Uses of Class
org.owasp.dependencycheck.Engine

Packages that use Engine

Package	Description
org.owasp.dependencycheck	Includes the main entry point for dependency-check.
org.owasp.dependencycheck.agent	The agent package holds an agent API that can be used by other applications that have information about dependencies; but would rather implement something in their code directly rather then spawn a process to run the entire dependency-check engine.
org.owasp.dependencycheck.analyzer	Analyzers are used to inspect the identified dependencies, collect Evidence, and process the dependencies.
org.owasp.dependencycheck.data.update	Contains classes used to update the data stores. The UpdateService will load, any correctly defined CachedWebDataSource(s) and call update() on them.
org.owasp.dependencycheck.processing	Classes used to process the output of external tools.
org.owasp.dependencycheck.utils	Includes various utility classes such as a Settings wrapper, a Checksum utility, etc.

Uses of Engine in org.owasp.dependencycheck

Constructors in org.owasp.dependencycheck with parameters of type Engine

Constructor and Description
AnalysisTask(Analyzer analyzer, Dependency dependency, Engine engine, List<Throwable> exceptions) Creates a new analysis task.

Uses of Engine in org.owasp.dependencycheck.agent

Methods in org.owasp.dependencycheck.agent that return Engine

Modifier and Type	Method and Description
Engine	DependencyCheckScanAgent.execute() Executes the dependency-check and generates the report.

Uses of Engine in org.owasp.dependencycheck.analyzer

Methods in org.owasp.dependencycheck.analyzer with parameters of type Engine

Modifier and Type	Method and Description
void	Analyzer.analyze(Dependency dependency, Engine engine) Analyzes the given dependency.
void	AbstractAnalyzer.analyze(Dependency dependency, Engine engine) Analyzes a given dependency.
protected void	SwiftPackageManagerAnalyzer.analyzeDependency(Dependency dependency, Engine engine)
protected void	PipfileAnalyzer.analyzeDependency(Dependency dependency, Engine engine)
protected void	YarnAuditAnalyzer.analyzeDependency(Dependency dependency, Engine engine)
protected void	GolangDepAnalyzer.analyzeDependency(Dependency dependency, Engine engine) Analyzes go packages and adds evidence to the dependency.
protected void	RubyGemspecAnalyzer.analyzeDependency(Dependency dependency, Engine engine)
protected void	FileNameAnalyzer.analyzeDependency(Dependency dependency, Engine engine) Collects information about the file name.
void	ArtifactoryAnalyzer.analyzeDependency(Dependency dependency, Engine engine) Performs the analysis.
protected void	OpenSSLAnalyzer.analyzeDependency(Dependency dependency, Engine engine) Analyzes python packages and adds evidence to the dependency.
protected void	NodePackageAnalyzer.analyzeDependency(Dependency dependency, Engine engine)
void	NugetconfAnalyzer.analyzeDependency(Dependency dependency, Engine engine) Performs the analysis.
void	AssemblyAnalyzer.analyzeDependency(Dependency dependency, Engine engine) Performs the analysis on a single Dependency.
void	JarAnalyzer.analyzeDependency(Dependency dependency, Engine engine) Loads a specified JAR file and collects information from the manifest and checksums to identify the correct CPE information.
protected void	AbstractSuppressionAnalyzer.analyzeDependency(Dependency dependency, Engine engine)
protected void	FalsePositiveAnalyzer.analyzeDependency(Dependency dependency, Engine engine) Analyzes the dependencies and removes bad/incorrect CPE associations based on various heuristics.
protected void	CPEAnalyzer.analyzeDependency(Dependency dependency, Engine engine) Analyzes a dependency and attempts to determine if there are any CPE identifiers for this dependency.
protected void	NvdCveAnalyzer.analyzeDependency(Dependency dependency, Engine engine) Analyzes a dependency and attempts to determine if there are any CPE identifiers for this dependency.
protected void	AutoconfAnalyzer.analyzeDependency(Dependency dependency, Engine engine)
protected void	NodeAuditAnalyzer.analyzeDependency(Dependency dependency, Engine engine)
protected void	PipAnalyzer.analyzeDependency(Dependency dependency, Engine engine)
void	CentralAnalyzer.analyzeDependency(Dependency dependency, Engine engine) Performs the analysis.
protected void	AbstractDependencyComparingAnalyzer.analyzeDependency(Dependency ignore, Engine engine) Analyzes a set of dependencies.
protected void	PythonDistributionAnalyzer.analyzeDependency(Dependency dependency, Engine engine)
void	ArchiveAnalyzer.analyzeDependency(Dependency dependency, Engine engine) Analyzes a given dependency.
protected void	CMakeAnalyzer.analyzeDependency(Dependency dependency, Engine engine) Analyzes python packages and adds evidence to the dependency.
protected void	NpmCPEAnalyzer.analyzeDependency(Dependency dependency, Engine engine) Analyzes a dependency and attempts to determine if there are any CPE identifiers for this dependency.
protected void	RubyBundleAuditAnalyzer.analyzeDependency(Dependency dependency, Engine engine) Determines if the analyzer can analyze the given file type.
void	RetireJsAnalyzer.analyzeDependency(Dependency dependency, Engine engine) Analyzes the specified JavaScript file.
protected void	RubyBundlerAnalyzer.analyzeDependency(Dependency dependency, Engine engine)
protected void	OssIndexAnalyzer.analyzeDependency(Dependency dependency, Engine engine)
protected void	PEAnalyzer.analyzeDependency(Dependency dependency, Engine engine) Collects information about the file name.
protected void	VersionFilterAnalyzer.analyzeDependency(Dependency dependency, Engine engine) The HintAnalyzer uses knowledge about a dependency to add additional information to help in identification of identifiers or vulnerabilities.
protected void	ElixirMixAuditAnalyzer.analyzeDependency(Dependency dependency, Engine engine) Determines if the analyzer can analyze the given file type.
protected void	GolangModAnalyzer.analyzeDependency(Dependency dependency, Engine engine) Analyzes go packages and adds evidence to the dependency.
void	NuspecAnalyzer.analyzeDependency(Dependency dependency, Engine engine) Performs the analysis.
protected void	CocoaPodsAnalyzer.analyzeDependency(Dependency dependency, Engine engine)
protected void	ComposerLockAnalyzer.analyzeDependency(Dependency dependency, Engine engine) Entry point for the analyzer.
void	NexusAnalyzer.analyzeDependency(Dependency dependency, Engine engine) Performs the analysis.
protected void	MSBuildProjectAnalyzer.analyzeDependency(Dependency dependency, Engine engine)
protected void	PythonPackageAnalyzer.analyzeDependency(Dependency dependency, Engine engine) Analyzes python packages and adds evidence to the dependency.
protected abstract void	AbstractAnalyzer.analyzeDependency(Dependency dependency, Engine engine) Analyzes a given dependency.
protected void	HintAnalyzer.analyzeDependency(Dependency dependency, Engine engine) The HintAnalyzer uses knowledge about a dependency to add additional information to help in identification of identifiers or vulnerabilities.
protected boolean	JarAnalyzer.analyzePOM(Dependency dependency, List<JarAnalyzer.ClassNameInformation> classes, Engine engine) Attempts to find a pom.xml within the JAR file.
protected Dependency	AbstractNpmAnalyzer.findDependency(Engine engine, String name, String version) Locates the dependency from the list of dependencies that have been scanned by the engine.
void	Analyzer.prepare(Engine engine) The prepare method is called (once) prior to the analyze method being called on all of the dependencies.
void	AbstractAnalyzer.prepare(Engine engine) Initialize the abstract analyzer.
void	AbstractSuppressionAnalyzer.prepareAnalyzer(Engine engine) The prepare method loads the suppression XML file.
void	CPEAnalyzer.prepareAnalyzer(Engine engine) Creates the CPE Lucene Index.
protected void	AbstractFileTypeAnalyzer.prepareAnalyzer(Engine engine) Initializes the analyzer.
protected void	AbstractAnalyzer.prepareAnalyzer(Engine engine) Prepares a given Analyzer.
void	HintAnalyzer.prepareAnalyzer(Engine engine) The prepare method does nothing for this Analyzer.
protected void	SwiftPackageManagerAnalyzer.prepareFileTypeAnalyzer(Engine engine)
protected void	PipfileAnalyzer.prepareFileTypeAnalyzer(Engine engine) Initializes the file type analyzer.
protected void	YarnAuditAnalyzer.prepareFileTypeAnalyzer(Engine engine) Initializes the analyzer once before any analysis is performed.
protected void	GolangDepAnalyzer.prepareFileTypeAnalyzer(Engine engine) No-op initializer implementation.
protected void	RubyGemspecAnalyzer.prepareFileTypeAnalyzer(Engine engine)
void	ArtifactoryAnalyzer.prepareFileTypeAnalyzer(Engine engine) Initializes the analyzer once before any analysis is performed.
protected void	OpenSSLAnalyzer.prepareFileTypeAnalyzer(Engine engine) No-op initializer implementation.
protected void	NodePackageAnalyzer.prepareFileTypeAnalyzer(Engine engine) Performs validation on the configuration to ensure that the correct analyzers are in place.
void	NugetconfAnalyzer.prepareFileTypeAnalyzer(Engine engine) Initializes the analyzer once before any analysis is performed.
void	AssemblyAnalyzer.prepareFileTypeAnalyzer(Engine engine) Initialize the analyzer.
void	JarAnalyzer.prepareFileTypeAnalyzer(Engine engine) Initializes the JarAnalyzer.
protected void	AutoconfAnalyzer.prepareFileTypeAnalyzer(Engine engine) Initializes the file type analyzer.
protected void	PipAnalyzer.prepareFileTypeAnalyzer(Engine engine) Initializes the file type analyzer.
void	CentralAnalyzer.prepareFileTypeAnalyzer(Engine engine) Initializes the analyzer once before any analysis is performed.
protected abstract void	AbstractFileTypeAnalyzer.prepareFileTypeAnalyzer(Engine engine) Prepares the file type analyzer for dependency analysis.
protected void	PythonDistributionAnalyzer.prepareFileTypeAnalyzer(Engine engine) Makes sure a usable temporary directory is available.
void	ArchiveAnalyzer.prepareFileTypeAnalyzer(Engine engine) The prepare method does nothing for this Analyzer.
protected void	CMakeAnalyzer.prepareFileTypeAnalyzer(Engine engine) Initializes the analyzer.
protected void	AbstractNpmAnalyzer.prepareFileTypeAnalyzer(Engine engine) Initializes the analyzer once before any analysis is performed.
void	RubyBundleAuditAnalyzer.prepareFileTypeAnalyzer(Engine engine) Initialize the analyzer.
protected void	RetireJsAnalyzer.prepareFileTypeAnalyzer(Engine engine) Prepares the file type analyzer for dependency analysis.
protected void	PEAnalyzer.prepareFileTypeAnalyzer(Engine engine)
protected void	ElixirMixAuditAnalyzer.prepareFileTypeAnalyzer(Engine engine)
protected void	GolangModAnalyzer.prepareFileTypeAnalyzer(Engine engine) Initialize the go mod analyzer; ensures that go is installed and can be called.
void	NuspecAnalyzer.prepareFileTypeAnalyzer(Engine engine) Initializes the analyzer once before any analysis is performed.
protected void	CocoaPodsAnalyzer.prepareFileTypeAnalyzer(Engine engine)
protected void	ComposerLockAnalyzer.prepareFileTypeAnalyzer(Engine engine) Initializes the analyzer.
void	NexusAnalyzer.prepareFileTypeAnalyzer(Engine engine) Initializes the analyzer once before any analysis is performed.
protected void	MSBuildProjectAnalyzer.prepareFileTypeAnalyzer(Engine engine)
protected void	PythonPackageAnalyzer.prepareFileTypeAnalyzer(Engine engine) No-op initializer implementation.
protected void	AbstractNpmAnalyzer.processPackage(Engine engine, Dependency dependency, javax.json.JsonArray jsonArray, String depType) Processes a part of package.json (as defined by JsonArray) and update the specified dependency with relevant info.
protected void	AbstractNpmAnalyzer.processPackage(Engine engine, Dependency dependency, javax.json.JsonObject jsonObject, String depType) Processes a part of package.json (as defined by JsonObject) and update the specified dependency with relevant info.
protected void	AbstractNpmAnalyzer.processResults(List<Advisory> advisories, Engine engine, Dependency dependency, Map<String,String> dependencyMap) Processes the advisories creating the appropriate dependency objects and adding the resulting vulnerabilities.

Uses of Engine in org.owasp.dependencycheck.data.update

Methods in org.owasp.dependencycheck.data.update with parameters of type Engine

Modifier and Type	Method and Description
boolean	RetireJSDataSource.purge(Engine engine)
boolean	EngineVersionCheck.purge(Engine engine)
boolean	NvdCveUpdater.purge(Engine engine)
boolean	CachedWebDataSource.purge(Engine engine) Deletes any locally cached data.
boolean	RetireJSDataSource.update(Engine engine) Downloads the current RetireJS data source.
boolean	EngineVersionCheck.update(Engine engine) Downloads the current released version number and compares it to the running engine's version number.
boolean	NvdCveUpdater.update(Engine engine) Downloads the latest NVD CVE XML file from the web and imports it into the current CVE Database.
boolean	CachedWebDataSource.update(Engine engine) Determines if an update to the current data store is needed, if it is the new data is downloaded from the Internet and imported into the current cached data store.

Uses of Engine in org.owasp.dependencycheck.processing

Constructors in org.owasp.dependencycheck.processing with parameters of type Engine

Constructor and Description
BundlerAuditProcessor(Dependency gemDependency, Engine engine) Constructs a new processor to consume the output of `bundler-audit`.
GoModProcessor(Dependency goDependency, Engine engine) Constructs a new processor to consume the output of `go list -m -json all`.
MixAuditProcessor(Dependency mixDependency, Engine engine) Constructs a new processor to consume the output of `mix_audit`.

Uses of Engine in org.owasp.dependencycheck.utils

Methods in org.owasp.dependencycheck.utils with parameters of type Engine

Modifier and Type	Method and Description
static void	ExtractionUtil.extractFiles(File archive, File extractTo, Engine engine) Extracts the contents of an archive into the specified directory.