Skip to main content
Dependency-check is an SCA tool and it allows a user to run scans on Dependencies which generates reports for known vulnerable components. that we used in our source. This operation can be executed after the build or before deployment on the artifact.

Target Properties 

Property Name

Property Code

Required

Description

OWASP Dependency-Check Path

FDOWASPDC_PATH

No

Absolute path to OWASP Dependency-Check Home folder

If this value is left empty, the plugin will install V12.1.0 on end point.

Project Properties 

Property Name

Property Code

Required

Description

Suppression File Name

FDOWASPDC_SUPPRESS_FILE

No

Suppression File Name with Path

Inputs

Input Name

Input Code

Required

Description

Project Source Folder

FDOWASPDC_INP_PROJECT_LOCATION

No

Path to the project. If a relative path is given, a path inside of the FD_TEMP_DIR will be assumed.

NVD API Key

FDOWASPDC_INP_NVD_API_KEY

No

If you are using Dependency-Check version 9 or higher, you must specify an API key to obtain unthrottled speed in database updates.

Obtained from https://nvd.nist.gov/developers/request-an-api-key

Dependency-Check CLI Version 12.1.0 is shipped in the plugin as of 9.0.0.7. Previously, 8.2.1 was shipped.

Additional Arguments

FDOWASPDC_INP_ADDITIONAL_ARGUMENTS

No

Additional arguments. See https://jeremylong.github.io/DependencyCheck/dependency-check-cli/arguments.html

e.g. —enableExperimental

Outputs

Output Name

Required

Description

FDOWASPDC_OUT_TOTAL_ISSUE_COUNT

No

Total issues count

FDOWASPDC_OUT_TOTAL_CRITICAL_ISSUE_COUNT

No

Total issues count for Critical

FDOWASPDC_OUT_TOTAL_HIGH_ISSUE_COUNT

No

Total issues count for High

FDOWASPDC_OUT_TOTAL_MEDIUM_ISSUE_COUNT

No

Total issues count for Medium

FDOWASPDC_OUT_TOTAL_LOW_ISSUE_COUNT

No

Total issues count for Low

Artifacts

This operation doesn’t produce any artifacts.  

Endpoint Selection

This operation will select all available endpoints associated with the Target.

Endpoint Execution

This operation will execute on any one of the selected endpoints and will be random in the determination of which on