Set the value of source. @param source new value of source

Sets the string parameter on a prepared statement from a properties map. @param ps a prepared statement @param i the index of the property @param pro

Set the value of url. @param url new value of url

Sets the vulnerability name. @param parentName the parent name @param dependency the dependency @param vulnerability the vulnerability @param nextLin

Compute an adjusted CVSSv3 baseScore that ensures that CRITICAL CVSSv3 scores will win over HIGH CVSSv2 and CRITICAL unscored severities to allow for

Workaround 64k limitation of InputStream, redirect stdout to a file that we will read later instead of reading directly stdout from Process's InputStr

Utility method to throw a fatal database exception. @param ex the exception that was caught @param exceptions the exception collection @throws Except

To string implementation. @return a string representation of the data given and read from the stream.

Returns the CPE 2.3 formatted string. @return the CPE 2.3 formatted string

Transform OSS Index component-report to ODC vulnerability. @param report the component report @param source the vulnerability from the report to tran

Add the proxy credentials to the CredentialsProvider and AuthCache instances when proxy-authentication is configured in the settings. @param credentia

Try resolution of artifacts once, allowing for DependencyResolutionException due to reactor-dependencies not being resolvable. <br> The resolution is

Updates the dependency information with the provided assembly data. @param data the assembly data @param dependency the dependency to update

Convert a CVSSv4 vector String into a CvssV4 Object. @param source the source of the CVSS data @param type the type of CVSS data (primary or secondar

Writes the dependency-check report to the given output location. @param outputLocation the path where the reports should be written @param format the

Adds a given product to the list of evidence to add when matched. @param source the source of the evidence @param name the name of the evidence @para

Adds a given vendor to the list of evidence to add when matched. @param source the source of the evidence @param name the name of the evidence @param

Adds a given version to the list of evidence to add when matched. @param source the source of the evidence @param name the name of the evidence @para

Adds the criticality to the vulnerability @param parentName the parent name @param vulnerability the vulnerability @param nextLine the line to parse

Adds the CVSS to the cvssV4Below list. @param cvss the CVSS to add

Adds the deprecated command line options to the given options collection. These are split out for purposes of not including them in the help message.

Adds a new developer to the list of developers. @param developer the developer to add

If a zip file was identified as a possible JAR, this method will add the zip to the list of dependencies. @param dependency the zip file @param engin

Adds evidence from the version file. @param dependency the dependency being analyzed @param type the type of evidence to add @param dependencyFile th

Adds a new CPE to the identifier match collection. @param vs a reference to the vulnerable software @param updateVersion the update version @param co

There are some known CPE entries, specifically regarding sun and oracle products due to the acquisition and changes in product names, that based on gi

Add to a list of {@link IOFileFilter} instances to consult for whether to accept a file for analysis. @param filters one or more file filters to cons

Adds a file type analyzer. This has been added solely to assist in unit testing the Engine. @param fta the file type analyzer to add

Adds the filename evidence to the collection. @param filename the filename to add

Adds a given product to the list of evidence to matched. @param source the source of the evidence @param name the name of the evidence @param value t

Adds a given vendors to the list of evidence to matched. @param source the source of the evidence @param name the name of the evidence @param value t

Adds a given version to the list of evidence to match. @param source the source of the evidence @param name the name of the evidence @param value the

Adds a license to the given dependency. @param d a dependency @param license the license

Collect the artifacts from a MavenCentral search result and add them to the list. @param doc The Document received in response to the SHA1 search-requ

Adds a reference to the vulnerability. @param parentName the parent name @param vulnerability the vulnerability @param nextLine the line to parse

Adds a given product to the list of evidence to remove when matched. @param source the source of the evidence @param name the name of the evidence @p

Adds a given vendor to the list of evidence to remove when matched. @param source the source of the evidence @param name the name of the evidence @pa

Adds a given version to the list of evidence to remove when matched. @param source the source of the evidence @param name the name of the evidence @p

Checks if the current artifact is actually in the reactor projects. If true a virtual dependency is created based on the evidence in the project. @pa

Adds a set of Identifiers to the current list of software identifiers. Only used for testing. @param identifiers A set of Identifiers

Extracts evidence from the package description and adds it to the given evidence collection. @param dependency the dependency being analyzed @param t

Adds an identifier to the list of suppressed identifiers. @param identifier an identifier that was suppressed.

Add a list of suppressed vulnerabilities to the collection. @param vulns the list of suppressed vulnerabilities to add

Adds a vulnerability to the set of suppressed vulnerabilities. @param vulnerability the vulnerability that was suppressed

Add the given version to the CpeBuilder - this method attempts to parse out the update from the version and correctly set the value in the CPE. @para

Analyzes the Cartfile.resolved and adds the evidence to the dependency. @param cartfileResolved the dependency @param engine a reference to the depen

Analyzes a given dependency. If the dependency is an archive, such as a WAR or EAR, the contents are extracted, scanned, and added to the list of depe

This should gather information from leading docstrings, file comments, and assignments to __version__, __title__, __summary__, __uri__, __url__, __hom

Cycles through the list of class names and places the package levels 0-3 into the provided maps for vendor and product. This is helpful when analyzing

Attempts to find a pom.xml within the JAR file. If found it extracts information and adds it to the evidence. This will attempt to interpolate the str

Analyzes the package and package-lock files by extracting dependency information, creating a payload to submit to the npm audit API, submitting the pa

Analyzes the package and pnpm lock files by extracting dependency information, creating a payload to submit to the npm audit API, submitting the paylo

Analyzes the path information of the classes contained within the JarAnalyzer to try and determine possible vendor or product names. If any are found

Analyzes the package and yarn lock files by calling yarn npm audit and returning the identified advisories. @param dependency a reference to the depe

Analyzes the package and yarn lock files by extracting dependency information, creating a payload to submit to the npm audit API, submitting the paylo

Analyzes the podfile.lock file to extract evidence for the dependency. @param podfileLock the dependency to analyze @param engine the analysis engine

Analyzes the podspec and adds the evidence to the dependency. @param dependency the dependency @throws AnalysisException thrown if there is an error

Extracts the version information from the contents. If more then one version is found additional dependencies are added to the dependency list. @para

Analyzes the SPM file and adds the evidence to the dependency. @param dependency the dependency @throws IOException thrown if there is an error analy

Analyzes the Package.resolved file to extract evidence for the dependency. @param spmResolved the dependency to analyze @param engine the analysis en

Analyzes the version 1 of the Package.resolved file to extract evidence for the dependency. @param spmResolved the dependency to analyze @param engin

Analyzes the versions 2 and 3 of the Package.resolved file to extract evidence for the dependency. @param spmResolved the dependency to analyze @para

Determines if the groupId, artifactId, and version of the Maven dependency and artifact match. @param d the Maven dependency @param a the Maven artif

Builds the CPE Lucene Index based off of the data within the CveDB. @param data the CPE data @throws IndexException thrown if there is an issue creat

Builds the short description for the Sarif format. @param d the dependency @param vuln the vulnerability @param knownExploited true if the vulnerabil

Attempts to determine and cache the path to `yarn`.

Executes the test call against AnalyzeDependency. @param vendor @param product @param version @param expectedCpe @param cpeAnalyzer @param engine @th

Determines if this analyzer is enabled @return <code>true</code> if the analyzer is enabled; otherwise <code>false</code>

Determines if this analyzer is enabled. @return <code>true</code> if the analyzer is enabled; otherwise <code>false</code>

Determines if this analyzer is enabled. @return <code>true</code> if the analyzer is enabled; otherwise <code>false</code>