search

gchq / sleeper

A cloud-native, serverless, scalable, cheap key-value store
Apache License 2.0
53 stars 11 forks source link

Re-enable dependency check plugin #2782

Closed patchwork01 closed 18 hours ago

patchwork01 commented 4 days ago

Background

The dependency check workflow is failing due to repeated failures trying to update the NVD database: https://github.com/gchq/sleeper/actions/runs/9737246730/job/26869066382

This seems to be a problem in the Open Vulnerability Project:

We temporarily disabled the plugin in the following issue:

Description

We'd like to re-enable the dependency check plugin once the bug in the plugin is fixed.

pavanbakkani commented 3 days ago

is the issue solved or still persisting?

patchwork01 commented 2 days ago

is the issue solved or still persisting?

I'll check.

patchwork01 commented 2 days ago

It's still failing because the NVD API isn't working properly:

patchwork01 commented 1 day ago

Actually it does work now, it just takes a really long time. That seems good enough since it will only load the NVD database once per day.