTRAL_USERNAME
      The username for basic authentication to the alternative Maven Central Search.
      static java.lang.String COMPOSER_LOCK_SKIP_DEV
      Whether the PHP Composer Analyzer skips dev packages.
      static java.lang.String CONNECTION_READ_TIMEOUT
      The CLI argument name indicating the connection read timeout.
      static java.lang.String CONNECTION_STRING
      The CLI argument name for setting the connection string.
      static java.lang.String CONNECTION_TIMEOUT
      The CLI argument name indicating the connection timeout.
      static java.lang.String CONNECTION_TIMEOUT_SHORT
      The short CLI argument name indicating the connection timeout.
      static java.lang.String DATA_DIRECTORY
      The CLI argument name for setting the location of the data directory.
      static java.lang.String DATA_DIRECTORY_SHORT
      The short CLI argument name for setting the location of the data directory.
      static java.lang.String DB_DRIVER
      The CLI argument name for setting the database driver name.
      static java.lang.String DB_DRIVER_PATH
      The CLI argument name for setting the path to the database driver; in case it is not on the class path.
      static java.lang.String DB_NAME
      The CLI argument name for setting the database user name.
      static java.lang.String DB_PASSWORD
      The CLI argument name for setting the database password.
      static java.lang.String DISABLE_ARCHIVE
      Disables the Archive Analyzer.
      static java.lang.String DISABLE_ASSEMBLY
      Disables the Assembly Analyzer.
      static java.lang.String DISABLE_AUTO_UPDATE
      The long CLI argument name specifying that the CPE/CVE/etc. data should not be automatically updated.
      static java.lang.String DISABLE_AUTO_UPDATE_SHORT
      The short CLI argument name specifying that the CPE/CVE/etc. data should not be automatically updated.
      static java.lang.String DISABLE_AUTOCONF
      Disables the Autoconf Analyzer.
      static java.lang.String DISABLE_BUNDLE_AUDIT
      Disables the Ruby Bundler Audit Analyzer.
      static java.lang.String DISABLE_CARTHAGE
      Disables the Carthage analyzer.
      static java.lang.String DISABLE_CENTRAL
      Disables the Central Analyzer.
      static java.lang.String DISABLE_CENTRAL_CACHE
      Disables the Central Analyzer's ability to cache results locally.
      static java.lang.String DISABLE_CMAKE
      Disables the Cmake Analyzer.
      static java.lang.String DISABLE_COCOAPODS
      Disables the cocoapods analyzer.
      static java.lang.String DISABLE_COMPOSER
      Disables the PHP Composer Analyzer.
      static java.lang.String DISABLE_CPAN
      Disables the Perl CPAN File Analyzer.
      static java.lang.String DISABLE_DART
      Disables the Dart Analyzer.
      static java.lang.String DISABLE_FILENAME
      Disables the File Name Analyzer.
      static java.lang.String DISABLE_GO_DEP
      Disables the Golang Dependency Analyzer.
      static java.lang.String DISABLE_GOLANG_MOD
      Disables the Golang Mod Analyzer.
      static java.lang.String DISABLE_HOSTED_SUPPRESSIONS
      The CLI argument to set the number of hours to wait before re-checking hosted suppressions file for updates.
      static java.lang.String DISABLE_JAR
      Disables the Jar Analyzer.
      static java.lang.String DISABLE_KEV
      Disables the Known Exploited Analyzer.
      static java.lang.String DISABLE_MAVEN_INSTALL
      Disables the Maven install Analyzer.
      static java.lang.String DISABLE_MIX_AUDIT
      Disables the Elixir mix audit Analyzer.
      static java.lang.String DISABLE_MSBUILD
      Disable the MS Build Analyzer.
      static java.lang.String DISABLE_NODE_AUDIT
      Disables the Node Audit Analyzer.
      static java.lang.String DISABLE_NODE_AUDIT_CACHE
      Disables the Node Audit Analyzer's ability to cache results locally.
      static java.lang.String DISABLE_NODE_AUDIT_SKIPDEV
      Configures the Node Audit Analyzer to skip the dev dependencies.
      static java.lang.String DISABLE_NODE_JS
      Disables the Node.js Package Analyzer.
      static java.lang.String DISABLE_NUGETCONF
      Disables the Nuget packages.config Analyzer.
      static java.lang.String DISABLE_NUSPEC
      Disables the Nuspec Analyzer.
      static java.lang.String DISABLE_OPENSSL
      Disables the OpenSSL Analyzer.
      static java.lang.String DISABLE_OSSINDEX
      Disables the Sonatype OSS Index Analyzer.
      static java.lang.String DISABLE_OSSINDEX_CACHE
      Disables the Sonatype OSS Index Analyzer's ability to cache results locally.
      static java.lang.String DISABLE_PIP
      Disables the pip Analyzer.
      static java.lang.String DISABLE_PIPFILE
      Disables the Pipfile Analyzer.
      static java.lang.String DISABLE_PNPM_AUDIT
      Disables the Pnpm Audit Analyzer.
      static java.lang.String DISABLE_POETRY
      Disables the Poetry Analyzer.
      static java.lang.String DISABLE_PY_DIST
      Disables the Python Distribution Analyzer.
      static java.lang.String DISABLE_PY_PKG
      Disables the Python Package Analyzer.
      static java.lang.String DISABLE_RETIRE_JS
      Disables the RetireJS Analyzer.
      static java.lang.String DISABLE_RUBYGEMS
      Disables the Ruby Gemspec Analyzer.
      static java.lang.String DISABLE_SWIFT
      Disables the swift package manager analyzer.
      static java.lang.String DISABLE_SWIFT_RESOLVED
      Disables the swift package resolved analyzer.
      static java.lang.String DISABLE_VERSION_CHECK
      The long CLI argument name specifying that the version check should not be performed.
      static java.lang.String DISABLE_YARN_AUDIT
      Disables the Yarn Audit Analyzer.
      static java.lang.String ENABLE_NEXUS
      Disables the Nexus Analyzer.
      static java.lang.String EXCLUDE
      Exclude path argument.
      static java.lang.String EXPERIMENTAL
      The CLI argument to enable the experimental analyzers.
      static java.lang.String FAIL_JUNIT_ON_CVSS
      The CLI argument to set the threshold that is considered a failure when generating the JUNIT report format.
      static java.lang.String FAIL_ON_CVSS
      The CLI argument to configure when the execution should be considered a failure.
      static java.lang.String HELP
      The long CLI argument name asking for help.
      static java.lang.String HELP_SHORT
      The short CLI argument name asking for help.
      static java.lang.String HINTS_FILE
      The CLI argument name for setting the location of the hint file.
      static java.lang.String HOSTED_SUPPRESSIONS_BEARER_TOKEN
      The toke for bearer auth to a mirrored hosted suppressions file.
      static java.lang.String HOSTED_SUPPRESSIONS_FORCEUPDATE
      The CLI argument to set Whether the hosted suppressions file will update regardless of the `noupdate` argument.
      static java.lang.String HOSTED_SUPPRESSIONS_PASSWORD
      The passwored for basic auth to a mirrored hosted suppressions file.
      static java.lang.String HOSTED_SUPPRESSIONS_URL
      The CLI argument to set the location of a mirrored hosted suppressions file .
      static java.lang.String HOSTED_SUPPRESSIONS_USER
      The username for basic auth to a mirrored hosted suppressions file.
      static java.lang.String HOSTED_SUPPRESSIONS_VALID_FOR_HOURS
      The CLI argument to set the number of hours to wait before re-checking hosted suppressions file for updates.
      static java.lang.String KEV_BEARER_TOKEN
      The token for bearer auth towards a CISA Known Exploited Vulnerability JSON datafeed mirror.
      static java.lang.String KEV_PASSWORD
      The password for basic auth towards a CISA Known Exploited Vulnerability JSON datafeed mirror.
      static java.lang.String KEV_URL
      The URL to the CISA Known Exploited Vulnerability JSON datafeed.
      static java.lang.String KEV_USER
      The user for basic auth towards a CISA Known Exploited Vulnerability JSON datafeed mirror.
      static java.lang.String NEXUS_PASSWORD
      The password for the nexus server.
      static java.lang.String NEXUS_URL
      The URL of the nexus server.
      static java.lang.String NEXUS_USERNAME
      The username for the nexus server.
      static java.lang.String NEXUS_USES_PROXY
      Whether or not the defined proxy should be used when connecting to Nexus.
      static java.lang.String NODE_PACKAGE_SKIP_DEV_DEPENDENCIES
      Skips dev dependencies in Node Package Analyzer.
      static java.lang.String NON_PROXY_HOSTS
      The CLI argument name indicating the proxy proxy exclusion list.
      static java.lang.String NVD_API_DATAFEED_BEARER_TOKEN
      The token for bearer auth to the CVE data.
      static java.lang.String NVD_API_DATAFEED_PASSWORD
      The password for basic auth to the CVE data.
      static java.lang.String NVD_API_DATAFEED_URL
      The CLI argument name for the NVD API Data Feed URL.
      static java.lang.String NVD_API_DATAFEED_USER
      The username for basic auth to the CVE data.
      static java.lang.String NVD_API_DELAY
      The time in milliseconds to wait between downloading NVD API data.
      static java.lang.String NVD_API_ENDPOINT
      The CLI argument name for setting the URL for the NVD API Endpoint.
      static java.lang.String NVD_API_KEY
      The CLI argument name for setting the URL for the NVD API Key.
      static java.lang.String NVD_API_MAX_RETRY_COUNT
      The CLI argument name for setting the maximum number of retry requests for a single call to the NVD API.
      static java.lang.String NVD_API_RESULTS_PER_PAGE
      The number records for a single page from NVD API.
      static java.lang.String NVD_API_VALID_FOR_HOURS
      The CLI argument name for setting the number of hours to wait before checking for new updates from the NVD.
      static java.lang.String OSSINDEX_PASSWORD
      The password for the Sonatype OSS Index.
      static java.lang.String OSSINDEX_URL
      The alternative URL for the Sonatype OSS Index.
      static java.lang.String OSSINDEX_USERNAME
      The username for the Sonatype OSS Index.
      static java.lang.String OSSINDEX_WARN_ONLY_ON_REMOTE_ERRORS
      The password for the Sonatype OSS Index.
      static java.lang.String OUT
      The long CLI argument name specifying the directory to write the reports to.
      static java.lang.String OUT_SHORT
      The short CLI argument name specifying the directory to write the reports to.
      static java.lang.String OUTPUT_FORMAT
      The long CLI argument name specifying the output format to write the reports to.
      static java.lang.String OUTPUT_FORMAT_SHORT
      The short CLI argument name specifying the output format to write the reports to.
      static java.lang.String PATH_TO_BUNDLE_AUDIT
      The CLI argument name for setting the path to bundle-audit for Ruby bundle analysis.
      static java.lang.String PATH_TO_BUNDLE_AUDIT_WORKING_DIRECTORY
      The CLI argument name for setting the path that should be used as the working directory that the bundle-audit command used for Ruby bundle analysis should be executed from.
      static java.lang.String PATH_TO_CORE
      The CLI argument name for setting the path to dotnet core.
      static java.lang.String PATH_TO_GO
      The CLI argument name for setting the path to `go`.
      static java.lang.String PATH_TO_MIX_AUDIT
      The CLI argument name for setting the path to mix_audit for Elixir analysis.
      static java.lang.String PATH_TO_PNPM
      The CLI argument name for setting the path to `pnpm`.
      static java.lang.String PATH_TO_YARN
      The CLI argument name for setting the path to `yarn`.
      static java.lang.String PRETTY_PRINT
      The CLI argument to configure if the XML and JSON reports should be pretty printed.
      static java.lang.String PROJECT
      The long CLI argument name specifying the name of the project to be scanned.
      static java.lang.String PROP
      The CLI argument name for setting the location of an additional properties file.
      static java.lang.String PROP_SHORT
      The short CLI argument name for setting the location of an additional properties file.
      static java.lang.String PROXY_PASSWORD
      The CLI argument name indicating the proxy password.
      static java.lang.String PROXY_PORT
      The CLI argument name indicating the proxy port.
      static java.lang.String PROXY_SERVER
      The CLI argument name indicating the proxy server.
      static java.lang.String PROXY_USERNAME
      The CLI argument name indicating the proxy username.
      static java.lang.String PURGE_NVD
      The long CLI argument name specifying that only the update phase should be executed; no scan should be run.
      static java.lang.String RETIRE_JS_FORCEUPDATE
      Whether the RetireJS Analyzer will update regardless of the `autoupdate` setting.
      static java.lang.String RETIRED
      The CLI argument to enable the retired analyzers.
      static java.lang.String RETIREJS_FILTER_NON_VULNERABLE
      The CLI argument for the retire js content filters.
      static java.lang.String RETIREJS_FILTERS
      The CLI argument for the retire js content filters.
      static java.lang.String RETIREJS_URL
      The URL to the retire JS repository.
      static java.lang.String RETIREJS_URL_BEARER_TOKEN
      The token for bearer auth to the retire JS repository.
      static java.lang.String RETIREJS_URL_PASSWORD
      The password for basic auth to the retire JS repository.
      static java.lang.String RETIREJS_URL_USER
      The username for basic auth to the retire JS repository.
      static java.lang.String SCAN
      The long CLI argument name specifying the directory/file to scan.
      static java.lang.String SCAN_SHORT
      The short CLI argument name specifying the directory/file to scan.
      static java.lang.String SUPPRESSION_FILE_BEARER_TOKEN
      The toke for bearer auth to web-hosted suppression files.
      static java.lang.String SUPPRESSION_FILE_PASSWORD
      The passwored for basic auth to web-hosted suppression files.
      static java.lang.String SUPPRESSION_FILE_USER
      The username for basic auth to web-hosted suppression files.
      static java.lang.String SUPPRESSION_FILES
      The CLI argument name for setting the location of the suppression file(s).
      static java.lang.String SYM_LINK_DEPTH
      The CLI argument name for setting the depth of symbolic links that will be followed.
      static java.lang.String UPDATE_ONLY
      The long CLI argument name specifying that only the update phase should be executed; no scan should be run.
      static java.lang.String VERBOSE_LOG
      The CLI argument name for setting the location of the data directory.
      static java.lang.String VERBOSE_LOG_SHORT
      The short CLI argument name for setting the location of the data directory.
      static java.lang.String VERSION
      The short CLI argument name asking for the version.
      static java.lang.String VERSION_SHORT
      The long CLI argument name asking for the version.

    • Constructor Summary

      Constructors 
      Constructor Description
      ARGUMENT()  

    • Method Summary

      • Methods inherited from class java.lang.Object

        clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

    • Field Detail

      • SCAN

        public static final java.lang.String SCAN
        The long CLI argument name specifying the directory/file to scan.
        See Also:
        Constant Field Values

      • SCAN_SHORT

        public static final java.lang.String SCAN_SHORT
        The short CLI argument name specifying the directory/file to scan.
        See Also:
        Constant Field Values

      • DISABLE_AUTO_UPDATE

        public static final java.lang.String DISABLE_AUTO_UPDATE
        The long CLI argument name specifying that the CPE/CVE/etc. data should not be automatically updated.
        See Also:
        Constant Field Values

      • DISABLE_VERSION_CHECK

        public static final java.lang.String DISABLE_VERSION_CHECK
        The long CLI argument name specifying that the version check should not be performed.
        See Also:
        Constant Field Values

      • DISABLE_AUTO_UPDATE_SHORT

        public static final java.lang.String DISABLE_AUTO_UPDATE_SHORT
        The short CLI argument name specifying that the CPE/CVE/etc. data should not be automatically updated.
        See Also:
        Constant Field Values

      • UPDATE_ONLY

        public static final java.lang.String UPDATE_ONLY
        The long CLI argument name specifying that only the update phase should be executed; no scan should be run.
        See Also:
        Constant Field Values

      • PURGE_NVD

        public static final java.lang.String PURGE_NVD
        The long CLI argument name specifying that only the update phase should be executed; no scan should be run.
        See Also:
        Constant Field Values

      • OUT

        public static final java.lang.String OUT
        The long CLI argument name specifying the directory to write the reports to.
        See Also:
        Constant Field Values

      • OUT_SHORT

        public static final java.lang.String OUT_SHORT
        The short CLI argument name specifying the directory to write the reports to.
        See Also:
        Constant Field Values

      • OUTPUT_FORMAT

        public static final java.lang.String OUTPUT_FORMAT
        The long CLI argument name specifying the output format to write the reports to.
        See Also:
        Constant Field Values

      • OUTPUT_FORMAT_SHORT

        public static final java.lang.String OUTPUT_FORMAT_SHORT
        The short CLI argument name specifying the output format to write the reports to.
        See Also:
        Constant Field Values

      • PROJECT

        public static final java.lang.String PROJECT
        The long CLI argument name specifying the name of the project to be scanned.
        See Also:
        Constant Field Values

      • HELP

        public static final java.lang.String HELP
        The long CLI argument name asking for help.
        See Also:
        Constant Field Values

      • ADVANCED_HELP

        public static final java.lang.String ADVANCED_HELP
        The long CLI argument name asking for advanced help.
        See Also:
        Constant Field Values

      • HELP_SHORT

        public static final java.lang.String HELP_SHORT
        The short CLI argument name asking for help.
        See Also:
        Constant Field Values

      • VERSION_SHORT

        public static final java.lang.String VERSION_SHORT
        The long CLI argument name asking for the version.
        See Also:
        Constant Field Values

      • VERSION

        public static final java.lang.String VERSION
        The short CLI argument name asking for the version.
        See Also:
        Constant Field Values

      • PROXY_PORT

        public static final java.lang.String PROXY_PORT
        The CLI argument name indicating the proxy port.
        See Also:
        Constant Field Values

      • PROXY_SERVER

        public static final java.lang.String PROXY_SERVER
        The CLI argument name indicating the proxy server.
        See Also:
        Constant Field Values

      • PROXY_USERNAME

        public static final java.lang.String PROXY_USERNAME
        The CLI argument name indicating the proxy username.
        See Also:
        Constant Field Values

      • PROXY_PASSWORD

        public static final java.lang.String PROXY_PASSWORD
        The CLI argument name indicating the proxy password.
        See Also:
        Constant Field Values

      • NON_PROXY_HOSTS

        public static final java.lang.String NON_PROXY_HOSTS
        The CLI argument name indicating the proxy proxy exclusion list.
        See Also:
        Constant Field Values

      • CONNECTION_TIMEOUT_SHORT

        public static final java.lang.String CONNECTION_TIMEOUT_SHORT
        The short CLI argument name indicating the connection timeout.
        See Also:
        Constant Field Values

      • CONNECTION_TIMEOUT

        public static final java.lang.String CONNECTION_TIMEOUT
        The CLI argument name indicating the connection timeout.
        See Also:
        Constant Field Values

      • CONNECTION_READ_TIMEOUT

        public static final java.lang.String CONNECTION_READ_TIMEOUT
        The CLI argument name indicating the connection read timeout.
        See Also:
        Constant Field Values

      • PROP_SHORT

        public static final java.lang.String PROP_SHORT
        The short CLI argument name for setting the location of an additional properties file.
        See Also:
        Constant Field Values

      • PROP

        public static final java.lang.String PROP
        The CLI argument name for setting the location of an additional properties file.
        See Also:
        Constant Field Values

      • DATA_DIRECTORY

        public static final java.lang.String DATA_DIRECTORY
        The CLI argument name for setting the location of the data directory.
        See Also:
        Constant Field Values

      • NVD_API_ENDPOINT

        public static final java.lang.String NVD_API_ENDPOINT
        The CLI argument name for setting the URL for the NVD API Endpoint.
        See Also:
        Constant Field Values

      • NVD_API_KEY

        public static final java.lang.String NVD_API_KEY
        The CLI argument name for setting the URL for the NVD API Key.
        See Also:
        Constant Field Values

      • NVD_API_MAX_RETRY_COUNT

        public static final java.lang.String NVD_API_MAX_RETRY_COUNT
        The CLI argument name for setting the maximum number of retry requests for a single call to the NVD API.
        See Also:
        Constant Field Values

      • NVD_API_VALID_FOR_HOURS

        public static final java.lang.String NVD_API_VALID_FOR_HOURS
        The CLI argument name for setting the number of hours to wait before checking for new updates from the NVD.
        See Also:
        Constant Field Values

      • NVD_API_DATAFEED_URL

        public static final java.lang.String NVD_API_DATAFEED_URL
        The CLI argument name for the NVD API Data Feed URL.
        See Also:
        Constant Field Values

      • NVD_API_DATAFEED_USER

        public static final java.lang.String NVD_API_DATAFEED_USER
        The username for basic auth to the CVE data.
        See Also:
        Constant Field Values

      • NVD_API_DATAFEED_PASSWORD

        public static final java.lang.String NVD_API_DATAFEED_PASSWORD
        The password for basic auth to the CVE data.
        See Also:
        Constant Field Values

      • NVD_API_DATAFEED_BEARER_TOKEN

        public static final java.lang.String NVD_API_DATAFEED_BEARER_TOKEN
        The token for bearer auth to the CVE data.
        See Also:
        Constant Field Values

      • SUPPRESSION_FILE_USER

        public static final java.lang.String SUPPRESSION_FILE_USER
        The username for basic auth to web-hosted suppression files.
        See Also:
        Constant Field Values

      • SUPPRESSION_FILE_PASSWORD

        public static final java.lang.String SUPPRESSION_FILE_PASSWORD
        The passwored for basic auth to web-hosted suppression files.
        See Also:
        Constant Field Values

      • SUPPRESSION_FILE_BEARER_TOKEN

        public static final java.lang.String SUPPRESSION_FILE_BEARER_TOKEN
        The toke for bearer auth to web-hosted suppression files.
        See Also:
        Constant Field Values

      • NVD_API_DELAY

        public static final java.lang.String NVD_API_DELAY
        The time in milliseconds to wait between downloading NVD API data.
        See Also:
        Constant Field Values

      • NVD_API_RESULTS_PER_PAGE

        public static final java.lang.String NVD_API_RESULTS_PER_PAGE
        The number records for a single page from NVD API.
        See Also:
        Constant Field Values

      • DATA_DIRECTORY_SHORT

        public static final java.lang.String DATA_DIRECTORY_SHORT
        The short CLI argument name for setting the location of the data directory.
        See Also:
        Constant Field Values

      • VERBOSE_LOG

        public static final java.lang.String VERBOSE_LOG
        The CLI argument name for setting the location of the data directory.
        See Also:
        Constant Field Values

      • VERBOSE_LOG_SHORT

        public static final java.lang.String VERBOSE_LOG_SHORT
        The short CLI argument name for setting the location of the data directory.
        See Also:
        Constant Field Values

      • SYM_LINK_DEPTH

        public static final java.lang.String SYM_LINK_DEPTH
        The CLI argument name for setting the depth of symbolic links that will be followed.
        See Also:
        Constant Field Values

      • SUPPRESSION_FILES

        public static final java.lang.String SUPPRESSION_FILES
        The CLI argument name for setting the location of the suppression file(s).
        See Also:
        Constant Field Values

      • HINTS_FILE

        public static final java.lang.String HINTS_FILE
        The CLI argument name for setting the location of the hint file.
        See Also:
        Constant Field Values

      • DISABLE_JAR

        public static final java.lang.String DISABLE_JAR
        Disables the Jar Analyzer.
        See Also:
        Constant Field Values

      • DISABLE_MSBUILD

        public static final java.lang.String DISABLE_MSBUILD
        Disable the MS Build Analyzer.
        See Also:
        Constant Field Values

      • DISABLE_ARCHIVE

        public static final java.lang.String DISABLE_ARCHIVE
        Disables the Archive Analyzer.
        See Also:
        Constant Field Values

      • DISABLE_KEV

        public static final java.lang.String DISABLE_KEV
        Disables the Known Exploited Analyzer.
        See Also:
        Constant Field Values

      • KEV_URL

        public static final java.lang.String KEV_URL
        The URL to the CISA Known Exploited Vulnerability JSON datafeed.
        See Also:
        Constant Field Values

      • KEV_USER

        public static final java.lang.String KEV_USER
        The user for basic auth towards a CISA Known Exploited Vulnerability JSON datafeed mirror.
        See Also:
        Constant Field Values

      • KEV_PASSWORD

        public static final java.lang.String KEV_PASSWORD
        The password for basic auth towards a CISA Known Exploited Vulnerability JSON datafeed mirror.
        See Also:
        Constant Field Values

      • KEV_BEARER_TOKEN

        public static final java.lang.String KEV_BEARER_TOKEN
        The token for bearer auth towards a CISA Known Exploited Vulnerability JSON datafeed mirror.
        See Also:
        Constant Field Values

      • DISABLE_PY_DIST

        public static final java.lang.String DISABLE_PY_DIST
        Disables the Python Distribution Analyzer.
        See Also:
        Constant Field Values

      • DISABLE_PY_PKG

        public static final java.lang.String DISABLE_PY_PKG
        Disables the Python Package Analyzer.
        See Also:
        Constant Field Values

      • DISABLE_MIX_AUDIT

        public static final java.lang.String DISABLE_MIX_AUDIT
        Disables the Elixir mix audit Analyzer.
        See Also:
        Constant Field Values

      • DISABLE_GO_DEP

        public static final java.lang.String DISABLE_GO_DEP
        Disables the Golang Dependency Analyzer.
        See Also:
        Constant Field Values

      • DISABLE_COMPOSER

        public static final java.lang.String DISABLE_COMPOSER
        Disables the PHP Composer Analyzer.
        See Also:
        Constant Field Values

      • COMPOSER_LOCK_SKIP_DEV

        public static final java.lang.String COMPOSER_LOCK_SKIP_DEV
        Whether the PHP Composer Analyzer skips dev packages.
        See Also:
        Constant Field Values

      • DISABLE_CPAN

        public static final java.lang.String DISABLE_CPAN
        Disables the Perl CPAN File Analyzer.
        See Also:
        Constant Field Values

      • DISABLE_GOLANG_MOD

        public static final java.lang.String DISABLE_GOLANG_MOD
        Disables the Golang Mod Analyzer.
        See Also:
        Constant Field Values

      • DISABLE_DART

        public static final java.lang.String DISABLE_DART
        Disables the Dart Analyzer.
        See Also:
        Constant Field Values

      • PATH_TO_GO

        public static final java.lang.String PATH_TO_GO
        The CLI argument name for setting the path to `go`.
        See Also:
        Constant Field Values

      • PATH_TO_YARN

        public static final java.lang.String PATH_TO_YARN
        The CLI argument name for setting the path to `yarn`.
        See Also:
        Constant Field Values

      • PATH_TO_PNPM

        public static final java.lang.String PATH_TO_PNPM
        The CLI argument name for setting the path to `pnpm`.
        See Also:
        Constant Field Values

      • DISABLE_RUBYGEMS

        public static final java.lang.String DISABLE_RUBYGEMS
        Disables the Ruby Gemspec Analyzer.
        See Also:
        Constant Field Values

      • DISABLE_AUTOCONF

        public static final java.lang.String DISABLE_AUTOCONF
        Disables the Autoconf Analyzer.
        See Also:
        Constant Field Values

      • DISABLE_MAVEN_INSTALL

        public static final java.lang.String DISABLE_MAVEN_INSTALL
        Disables the Maven install Analyzer.
        See Also:
        Constant Field Values

      • DISABLE_PIP

        public static final java.lang.String DISABLE_PIP
        Disables the pip Analyzer.
        See Also:
        Constant Field Values

      • DISABLE_PIPFILE

        public static final java.lang.String DISABLE_PIPFILE
        Disables the Pipfile Analyzer.
        See Also:
        Constant Field Values

      • DISABLE_POETRY

        public static final java.lang.String DISABLE_POETRY
        Disables the Poetry Analyzer.
        See Also:
        Constant Field Values

      • DISABLE_CMAKE

        public static final java.lang.String DISABLE_CMAKE
        Disables the Cmake Analyzer.
        See Also:
        Constant Field Values

      • DISABLE_COCOAPODS

        public static final java.lang.String DISABLE_COCOAPODS
        Disables the cocoapods analyzer.
        See Also:
        Constant Field Values

      • DISABLE_CARTHAGE

        public static final java.lang.String DISABLE_CARTHAGE
        Disables the Carthage analyzer.
        See Also:
        Constant Field Values

      • DISABLE_SWIFT

        public static final java.lang.String DISABLE_SWIFT
        Disables the swift package manager analyzer.
        See Also:
        Constant Field Values

      • DISABLE_SWIFT_RESOLVED

        public static final java.lang.String DISABLE_SWIFT_RESOLVED
        Disables the swift package resolved analyzer.
        See Also:
        Constant Field Values

      • DISABLE_ASSEMBLY

        public static final java.lang.String DISABLE_ASSEMBLY
        Disables the Assembly Analyzer.
        See Also:
        Constant Field Values

      • DISABLE_BUNDLE_AUDIT

        public static final java.lang.String DISABLE_BUNDLE_AUDIT
        Disables the Ruby Bundler Audit Analyzer.
        See Also:
        Constant Field Values

      • DISABLE_FILENAME

        public static final java.lang.String DISABLE_FILENAME
        Disables the File Name Analyzer.
        See Also:
        Constant Field Values

      • DISABLE_NUSPEC

        public static final java.lang.String DISABLE_NUSPEC
        Disables the Nuspec Analyzer.
        See Also:
        Constant Field Values

      • DISABLE_NUGETCONF

        public static final java.lang.String DISABLE_NUGETCONF
        Disables the Nuget packages.config Analyzer.
        See Also:
        Constant Field Values

      • DISABLE_CENTRAL

        public static final java.lang.String DISABLE_CENTRAL
        Disables the Central Analyzer.
        See Also:
        Constant Field Values

      • DISABLE_CENTRAL_CACHE

        public static final java.lang.String DISABLE_CENTRAL_CACHE
        Disables the Central Analyzer's ability to cache results locally.
        See Also:
        Constant Field Values

      • CENTRAL_URL

        public static final java.lang.String CENTRAL_URL
        The alternative URL for Maven Central Search.
        See Also:
        Constant Field Values

      • CENTRAL_USERNAME

        public static final java.lang.String CENTRAL_USERNAME
        The username for basic authentication to the alternative Maven Central Search.
        See Also:
        Constant Field Values

      • CENTRAL_PASSWORD

        public static final java.lang.String CENTRAL_PASSWORD
        The password for basic authentication to the alternative Maven Central Search.
        See Also:
        Constant Field Values

      • CENTRAL_BEARER_TOKEN

        public static final java.lang.String CENTRAL_BEARER_TOKEN
        The token for bearer authentication to the alternative Maven Central Search.
        See Also:
        Constant Field Values

      • ENABLE_NEXUS

        public static final java.lang.String ENABLE_NEXUS
        Disables the Nexus Analyzer.
        See Also:
        Constant Field Values

      • DISABLE_OSSINDEX

        public static final java.lang.String DISABLE_OSSINDEX
        Disables the Sonatype OSS Index Analyzer.
        See Also:
        Constant Field Values

      • DISABLE_OSSINDEX_CACHE

        public static final java.lang.String DISABLE_OSSINDEX_CACHE
        Disables the Sonatype OSS Index Analyzer's ability to cache results locally.
        See Also:
        Constant Field Values

      • OSSINDEX_URL

        public static final java.lang.String OSSINDEX_URL
        The alternative URL for the Sonatype OSS Index.
        See Also:
        Constant Field Values

      • OSSINDEX_USERNAME

        public static final java.lang.String OSSINDEX_USERNAME
        The username for the Sonatype OSS Index.
        See Also:
        Constant Field Values

      • OSSINDEX_PASSWORD

        public static final java.lang.String OSSINDEX_PASSWORD
        The password for the Sonatype OSS Index.
        See Also:
        Constant Field Values

      • OSSINDEX_WARN_ONLY_ON_REMOTE_ERRORS

        public static final java.lang.String OSSINDEX_WARN_ONLY_ON_REMOTE_ERRORS
        The password for the Sonatype OSS Index.
        See Also:
        Constant Field Values

      • DISABLE_OPENSSL

        public static final java.lang.String DISABLE_OPENSSL
        Disables the OpenSSL Analyzer.
        See Also:
        Constant Field Values

      • DISABLE_NODE_JS

        public static final java.lang.String DISABLE_NODE_JS
        Disables the Node.js Package Analyzer.
        See Also:
        Constant Field Values

      • NODE_PACKAGE_SKIP_DEV_DEPENDENCIES

        public static final java.lang.String NODE_PACKAGE_SKIP_DEV_DEPENDENCIES
        Skips dev dependencies in Node Package Analyzer.
        See Also:
        Constant Field Values

      • DISABLE_NODE_AUDIT

        public static final java.lang.String DISABLE_NODE_AUDIT
        Disables the Node Audit Analyzer.
        See Also:
        Constant Field Values

      • DISABLE_YARN_AUDIT

        public static final java.lang.String DISABLE_YARN_AUDIT
        Disables the Yarn Audit Analyzer.
        See Also:
        Constant Field Values

      • DISABLE_PNPM_AUDIT

        public static final java.lang.String DISABLE_PNPM_AUDIT
        Disables the Pnpm Audit Analyzer.
        See Also:
        Constant Field Values

      • DISABLE_NODE_AUDIT_CACHE

        public static final java.lang.String DISABLE_NODE_AUDIT_CACHE
        Disables the Node Audit Analyzer's ability to cache results locally.
        See Also:
        Constant Field Values

      • DISABLE_NODE_AUDIT_SKIPDEV

        public static final java.lang.String DISABLE_NODE_AUDIT_SKIPDEV
        Configures the Node Audit Analyzer to skip the dev dependencies.
        See Also:
        Constant Field Values

      • DISABLE_RETIRE_JS

        public static final java.lang.String DISABLE_RETIRE_JS
        Disables the RetireJS Analyzer.
        See Also:
        Constant Field Values

      • RETIRE_JS_FORCEUPDATE

        public static final java.lang.String RETIRE_JS_FORCEUPDATE
        Whether the RetireJS Analyzer will update regardless of the `autoupdate` setting.
        See Also:
        Constant Field Values

      • RETIREJS_URL

        public static final java.lang.String RETIREJS_URL
        The URL to the retire JS repository.
        See Also:
        Constant Field Values

      • RETIREJS_URL_USER

        public static final java.lang.String RETIREJS_URL_USER
        The username for basic auth to the retire JS repository.
        See Also:
        Constant Field Values

      • RETIREJS_URL_PASSWORD

        public static final java.lang.String RETIREJS_URL_PASSWORD
        The password for basic auth to the retire JS repository.
        See Also:
        Constant Field Values

      • RETIREJS_URL_BEARER_TOKEN

        public static final java.lang.String RETIREJS_URL_BEARER_TOKEN
        The token for bearer auth to the retire JS repository.
        See Also:
        Constant Field Values

      • NEXUS_URL

        public static final java.lang.String NEXUS_URL
        The URL of the nexus server.
        See Also:
        Constant Field Values

      • NEXUS_USERNAME

        public static final java.lang.String NEXUS_USERNAME
        The username for the nexus server.
        See Also:
        Constant Field Values

      • NEXUS_PASSWORD

        public static final java.lang.String NEXUS_PASSWORD
        The password for the nexus server.
        See Also:
        Constant Field Values

      • NEXUS_USES_PROXY

        public static final java.lang.String NEXUS_USES_PROXY
        Whether or not the defined proxy should be used when connecting to Nexus.
        See Also:
        Constant Field Values

      • CONNECTION_STRING

        public static final java.lang.String CONNECTION_STRING
        The CLI argument name for setting the connection string.
        See Also:
        Constant Field Values

      • DB_NAME

        public static final java.lang.String DB_NAME
        The CLI argument name for setting the database user name.
        See Also:
        Constant Field Values

      • DB_PASSWORD

        public static final java.lang.String DB_PASSWORD
        The CLI argument name for setting the database password.
        See Also:
        Constant Field Values

      • DB_DRIVER

        public static final java.lang.String DB_DRIVER
        The CLI argument name for setting the database driver name.
        See Also:
        Constant Field Values

      • DB_DRIVER_PATH

        public static final java.lang.String DB_DRIVER_PATH
        The CLI argument name for setting the path to the database driver; in case it is not on the class path.
        See Also:
        Constant Field Values

      • PATH_TO_CORE

        public static final java.lang.String PATH_TO_CORE
        The CLI argument name for setting the path to dotnet core.
        See Also:
        Constant Field Values

      • ADDITIONAL_ZIP_EXTENSIONS

        public static final java.lang.String ADDITIONAL_ZIP_EXTENSIONS
        The CLI argument name for setting extra extensions.
        See Also:
        Constant Field Values

      • EXCLUDE

        public static final java.lang.String EXCLUDE
        Exclude path argument.
        See Also:
        Constant Field Values

      • PATH_TO_BUNDLE_AUDIT

        public static final java.lang.String PATH_TO_BUNDLE_AUDIT
        The CLI argument name for setting the path to bundle-audit for Ruby bundle analysis.
        See Also:
        Constant Field Values

      • PATH_TO_BUNDLE_AUDIT_WORKING_DIRECTORY

        public static final java.lang.String PATH_TO_BUNDLE_AUDIT_WORKING_DIRECTORY
        The CLI argument name for setting the path that should be used as the working directory that the bundle-audit command used for Ruby bundle analysis should be executed from. This will allow for the usage of rbenv
        See Also:
        Constant Field Values

      • PATH_TO_MIX_AUDIT

        public static final java.lang.String PATH_TO_MIX_AUDIT
        The CLI argument name for setting the path to mix_audit for Elixir analysis.
        See Also:
        Constant Field Values

      • EXPERIMENTAL

        public static final java.lang.String EXPERIMENTAL
        The CLI argument to enable the experimental analyzers.
        See Also:
        Constant Field Values

      • RETIRED

        public static final java.lang.String RETIRED
        The CLI argument to enable the retired analyzers.
        See Also:
        Constant Field Values

      • RETIREJS_FILTERS

        public static final java.lang.String RETIREJS_FILTERS
        The CLI argument for the retire js content filters.
        See Also:
        Constant Field Values

      • RETIREJS_FILTER_NON_VULNERABLE

        public static final java.lang.String RETIREJS_FILTER_NON_VULNERABLE
        The CLI argument for the retire js content filters.
        See Also:
        Constant Field Values

      • ARTIFACTORY_ENABLED

        public static final java.lang.String ARTIFACTORY_ENABLED
        The CLI argument for indicating if the Artifactory analyzer should be enabled.
        See Also:
        Constant Field Values

      • ARTIFACTORY_URL

        public static final java.lang.String ARTIFACTORY_URL
        The CLI argument for indicating if the Artifactory analyzer should use the proxy.
        See Also:
        Constant Field Values

      • ARTIFACTORY_USERNAME

        public static final java.lang.String ARTIFACTORY_USERNAME
        The CLI argument for indicating the Artifactory username.
        See Also:
        Constant Field Values

      • ARTIFACTORY_API_TOKEN

        public static final java.lang.String ARTIFACTORY_API_TOKEN
        The CLI argument for indicating the Artifactory API token.
        See Also:
        Constant Field Values

      • ARTIFACTORY_BEARER_TOKEN

        public static final java.lang.String ARTIFACTORY_BEARER_TOKEN
        The CLI argument for indicating the Artifactory bearer token.
        See Also:
        Constant Field Values

      • ARTIFACTORY_USES_PROXY

        public static final java.lang.String ARTIFACTORY_USES_PROXY
        The CLI argument for indicating if the Artifactory analyzer should use the proxy.
        See Also:
        Constant Field Values

      • ARTIFACTORY_PARALLEL_ANALYSIS

        public static final java.lang.String ARTIFACTORY_PARALLEL_ANALYSIS
        The CLI argument for indicating if the Artifactory analyzer should use the parallel analysis.
        See Also:
        Constant Field Values

      • FAIL_ON_CVSS

        public static final java.lang.String FAIL_ON_CVSS
        The CLI argument to configure when the execution should be considered a failure.
        See Also:
        Constant Field Values

      • PRETTY_PRINT

        public static final java.lang.String PRETTY_PRINT
        The CLI argument to configure if the XML and JSON reports should be pretty printed.
        See Also:
        Constant Field Values

      • FAIL_JUNIT_ON_CVSS

        public static final java.lang.String FAIL_JUNIT_ON_CVSS
        The CLI argument to set the threshold that is considered a failure when generating the JUNIT report format.
        See Also:
        Constant Field Values

      • DISABLE_HOSTED_SUPPRESSIONS

        public static final java.lang.String DISABLE_HOSTED_SUPPRESSIONS
        The CLI argument to set the number of hours to wait before re-checking hosted suppressions file for updates.
        See Also:
        Constant Field Values

      • HOSTED_SUPPRESSIONS_VALID_FOR_HOURS

        public static final java.lang.String HOSTED_SUPPRESSIONS_VALID_FOR_HOURS
        The CLI argument to set the number of hours to wait before re-checking hosted suppressions file for updates.
        See Also:
        Constant Field Values

      • HOSTED_SUPPRESSIONS_FORCEUPDATE

        public static final java.lang.String HOSTED_SUPPRESSIONS_FORCEUPDATE
        The CLI argument to set Whether the hosted suppressions file will update regardless of the `noupdate` argument.
        See Also:
        Constant Field Values

      • HOSTED_SUPPRESSIONS_URL

        public static final java.lang.String HOSTED_SUPPRESSIONS_URL
        The CLI argument to set the location of a mirrored hosted suppressions file .
        See Also:
        Constant Field Values

      • HOSTED_SUPPRESSIONS_USER

        public static final java.lang.String HOSTED_SUPPRESSIONS_USER
        The username for basic auth to a mirrored hosted suppressions file.
        See Also:
        Constant Field Values

      • HOSTED_SUPPRESSIONS_PASSWORD

        public static final java.lang.String HOSTED_SUPPRESSIONS_PASSWORD
        The passwored for basic auth to a mirrored hosted suppressions file.
        See Also:
        Constant Field Values

      • HOSTED_SUPPRESSIONS_BEARER_TOKEN

        public static final java.lang.String HOSTED_SUPPRESSIONS_BEARER_TOKEN
        The toke for bearer auth to a mirrored hosted suppressions file.
        See Also:
        Constant Field Values

    • Constructor Detail

      • ARGUMENT

        public ARGUMENT()