search

sonatype-nexus-community / nancy

A tool to check for vulnerabilities in your Golang dependencies, powered by Sonatype OSS Index
Apache License 2.0
549 stars 76 forks source link

ossindex.sonatype.org - no trace to host #203

Closed aeneasr closed 3 years ago

aeneasr commented 3 years ago

All CI pipelines and local executions fail with:

% traceroute ossindex.sonatype.org 
traceroute: unknown host ossindex.sonatype.org

cc @bhamail / @DarthHater

bhamail commented 3 years ago

@aeneasr It sounds like your network might be blocking connections to ossindex. nancy needs to connect to ossindex in order to check for vulnerabilities. Can you ping ossindex from the machine running the CI build? e.g. What does the following curl command show when run on your CI build machine?:

$ curl https://ossindex.sonatype.org/api/v3/component-report
{"code":405,"message":"HTTP 405 Method Not Allowed"}

If that doesn't shed light, could you provide more information, and the full error you're seeing?

aeneasr commented 3 years ago

Looks like it was just a hick-up - the trace failed in both CI (I guess AWS?) and locally (my home) which is why I opened this issue first! Anyway, thank you for the quick response!