Comments (11)
Configuration will vary depending on which DC implementation you're using. For the CLI, the docs are here: https://jeremylong.github.io/DependencyCheck/dependency-check-cli/arguments.html
from nist-data-mirror.
from nist-data-mirror.
meta and json files are supported in v1.3.0.
from nist-data-mirror.
from nist-data-mirror.
Not sure.
wget https://repo1.maven.org/maven2/us/springett/nist-data-mirror/1.3.0/nist-data-mirror-1.3.0.jar
java -jar nist-data-mirror-1.3.0.jar ./mirror json
This will produce three files per year (.json, .json.gz, and .meta) along with the modified.json/gz/meta
Not sure about the Docker container. It was contributed, but I have never tested it. YMMV
from nist-data-mirror.
from nist-data-mirror.
Hi @stevespringett,
I'm struggling to understand how to get Dependency check to work with my data mirror. For CLI config Do I just add the two addtional cveURL arguements to the end (as shown below)
dependency-check.sh --project "example-project" --scan $libDir --format XML --out
The problem I'm having is that it is asking for .meta files in the log but I don't see where to specific the location of the .meta files like i can with the json.gz files.
Am I missing another cveURL argument?
from nist-data-mirror.
@BrownieX You'll need to ask dependency-check usage questions on the dependency-check mailing list or github issue repo. I no longer use dependency-check in this context and have not used version 5 with a mirror at all.
from nist-data-mirror.
@stevespringett the binaries posted here https://github.com/stevespringett/nist-data-mirror/releases - need to be updated - the changes you are looking for are post 1.2.0. @BrownieX - pull down the sources and build out the jar
from nist-data-mirror.
i spent the best part of a day banging my head of the same wall - until i realised
from nist-data-mirror.
Not sure why 1.3.0 didn't get published to GitHub releases. I'll have to investigate the next time I do a release. In the mean time, I've manually added the 1.3.0 release to it.
from nist-data-mirror.
Related Issues (20)
- Docker container doesn't mirror all files HOT 1
- k8s deprecation 'networking.k8s.io/v1beta1' in v1.22
- NistDataMirror.java has hardcoded Windows file separators HOT 2
- Download and uncompression are slower than expected. HOT 7
- Unable to build with IBM Java 8 HOT 2
- GitHub action - Unable to access jarfile nist-data-mirror.jar HOT 1
- Cron running twice
- nvdcve-1.1-2013.json.gz corrupt with nist-data-mirror 1.6.0 HOT 7
- Some downloads fail with ZipException HOT 2
- Unable to run nist-data-mirror on OpenShift HOT 3
- release 1.4.0 compiled against newer jdk HOT 2
- Docker Image 1.4.0 is throwing "Permission denied" issues HOT 1
- Allow to add volume and configure DNS in HELM chart. HOT 3
- HELM Chart - Allow http proxy values to be supplied through values.yaml. HOT 1
- Don't start the update process if one is already running HOT 1
- Introduce a logger HOT 1
- json 1.0 feeds no longer supported? HOT 5
- No .jar file for release 1.5.0 in releases HOT 1
- Using proxy with account
- java.io.EOFException: Unexpected end of ZLIB input stream HOT 8
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from nist-data-mirror.