dependency-check / azuredevops

Dependency Check Azure DevOps Extension
Apache License 2.0
45 stars 25 forks source link

ExecutionException/NullPointer with OWASP Engine to be aware of - impacting v6.1.5 engine #73

Closed ewilansky closed 3 years ago

ewilansky commented 3 years ago

We are impacted by this issue and because the NVD CVE database is downloaded each time our Azure pipeline runs, the temporary fix suggested here https://github.com/jeremylong/DependencyCheck/issues/3306, adding:

additionalArguments: '--noupdate'

will not work.

I know this issue is being worked on, just wanted this community to know about it. Once it's resolved, I'll be sure to close this issue.

ewilansky commented 3 years ago

This issue has been resolved.