search

clj-commons / clj-yaml

YAML encoding and decoding for Clojure
Other
122 stars 26 forks source link

ci: vulnerability scan is failing #143

Closed lread closed 1 week ago

lread commented 1 week ago

A seemingly reasonable explanation: https://github.com/jeremylong/DependencyCheck/issues/7178#issuecomment-2493127523

It seems that the NIST team did a bulk update to their db, which in turn invalidated client caches, which in turn caused a ton of traffic to NIST data feeds, which NIST seems to be struggling to handle.

I'll see if I can get a local scan to pass and bump dependency-check lib anyway; it is a bit outdated.

lread commented 1 week ago

A local run passed with nvd max retries bumped from 10 to 30. I've pushed 87802fb370396bd1a613e833435d11c614e604c0 to master. We'll see how it goes on GitHub Actions.

lread commented 1 week ago

Looks like my cunning plan worked. Closed by 87802fb370396bd1a613e833435d11c614e604c0