Examples of org.owasp.dependencycheck.analyzer.DependencyBundlingAnalyzer

org.owasp.dependencycheck.analyzer.DependencyBundlingAnalyzer

This analyzer ensures dependencies that should be grouped together, to remove excess noise from the report, are grouped. An example would be Spring, Spring Beans, Spring MVC, etc. If they are all for the same version and have the same relative path then these should be grouped into a single dependency under the core/main library.

Note, this grouping only works on dependencies with identified CVE entries

@author Jeremy Long

                LOGGER.severe(msg);
            } else {
                engine.getDependencies().addAll(deps);
            }
        }
        final DependencyBundlingAnalyzer bundler = new DependencyBundlingAnalyzer();
        try {
            bundler.analyze(null, engine);
        } catch (AnalysisException ex) {
            LOGGER.log(Level.WARNING, "An error occured grouping the dependencies; duplicate entries may exist in the report", ex);
            LOGGER.log(Level.FINE, "Bundling Exception", ex);
        }
        final File outputDir = getReportOutputDirectory(project);

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.

Examples of org.owasp.dependencycheck.analyzer.DependencyBundlingAnalyzer

Related Classes of org.owasp.dependencycheck.analyzer.DependencyBundlingAnalyzer