dependency-check / azuredevops

Dependency Check Azure DevOps Extension
Apache License 2.0
44 stars 26 forks source link

Does NVD Api 1.0 to 2.0 affect this extension? #130

Closed Rich79923 closed 7 months ago

Rich79923 commented 10 months ago

NVD are deprecating version 1.0 soon, see: https://nvd.nist.gov/general/news/api-20-announcements Can't quite tell from quick inspection which version of the API the dependency-check extension is using.

Saturate commented 7 months ago

This extension is just using https://github.com/jeremylong/DependencyCheck it's essentially a tiny wrapper around that, so you get a task you can run in in Azure DevOps.

So your question fits there, the new version 9 is supporting the API 2.0 - so that it will work after December 15th.