search

jeremylong / DependencyCheck

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
https://owasp.org/www-project-dependency-check/
Apache License 2.0
5.93k stars 1.21k forks source link

[Question] How use NVD Data feed argument #6641

Open wilsoonjunior14 opened 2 weeks ago

wilsoonjunior14 commented 2 weeks ago

I have generated the cache folder with the .json.gz files. But I'm with facing issues related to how I can use that, because all times so far, I am getting issue related to NOT IN GZIP FORMAT. So I would like to understand better how use that on a remote server and if its necessary decompress these files or not.

Also, I'm using the dependency-check.bat file to try use the nvdDatafeed argument. Regards

jeremylong commented 2 weeks ago

Did you look at the example? https://jeremylong.github.io/DependencyCheck/dependency-check-cli/arguments.html

file://c:/path/to/nvdcve-{0}.json.gz

I'm guessing on the format of the file URL a little as I don't feel like looking it up and don't have a PC to test. It'll be something like that.