Returns whether this suppression rule has CWE entries. @return whether this suppression rule has CWE entries

This is likely a very broken attempt at determining if the 'left' dependency is the 'core' library in comparison to the 'right' library. @param left

Get the value of fromHint. @return the value of fromHint

Returns whether the database connection is open or closed. @return whether the database connection is open or closed

Map severity names from various sources to a standard set of severity names. @param sev the severity name @return the standardized severity name (crit

Parse an input stream and return the resulting {@link NugetPackage}. @param stream the input stream to parse @return the populated bean @throws Nuspe

Parses the given string into a Lucene Query. @param searchString the search text @return the Query object @throws ParseException thrown if the search

Parses a version string into its sub parts: major, minor, revision, build, etc. <b>Note</b>, this should only be used to parse something that is alrea

Do a preflight request to see if the repository is actually working. @return whether the repository is listening and returns the expected status resp

Java agent entry point. Loads all JAR files from the specified plugins directory and appends them to the system class loader search path. @param agen

Deletes any locally cached data. @param engine a reference to the dependency-check engine @return <code>true</code> if the purge was successful; othe

Put an object in the object collection. @param key the key to store the object @param object the object to store

Removes a related dependency. @param dependency the dependency to remove

Removes a vulnerable software identifier from the set of identifiers. @param i the identifier to remove

Searches the configured Central URL for the given hash (MD5, SHA1 and SHA256). If the artifact is found, a <code>MavenArtifact</code> is populated wit

Set the value of base. @param base new value of base

Set the value of organization. @param organization new value of organization

Set the value of versionParts. @param versionParts new value of versionParts

Determines if the analyzer can analyze the given dependency. @return whether or not the analyzer can analyze the dependency

Constructs and throws a fatal exception collection. @param message the exception message @param throwable the cause @param exceptions a collection of

Utility method to throw parse exceptions. @param message the exception message @param exception the cause of the exception @param suppressionFilePath

Returns the CPE 2.3 formatted string. @return the CPE 2.3 formatted string

Validates whether or not the path(s) points at a file that exists; if the path(s) does not point to an existing file a FileNotFoundException is thrown

Convert a CVSSv2 vector String into a CvssV3 Object. @param vectorString the vector string @param baseScore the base score @return the CVSSv2 object

Convert a CVSSv3 vector String into a CvssV3 Object. @param vectorString the vector string @param baseScore the base score @return the CVSSv3 object

The starting range, excluding the specified version, for matching vulnerable software. @param versionStartExcluding the version range @return a refer

Adds the CVSS to the cvssV3Below list. @param cvss the CVSS to add

Adds the CWE to the CWE list. @param cwe the CWE to add

Adds a new license to the list of licenses. @param license the license to add

Adds term to the product weighting collection. The terms added here are used later to boost the score of other terms. This is a way of combining evide

Adds the references to the collection. @param references a collection of references to add

Adds any non-null exceptions in the `suppress` list to the suppressed exceptions on the main exception `ex`. @param ex the main exception that suppre

Adds a term to the map of terms. @param terms the map of terms @param value the value of the term to add

Adds term to the vendor weighting collection. The terms added here are used later to boost the score of other terms. This is a way of combining eviden

Adds a list of vulnerabilities to the dependency. @param vulnerabilities a list of vulnerabilities

Advances the buffer to the next block if required. @return the number of characters read @throws IOException thrown if there is an error reading from

Constructs a non-validating secure SAX XMLReader. @return a non-validating SAX-based XML reader @throws javax.xml.parsers.ParserConfigurationExceptio

Executes the analysis task. @return null

Executes the test call against DetermineIdentifiers. @param vendor @param product @param version @param expectedCpe @param cpeAnalyzer @throws Except

Closes the given analyzer. @param analyzer the analyzer to close

Closes the given statement object ignoring any exceptions that occur. @param statement a Statement object

Evaluates the target against the version and version range checks: versionEndExcluding, versionStartExcluding versionEndIncluding, and versionStartInc

Tests if the text provided contains a URL. This is somewhat limited search in that it only looks for (ftp|http|https):// @param text the text to sear

Identifies if the cpe specified by the cpe suppression rule does not specify a version. @param c a suppression rule identifier @return true if the pr

Formats text for CSV format. This includes trimming whitespace, replace line breaks with spaces, and if necessary quotes the text and/or escapes conta

Checks the CVE Index to ensure data exists and analysis can continue. @return true if the database contains data

Determines the SHA1 and MD5 sum for the given file. @param hashFunction the hashing function @return the checksum

Takes a path and resolves it to be a canonical &amp; absolute path. The caveats are that this method will take an Ant style file selector path (../som

Default implementation of equals. @param obj the object to compare @return whether the objects are equivalent

Implementation of the equals method. @param obj the object to compare @return true if the objects are equal, otherwise false

@return whether the analyzer will fail for a unused suppression rule.

Locates the dependency from the list of dependencies that have been scanned by the engine. @param engine the dependency-check engine @param name the

Gather evidence from a Python source file using the given string assignment regex pattern. @param dependency the dependency that is being analyzed @p

Returns a flag indicating if this analyzer has run. This analyzer only runs once. Note this is currently only used in the unit tests. @return a flag

Get the List of the analyzers for a specific phase of analysis. @param phase the phase to get the configured analyzers. @return the analyzers loaded

Returns the size of the batch. @return the size of the batch

Searches the CPE entries in the database and retrieves all entries for a given vendor and product combination. The returned list will include all vers

Get the value of comments. @return the value of comments

Get the CVSS V3 scoring information. @return the CVSS V3 scoring information

Returns the database product name. @return the database product name

Returns the package name. @return the package name

Returns the dependency version. @return the dependency version

Gets the description. @return the description

Returns the list of developers. @return the list of developers

Get the value of email. @return the value of email

Returns the CVSS value to fail on. @return 11 if nothing is set. Otherwise it returns the int passed from the command line arg

Retrieves the H2 data directory - if the database has been moved to the temp directory this method will return the temp directory. @return the data d

Used to iterate over evidence of the specified type and confidence. @param type the evidence type to iterate over @param confidence the confidence le

Get the value of knownExploitedVulnerability. @return the value of knownExploitedVulnerability

Retrieves the last updated date from the local file system (in a file next to the repo file). @param repo the local file data source @return the epoc

Returns a long value from the properties file. If the value was specified as a system property or passed in via the -Dprop=value argument - this metho

Returns the Package URL name. @see com.github.packageurl.PackageURL#getName() @return the Package URL name.

Returns the Package URL name space. @return the Package URL name space

Return the number of rules that are loaded from the core suppression file. @return the number of rules defined in the core suppression file. @throws

Gets the string value of a node or null if it's not present @param n the node to test @return the string content of the node, or null if the node its

Gets the owners. @return the owners

Get the value of packageStructure @return the value of packageStructure

Get the value of parentArtifactId. @return the value of parentArtifactId

Gets the path to the suppression file. @return the path

Returns the list of Maven Projects in this build. @return the list of Maven Projects in this build

Get the value of reference. @return the value of reference