Class NvdCveAnalyzer
- java.lang.Object
-
- org.owasp.dependencycheck.analyzer.AbstractAnalyzer
-
- org.owasp.dependencycheck.analyzer.NvdCveAnalyzer
-
- All Implemented Interfaces:
Analyzer
@ThreadSafe public class NvdCveAnalyzer extends AbstractAnalyzer
NvdCveAnalyzer is a utility class that takes a project dependency and attempts to discern if there is an associated CVEs. It uses the the identifiers found by other analyzers to lookup the CVE data.- Author:
- Jeremy Long
-
-
Constructor Summary
Constructors Constructor Description NvdCveAnalyzer()
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description protected void
analyzeDependency(Dependency dependency, Engine engine)
Analyzes a dependency and attempts to determine if there are any CPE identifiers for this dependency.AnalysisPhase
getAnalysisPhase()
Returns the analysis phase that this analyzer should run in.protected java.lang.String
getAnalyzerEnabledSettingKey()
Returns the setting key to determine if the analyzer is enabled.java.lang.String
getName()
Returns the name of this analyzer.-
Methods inherited from class org.owasp.dependencycheck.analyzer.AbstractAnalyzer
analyze, close, closeAnalyzer, getSettings, initialize, isEnabled, prepare, prepareAnalyzer, setEnabled, supportsParallelProcessing
-
-
-
-
Method Detail
-
analyzeDependency
protected void analyzeDependency(Dependency dependency, Engine engine) throws AnalysisException
Analyzes a dependency and attempts to determine if there are any CPE identifiers for this dependency.- Specified by:
analyzeDependency
in classAbstractAnalyzer
- Parameters:
dependency
- The Dependency to analyzeengine
- The analysis engine- Throws:
AnalysisException
- thrown if there is an issue analyzing the dependency
-
getName
public java.lang.String getName()
Returns the name of this analyzer.- Returns:
- the name of this analyzer.
-
getAnalysisPhase
public AnalysisPhase getAnalysisPhase()
Returns the analysis phase that this analyzer should run in.- Returns:
- the analysis phase that this analyzer should run in.
-
getAnalyzerEnabledSettingKey
protected java.lang.String getAnalyzerEnabledSettingKey()
Returns the setting key to determine if the analyzer is enabled.
- Specified by:
getAnalyzerEnabledSettingKey
in classAbstractAnalyzer
- Returns:
- the key for the analyzer's enabled property
-
-