File tree Expand file tree Collapse file tree 4 files changed +13
-4
lines changed Expand file tree Collapse file tree 4 files changed +13
-4
lines changed Original file line number Diff line number Diff line change @@ -35,7 +35,10 @@ Installation
35
35
36
36
It is important to understand that the first time this task is executed it may
37
37
take 10 minutes or more as it downloads and processes the data from the National
38
- Vulnerability Database (NVD) hosted by NIST: https://nvd.nist.gov
38
+ Vulnerability Database (NVD) hosted by NIST: https://nvd.nist.gov.
39
39
40
40
After the first batch download, as long as the task is executed at least once every
41
41
seven days the update will only take a few seconds.
42
+
43
+ The Dependency-Check team strongly recommends to [mirror the NVD database](../data/mirrornvd.html) for any operational
44
+ integration. If not done, any service disruption of the NVD database will make the usage of Dependency-Check difficult.
Original file line number Diff line number Diff line change @@ -5,11 +5,14 @@ plug-in or as part of the site plug-in. The plug-in requires Maven 3.6.3 or high
5
5
6
6
It is important to understand that the first time this task is executed it may
7
7
take 20 minutes or more as it downloads and processes the data from the National
8
- Vulnerability Database (NVD) hosted by NIST: https://nvd.nist.gov
8
+ Vulnerability Database (NVD) hosted by NIST: https://nvd.nist.gov.
9
9
10
10
After the first batch download, as long as the plug-in is executed at least once every
11
11
seven days the update will only take a few seconds.
12
12
13
+ The Dependency-Check team strongly recommends to [mirror the NVD database](../data/mirrornvd.html) for any operational
14
+ integration. If not done, any service disruption of the NVD database will make the usage of Dependency-Check difficult.
15
+
13
16
### Default Phase
14
17
The dependency-check plugin is, by default, tied to the `verify` or `site` phase
15
18
depending on if it is configured as a build or reporting plugin. The examples
Original file line number Diff line number Diff line change @@ -7,7 +7,7 @@ The NVD API and the Retire JS repository.
7
7
Creating an offline cache for the NVD API
8
8
------------------------------------------------------------
9
9
10
- The Open Vulnerability Project's [ vuln CLI] ( https://github.com/dependency-check/Open-Vulnerability-Project/tree /main/vulnz#caching-the-nvd-cve-data )
10
+ The Open Vulnerability Project's [ vuln CLI] ( https://github.com/jeremylong/open-vulnerability-cli/blob /main/README.md )
11
11
can be used to create an offline copy of the data obtained from the NVD API.
12
12
Then configure dependency-check to use the NVD Datafeed URL.
13
13
Original file line number Diff line number Diff line change @@ -5,11 +5,14 @@ libraries; creating a report of known vulnerable components that are included in
5
5
6
6
It is important to understand that the first time this task is executed it may
7
7
take 5-20 minutes as it downloads and processes the data from the National
8
- Vulnerability Database (NVD) hosted by NIST: https://nvd.nist.gov
8
+ Vulnerability Database (NVD) hosted by NIST: https://nvd.nist.gov.
9
9
10
10
After the first batch download, as long as the plugin is executed at least once every
11
11
seven days the update will only take a few seconds.
12
12
13
+ The Dependency-Check team strongly recommends to [mirror the NVD database](../data/mirrornvd.html) for any operational
14
+ integration. If not done, any service disruption of the NVD database will make the usage of Dependency-Check difficult.
15
+
13
16
#set( $H = '#' )
14
17
15
18
$H$H Quick Start
You can’t perform that action at this time.
0 commit comments