Configuration

Once dependency-check-ant has been installed the defined tasks can be used.

• dependency-check - the primary task used to check the project dependencies. Configuration options are below.
• dependency-check-purge - deletes the local copy of the NVD; this should rarely be used (if ever). See the purge configuration for more information.
• dependency-check-update - downloads and updates the local copy of the NVD. See the update configuration for more information.

To configure the dependency-check task you can add it to a target and include a file based resource collection such as a FileSet, DirSet, or FileList that includes the project's dependencies.

<target name="dependency-check" description="Dependency-Check Analysis">
    <dependency-check projectname="Hello World"
                      reportoutputdirectory="${basedir}"
                      reportformat="ALL">
        <suppressionfile path="${basedir}/path/to/suppression.xml"/>
        <retireJsFilter regex="copyright.*jeremy long"/>
        <fileset dir="lib">
            <include name="**/*.jar"/>
        </fileset>
    </dependency-check>
</target>

Configuration: dependency-check Task

The following properties can be set on the dependency-check task.

The following nested elements can be set on the dependency-check task.

Analyzer Configuration

The following properties are used to configure the various file type analyzers. These properties can be used to turn off specific analyzers if it is not needed. Note, that specific analyzers will automatically disable themselves if no file types that they support are detected - so specifically disabling them may not be needed.

Advanced Configuration

The following properties can be configured in the plugin. However, they are less frequently changed.