Skip to content

Commit f653a81

Browse files
authored
feat: #7610 add a reference to NVD mirroring in getting started documentation (#7611)
1 parent 0ea4fc3 commit f653a81

File tree

4 files changed

+13
-4
lines changed

4 files changed

+13
-4
lines changed

ant/src/site/markdown/index.md.vm

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,10 @@ Installation
3535

3636
It is important to understand that the first time this task is executed it may
3737
take 10 minutes or more as it downloads and processes the data from the National
38-
Vulnerability Database (NVD) hosted by NIST: https://nvd.nist.gov
38+
Vulnerability Database (NVD) hosted by NIST: https://nvd.nist.gov.
3939

4040
After the first batch download, as long as the task is executed at least once every
4141
seven days the update will only take a few seconds.
42+
43+
The Dependency-Check team strongly recommends to [mirror the NVD database](../data/mirrornvd.html) for any operational
44+
integration. If not done, any service disruption of the NVD database will make the usage of Dependency-Check difficult.

maven/src/site/markdown/index.md.vm

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,11 +5,14 @@ plug-in or as part of the site plug-in. The plug-in requires Maven 3.6.3 or high
55

66
It is important to understand that the first time this task is executed it may
77
take 20 minutes or more as it downloads and processes the data from the National
8-
Vulnerability Database (NVD) hosted by NIST: https://nvd.nist.gov
8+
Vulnerability Database (NVD) hosted by NIST: https://nvd.nist.gov.
99

1010
After the first batch download, as long as the plug-in is executed at least once every
1111
seven days the update will only take a few seconds.
1212

13+
The Dependency-Check team strongly recommends to [mirror the NVD database](../data/mirrornvd.html) for any operational
14+
integration. If not done, any service disruption of the NVD database will make the usage of Dependency-Check difficult.
15+
1316
### Default Phase
1417
The dependency-check plugin is, by default, tied to the `verify` or `site` phase
1518
depending on if it is configured as a build or reporting plugin. The examples

src/site/markdown/data/mirrornvd.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ The NVD API and the Retire JS repository.
77
Creating an offline cache for the NVD API
88
------------------------------------------------------------
99

10-
The Open Vulnerability Project's [vuln CLI](https://github.com/dependency-check/Open-Vulnerability-Project/tree/main/vulnz#caching-the-nvd-cve-data)
10+
The Open Vulnerability Project's [vuln CLI](https://github.com/jeremylong/open-vulnerability-cli/blob/main/README.md)
1111
can be used to create an offline copy of the data obtained from the NVD API.
1212
Then configure dependency-check to use the NVD Datafeed URL.
1313

src/site/markdown/dependency-check-gradle/index.md.vm

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,11 +5,14 @@ libraries; creating a report of known vulnerable components that are included in
55

66
It is important to understand that the first time this task is executed it may
77
take 5-20 minutes as it downloads and processes the data from the National
8-
Vulnerability Database (NVD) hosted by NIST: https://nvd.nist.gov
8+
Vulnerability Database (NVD) hosted by NIST: https://nvd.nist.gov.
99

1010
After the first batch download, as long as the plugin is executed at least once every
1111
seven days the update will only take a few seconds.
1212

13+
The Dependency-Check team strongly recommends to [mirror the NVD database](../data/mirrornvd.html) for any operational
14+
integration. If not done, any service disruption of the NVD database will make the usage of Dependency-Check difficult.
15+
1316
#set( $H = '#' )
1417

1518
$H$H Quick Start

0 commit comments

Comments
 (0)