Comments (11)
stevespringett
commented on August 23, 2024
Configuration will vary depending on which DC implementation you're using. For the CLI, the docs are here: https://jeremylong.github.io/DependencyCheck/dependency-check-cli/arguments.html
from nist-data-mirror.
dbenduga
commented on August 23, 2024
Hello Steve,
Need Small help...
Could you please help me to mirror *.meta files with NVD-mirror.
I am able to mirror nvdcve-modified.xml.gz, nvdcve-2.0-modified.xml.gz
and nvdcve-1.0-modified.json.gz however application still is facing problem
while Dependency Check. They need *.meta files as well.
How to add these files with json and xml ?
Regards,
Dipesh Bendugade
…On Thu, Jul 4, 2019 at 9:03 PM Steve Springett ***@***.***> wrote:
Configuration will vary depending on which DC implementation you're using.
For the CLI, the docs are here:
https://jeremylong.github.io/DependencyCheck/dependency-check-cli/arguments.html
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
<#24?email_source=notifications&email_token=AMQZJCCG4JAWE3INW23X2YTP5YJ33A5CNFSM4H5YGT3KYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGODZHWR4Q#issuecomment-508520690>,
or mute the thread
<https://github.com/notifications/unsubscribe-auth/AMQZJCHHSIEOTRA2F5OOQSDP5YJ33ANCNFSM4H5YGT3A>
.
--
Dipesh Bendugade.
+91 9921999289
from nist-data-mirror.
stevespringett
commented on August 23, 2024
meta and json files are supported in v1.3.0.
from nist-data-mirror.
dbenduga
commented on August 23, 2024
I am using v.1.3.0 only but i can see json and xml files only under
/tmp/nvd.
Regards,
Dipesh Bendugade
…On Mon, Jul 15, 2019 at 8:10 PM Steve Springett ***@***.***> wrote:
meta and json files are supported in v1.3.0.
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
<#24?email_source=notifications&email_token=AMQZJCG3FW3TYPDXQAUEOCLP7SD6HA5CNFSM4H5YGT3KYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGODZ55BZY#issuecomment-511430887>,
or mute the thread
<https://github.com/notifications/unsubscribe-auth/AMQZJCCPYI766U66XR6M7ZDP7SD6HANCNFSM4H5YGT3A>
.
--
Dipesh Bendugade.
+91 9921999289
from nist-data-mirror.
stevespringett
commented on August 23, 2024
Not sure.
wget https://repo1.maven.org/maven2/us/springett/nist-data-mirror/1.3.0/nist-data-mirror-1.3.0.jar
java -jar nist-data-mirror-1.3.0.jar ./mirror jsonThis will produce three files per year (.json, .json.gz, and .meta) along with the modified.json/gz/meta
Not sure about the Docker container. It was contributed, but I have never tested it. YMMV
from nist-data-mirror.
dbenduga
commented on August 23, 2024
Thanks Steve.. issue got resolved 😀
…On Mon, Jul 15, 2019, 9:07 PM Steve Springett ***@***.***> wrote:
Not sure.
wget https://repo1.maven.org/maven2/us/springett/nist-data-mirror/1.3.0/nist-data-mirror-1.3.0.jar
java -jar nist-data-mirror-1.3.0.jar ./mirror json
This will produce three files per year (.json, .json.gz, and .meta) along
with the modified.json/gz/meta
Not sure about the Docker container. It was contributed, but I have never
tested it. YMMV
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
<#24?email_source=notifications&email_token=AMQZJCCFH5H6YPUQIXJ4LULP7SKUHA5CNFSM4H5YGT3KYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGODZ6CVLI#issuecomment-511453869>,
or mute the thread
<https://github.com/notifications/unsubscribe-auth/AMQZJCFSX4H4TWXNDMHBV6LP7SKUHANCNFSM4H5YGT3A>
.
from nist-data-mirror.
neil-n-brown
commented on August 23, 2024
Hi @stevespringett,
I'm struggling to understand how to get Dependency check to work with my data mirror. For CLI config Do I just add the two addtional cveURL arguements to the end (as shown below)
dependency-check.sh --project "example-project" --scan $libDir --format XML --out
The problem I'm having is that it is asking for .meta files in the log but I don't see where to specific the location of the .meta files like i can with the json.gz files.
Am I missing another cveURL argument?
from nist-data-mirror.
stevespringett
commented on August 23, 2024
@BrownieX You'll need to ask dependency-check usage questions on the dependency-check mailing list or github issue repo. I no longer use dependency-check in this context and have not used version 5 with a mirror at all.
from nist-data-mirror.
strictlygit
commented on August 23, 2024
@stevespringett the binaries posted here https://github.com/stevespringett/nist-data-mirror/releases - need to be updated - the changes you are looking for are post 1.2.0. @BrownieX - pull down the sources and build out the jar
from nist-data-mirror.
strictlygit
commented on August 23, 2024
i spent the best part of a day banging my head of the same wall - until i realised
from nist-data-mirror.
stevespringett
commented on August 23, 2024
Not sure why 1.3.0 didn't get published to GitHub releases. I'll have to investigate the next time I do a release. In the mean time, I've manually added the 1.3.0 release to it.
from nist-data-mirror.
Related Issues (20)
- Docker container doesn't mirror all files HOT 1
- k8s deprecation 'networking.k8s.io/v1beta1' in v1.22
- NistDataMirror.java has hardcoded Windows file separators HOT 2
- Download and uncompression are slower than expected. HOT 7
- Unable to build with IBM Java 8 HOT 2
- GitHub action - Unable to access jarfile nist-data-mirror.jar HOT 1
- Cron running twice
- nvdcve-1.1-2013.json.gz corrupt with nist-data-mirror 1.6.0 HOT 7
- Some downloads fail with ZipException HOT 2
- Unable to run nist-data-mirror on OpenShift HOT 3
- release 1.4.0 compiled against newer jdk HOT 2
- Docker Image 1.4.0 is throwing "Permission denied" issues HOT 1
- Allow to add volume and configure DNS in HELM chart. HOT 3
- HELM Chart - Allow http proxy values to be supplied through values.yaml. HOT 1
- Don't start the update process if one is already running HOT 1
- Introduce a logger HOT 1
- json 1.0 feeds no longer supported? HOT 5
- No .jar file for release 1.5.0 in releases HOT 1
- Using proxy with account
- java.io.EOFException: Unexpected end of ZLIB input stream HOT 8
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from nist-data-mirror.