Skip to content

Commit 87802fb

Browse files
committed
ci: vulnerability scan tweaks
- Replace config.json with nvd-clojure.edn. - Bump dependency-check - Increase nvd max retry count from 10 to 30. The idea here is that if the NIST data feeds are struggling (as they happen to be now), more retries might just allow us to successfully download and cache a db. Subsequent runs would then use the cached db and avoid the costly attempt to retry re-downloading the entire db again.
1 parent fc99103 commit 87802fb

File tree

4 files changed

+5
-4
lines changed

4 files changed

+5
-4
lines changed

bb.edn

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,7 @@
5555
:task (let [cp (with-out-str (clojure "-Spath"))]
5656
(clojure {:dir "./nvd_check_helper_project"}
5757
"-J-Dclojure.main.report=stderr -M -m nvd.task.check"
58-
"./config.json"
58+
"./nvd-clojure.edn"
5959
cp))}
6060
pubcheck
6161
{:doc "run only publish checks (without publishing)"

nvd_check_helper_project/config.json

Lines changed: 0 additions & 2 deletions
This file was deleted.

nvd_check_helper_project/deps.edn

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,4 +4,4 @@
44
#_:clj-kondo/ignore
55
{:mvn/version "RELEASE"}
66
;; temporarily try bumping transitive dep to current release
7-
org.owasp/dependency-check-core {:mvn/version "11.0.0"}}}
7+
org.owasp/dependency-check-core {:mvn/version "11.1.0"}}}
Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
{:delete-config? false
2+
:nvd {:nvd-api {:max-retry-count 30}}
3+
:suppression-file "./suppressions.xml"}

0 commit comments

Comments
 (0)