org.owasp.dependencycheck.exception.InitializationException: Could not execute .NET AssemblyAnalyzer

2,314 views
Skip to first unread message

Amedee Van Gasse

unread,
Feb 23, 2021, 9:42:11 PM2/23/21
to Dependency Check
I am running the dependency check CLI with the following command:

$DEPENDENCY_CHECK/bin/dependency-check.bat --scan . --connectionString=jdbc:mysql://***REDACTED***.rds.amazonaws.com:3306/dependencycheck --dbUser=***REDACTED*** --dbPassword=***REDACTED*** --dotnet=\"c:/Program Files/dotnet/dotnet.exe\"

I get this error:

03:26:46  [INFO] Analysis Started
03:26:47  [INFO] Finished Archive Analyzer (2 seconds)
03:26:47  [INFO] Finished File Name Analyzer (0 seconds)
03:26:47  [INFO] Finished Jar Analyzer (0 seconds)
03:26:47  [INFO] Finished Central Analyzer (0 seconds)
03:26:49  [INFO] Finished Nuspec Analyzer (0 seconds)
03:26:49  [INFO] Finished Nugetconf Analyzer (0 seconds)
03:26:49  [INFO] Finished MSBuild Project Analyzer (0 seconds)
03:26:49  [WARN] An error occurred with the .NET AssemblyAnalyzer, please see the log for more details.
03:26:49  [ERROR] Exception occurred initializing Assembly Analyzer.
03:26:49  [INFO] Finished Dependency Merging Analyzer (0 seconds)
03:26:49  [INFO] Finished Version Filter Analyzer (0 seconds)
03:26:50  [INFO] Finished Hint Analyzer (0 seconds)
03:26:55  [INFO] Created CPE Index (7 seconds)
03:26:55  [INFO] Finished CPE Analyzer (7 seconds)
03:26:55  [INFO] Finished False Positive Analyzer (0 seconds)
03:26:55  [INFO] Finished NVD CVE Analyzer (0 seconds)
03:26:55  [INFO] Finished RetireJS Analyzer (0 seconds)
03:26:56  [INFO] Finished Sonatype OSS Index Analyzer (0 seconds)
03:26:56  [INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
03:26:56  [INFO] Finished Dependency Bundling Analyzer (0 seconds)
03:26:57  [INFO] Analysis Complete (13 seconds)
03:26:58  [INFO] Writing report to: ***REDACTED***\.\dependency-check-report.html
03:26:58  [ERROR] Could not execute .NET AssemblyAnalyzer

In dependency-check-report.html, I have:

Analysis Exceptions

Could not execute .NET AssemblyAnalyzer

exception: org.owasp.dependencycheck.exception.InitializationException: Could not execute .NET AssemblyAnalyzerorg.owasp.dependencycheck.analyzer.AssemblyAnalyzer.prepareFileTypeAnalyzer(AssemblyAnalyzer.java:372)
org.owasp.dependencycheck.analyzer.AbstractFileTypeAnalyzer.prepareAnalyzer(AbstractFileTypeAnalyzer.java:83)
org.owasp.dependencycheck.analyzer.AbstractAnalyzer.prepare(AbstractAnalyzer.java:102)
org.owasp.dependencycheck.Engine.initializeAnalyzer(Engine.java:781)
org.owasp.dependencycheck.Engine.analyzeDependencies(Engine.java:617)
org.owasp.dependencycheck.App.runScan(App.java:254)
org.owasp.dependencycheck.App.run(App.java:186)
org.owasp.dependencycheck.App.main(App.java:81)

How do I fix this?

Amedee Van Gasse

unread,
Feb 23, 2021, 9:48:24 PM2/23/21
to Dependency Check
FYI, output of dotnet.exe --version:
2.1.507

Jeremy Long

unread,
Feb 24, 2021, 5:05:36 AM2/24/21
to Amedee Van Gasse, Dependency Check
GrokAssembly was compiled with 3.1...

--
You received this message because you are subscribed to the Google Groups "Dependency Check" group.
To unsubscribe from this group and stop receiving emails from it, send an email to dependency-che...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/dependency-check/6ae30ba8-206f-4eb1-aa11-5a9d59baae1an%40googlegroups.com.

Amedee Van Gasse

unread,
Feb 24, 2021, 5:49:33 AM2/24/21
to Dependency Check
OK, thanks. I'll ask the dev team if we're allowed to upgrade dotnet.
--
Amedee Van Gasse
Email: ame...@vangasse.eu
Calendar: amedee....@gmail.com
Phone: +32 485 805 674
Twitter: @amedee
Reply all
Reply to author
Forward
0 new messages