| Package | Description |
|---|---|
| org.owasp.dependencycheck |
Includes the main entry point for dependency-check.
|
| org.owasp.dependencycheck.data.nvdcve |
Contains classes used to work with the NVD CVE data.
|
| org.owasp.dependencycheck.data.update |
Contains classes used to update the data stores.
The UpdateService will load, any correctly defined CachedWebDataSource(s) and call update() on them. |
| org.owasp.dependencycheck.data.update.cisa |
Contains classes used to parse the CISA Known Exploited Vulnerability Catalog.
|
| Modifier and Type | Method and Description |
|---|---|
boolean |
Engine.doUpdates()
Cycles through the cached web data sources and calls update on all of
them.
|
boolean |
Engine.doUpdates(boolean remainOpen)
Cycles through the cached web data sources and calls update on all of
them.
|
| Modifier and Type | Method and Description |
|---|---|
void |
DatabaseProperties.save(java.lang.String key,
java.lang.String value)
Saves the key value pair to the properties store.
|
void |
DatabaseProperties.save(java.lang.String key,
java.time.ZonedDateTime timestamp)
Stores a timestamp.
|
static void |
DatabaseProperties.setTimestamp(java.util.Properties properties,
java.lang.String key,
java.time.ZonedDateTime timestamp)
Stores a timestamp in the properties file.
|
| Modifier and Type | Method and Description |
|---|---|
protected java.util.Properties |
NvdApiDataSource.getRemoteCacheProperties(java.lang.String url,
java.lang.String pattern)
Downloads the metadata properties of the NVD API cache.
|
protected java.util.Map<java.lang.String,java.lang.String> |
NvdApiDataSource.getUpdatesNeeded(java.lang.String url,
java.lang.String filePattern,
java.util.Properties cacheProperties,
java.time.ZonedDateTime now)
Determines if the index needs to be updated.
|
protected boolean |
EngineVersionCheck.shouldUpdate(long lastChecked,
long now,
DatabaseProperties properties,
java.lang.String currentVersion)
Determines if a new version of the dependency-check engine has been
released.
|
boolean |
HostedSuppressionsDataSource.update(Engine engine)
Downloads the current Hosted suppressions file.
|
boolean |
NvdApiDataSource.update(Engine engine) |
boolean |
RetireJSDataSource.update(Engine engine)
Downloads the current RetireJS data source.
|
boolean |
CachedWebDataSource.update(Engine engine)
Determines if an update to the current data store is needed, if it is the
new data is downloaded from the Internet and imported into the current
cached data store.
|
boolean |
KnownExploitedDataSource.update(Engine engine) |
boolean |
EngineVersionCheck.update(Engine engine)
Downloads the current released version number and compares it to the
running engine's version number.
|
| Modifier and Type | Method and Description |
|---|---|
KnownExploitedVulnerabilitiesSchema |
KnownExploitedVulnerabilityParser.parse(java.io.InputStream in)
Parses the CISA Known Exploited JSON file and inserts/updates data into
the database.
|
Copyright© 2012-21 Jeremy Long. All Rights Reserved.