@groovy.transform.CompileStatic class AnalyzerExtension extends java.lang.Object
The analyzer configuration extension. Any value not configured will use the dependency-check-core defaults.
| Type | Name and description |
|---|---|
java.lang.Boolean |
archiveEnabledSets whether the Archive Analyzer will be used. |
ArtifactoryExtension |
artifactoryThe configuration extension for artifactory settings. |
java.lang.Boolean |
assemblyEnabledSets whether the .NET Assembly Analyzer should be used. |
java.lang.Boolean |
autoconfEnabledSets whether the autoconf Analyzer should be used. |
java.lang.Boolean |
bundleAuditEnabledSets whether the Ruby Bundle Audit analyzer is enabled; requires running bundle audit. |
java.lang.Boolean |
centralEnabledSets whether Central Analyzer will be used. |
java.lang.Boolean |
cmakeEnabledSets whether the CMake Analyzer should be used. |
java.lang.Boolean |
cocoapodsEnabledSets whether the cocoapods analyzer is enabled. |
java.lang.Boolean |
composerEnabledSets whether the PHP Composer Lock File Analyzer should be used. |
java.lang.Boolean |
cpanEnabledSets whether the Perl CPAN File Analyzer should be used. |
java.lang.Boolean |
dartEnabledSets whether the swift package manager analyzer is enabled. |
java.lang.Boolean |
experimentalEnabledSets whether the experimental analyzers will be used. |
java.lang.Boolean |
golangDepEnabledSets whether the Golang Dependency analyzer is enabled. |
java.lang.Boolean |
golangModEnabledSets whether Golang Module Analyzer is enabled; this requires `go` to be installed. |
java.lang.Boolean |
jarEnabledSets whether Jar Analyzer will be used. |
java.lang.Boolean |
knownExploitedEnabledSets whether the Known Exploited Vulnerability update and Analyzer will be used. |
java.lang.String |
knownExploitedURLURL to the CISA Known Exploited Vulnerabilities JSON data feed. |
java.lang.Integer |
knownExploitedValidForHoursControls the skipping of the check for Known Exploited Vulnerabilities updates. |
java.lang.Boolean |
msbuildEnabledSets whether the MS Build Analyzer should be used. |
java.lang.Boolean |
nexusEnabledSets whether Nexus Analyzer will be used. |
java.lang.String |
nexusUrlDefines the Nexus Server's web service end point (example http://domain.enterprise/service/local/). |
java.lang.Boolean |
nexusUsesProxywhether the defined proxy should be used when connecting to Nexus. |
NodeAuditExtension |
nodeAuditThe configuration extension for the node audit settings. |
java.lang.Boolean |
nodeAuditEnabledSets whether the NSP Analyzer should be used. |
java.lang.Boolean |
nodeEnabledSets whether the Node.js Analyzer should be used. |
NodePackageExtension |
nodePackageThe configuration extension for the node package settings. |
java.lang.Boolean |
nugetconfEnabledSets whether the Nuget packages.config Configuration Analyzer should be used. |
java.lang.Boolean |
nuspecEnabledSets whether the .NET Nuget Nuspec Analyzer will be used. |
java.lang.Boolean |
opensslEnabledSets whether the openssl Analyzer should be used. |
OssIndexExtension |
ossIndexThe configuration extension for artifactory settings. |
java.lang.Boolean |
ossIndexEnabledSets whether the OSS Index Analyzer should be used. |
java.lang.String |
pathToBundleAuditThe path to Ruby's bundle audit. |
java.lang.String |
pathToDotnetThe path to dotnet core - used to analyze dot net assemblies. |
java.lang.String |
pathToGoThe path to `go` - used to analyze go modules via `go mod`. |
org.gradle.api.Project |
project |
java.lang.Boolean |
pyDistributionEnabledSets whether the Python Distribution Analyzer will be used. |
java.lang.Boolean |
pyPackageEnabledSets whether the Python Package Analyzer will be used. |
RetireJSExtension |
retirejsThe configuration extension for retirejs settings. |
java.lang.Boolean |
rubygemsEnabledSets whether the Ruby Gemspec Analyzer will be used. |
java.lang.Boolean |
swiftEnabledSets whether the swift package manager analyzer is enabled. |
java.lang.Boolean |
swiftPackageResolvedEnabledSets whether the swift package resolved analyzer is enabled. |
java.lang.String |
zipExtensionsA comma-separated list of additional file extensions to be treated like a ZIP file, the contents will be extracted and analyzed. |
| Constructor and description |
|---|
AnalyzerExtension
(org.gradle.api.Project project) |
| Type Params | Return Type | Name and description |
|---|---|---|
|
java.lang.Object |
artifactory(groovy.lang.Closure configClosure)Allows programmatic configuration of the artifactory extension |
|
java.lang.Object |
nodeAudit(groovy.lang.Closure configClosure)Allows programmatic configuration of the nodeAudit extension |
|
java.lang.Object |
nodePackage(groovy.lang.Closure configClosure)Allows programmatic configuration of the node package extension |
|
java.lang.Object |
ossIndex(groovy.lang.Closure configClosure)Allows programmatic configuration of the ossIndex extension |
|
java.lang.Object |
retirejs(groovy.lang.Closure configClosure)Allows programmatic configuration of the retirejs extension |
| Methods inherited from class | Name |
|---|---|
class java.lang.Object |
java.lang.Object#wait(long), java.lang.Object#wait(long, int), java.lang.Object#wait(), java.lang.Object#equals(java.lang.Object), java.lang.Object#toString(), java.lang.Object#hashCode(), java.lang.Object#getClass(), java.lang.Object#notify(), java.lang.Object#notifyAll() |
Sets whether the Archive Analyzer will be used.
The configuration extension for artifactory settings.
Sets whether the .NET Assembly Analyzer should be used.
Sets whether the autoconf Analyzer should be used.
Sets whether the Ruby Bundle Audit analyzer is enabled; requires running bundle audit.
Sets whether Central Analyzer will be used. If this analyzer is being disabled there is a good chance you also want to disable the Nexus Analyzer (see below).
Sets whether the CMake Analyzer should be used.
Sets whether the cocoapods analyzer is enabled.
Sets whether the PHP Composer Lock File Analyzer should be used.
Sets whether the Perl CPAN File Analyzer should be used.
Sets whether the swift package manager analyzer is enabled.
Sets whether the experimental analyzers will be used.
Sets whether the Golang Dependency analyzer is enabled. Default is true.
Sets whether Golang Module Analyzer is enabled; this requires `go` to be installed. Default is true.
Sets whether Jar Analyzer will be used.
Sets whether the Known Exploited Vulnerability update and Analyzer will be used.
URL to the CISA Known Exploited Vulnerabilities JSON data feed.
Controls the skipping of the check for Known Exploited Vulnerabilities updates.
Sets whether the MS Build Analyzer should be used.
Sets whether Nexus Analyzer will be used. This analyzer is superceded by the Central Analyzer; however, you can configure this to run against a Nexus Pro installation.
Defines the Nexus Server's web service end point (example http://domain.enterprise/service/local/). If not set the Nexus Analyzer will be disabled.
whether the defined proxy should be used when connecting to Nexus.
The configuration extension for the node audit settings.
Sets whether the NSP Analyzer should be used.
Sets whether the Node.js Analyzer should be used.
The configuration extension for the node package settings.
Sets whether the Nuget packages.config Configuration Analyzer should be used.
Sets whether the .NET Nuget Nuspec Analyzer will be used.
Sets whether the openssl Analyzer should be used.
The configuration extension for artifactory settings.
Sets whether the OSS Index Analyzer should be used.
The path to Ruby's bundle audit.
The path to dotnet core - used to analyze dot net assemblies.
The path to `go` - used to analyze go modules via `go mod`.
Sets whether the Python Distribution Analyzer will be used.
Sets whether the Python Package Analyzer will be used.
The configuration extension for retirejs settings.
Sets whether the Ruby Gemspec Analyzer will be used.
Sets whether the swift package manager analyzer is enabled.
Sets whether the swift package resolved analyzer is enabled.
A comma-separated list of additional file extensions to be treated like a ZIP file, the contents will be extracted and analyzed.
Allows programmatic configuration of the artifactory extension
configClosure - the closure to configure the artifactory extensionAllows programmatic configuration of the nodeAudit extension
configClosure - the closure to configure the ossIndex extensionAllows programmatic configuration of the node package extension
configClosure - the closure to configure the node extensionAllows programmatic configuration of the ossIndex extension
configClosure - the closure to configure the ossIndex extensionAllows programmatic configuration of the retirejs extension
configClosure - the closure to configure the retirejs extensionGroovy Documentation