Uploaded image for project: 'Infrastructure'
  1. Infrastructure
  2. INFRA-19627

Please create a mirror of the NVD

    XMLWordPrintableJSON

    Details

    • Type: Wish
    • Status: Closed
    • Priority: Major
    • Resolution: Information Provided
    • Fix Version/s: None
    • Component/s: Analysis, HTTP Server
    • Labels:
      None
    • Project:
      Struts

      Description

      We use the Maven Dependency Check plugin [1] to scan the project for the outdated dependencies, but each time it will fetch all the data from the NVD [2] and sometime we will hit timeouts.

      It is possible to create a mirror [3] which can be used directly by ASF Jenkins to avoid network latency.

      Is it possible to setup such mirror?

      [1] https://jeremylong.github.io/DependencyCheck/dependency-check-maven/
      [2] https://nvd.nist.gov/
      [3] https://jeremylong.github.io/DependencyCheck/data/mirrornvd.html

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              lukaszlenart Lukasz Lenart
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: