Skip to content

Commit 996cf74

Browse files
committed
feat: #7610 add an explicit mention that integration has to be more robust for operational usage
1 parent 0f131f1 commit 996cf74

File tree

3 files changed

+12
-3
lines changed

3 files changed

+12
-3
lines changed

ant/src/site/markdown/index.md.vm

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,10 @@ Installation
3535

3636
It is important to understand that the first time this task is executed it may
3737
take 10 minutes or more as it downloads and processes the data from the National
38-
Vulnerability Database (NVD) hosted by NIST: https://nvd.nist.gov
38+
Vulnerability Database (NVD) hosted by NIST: https://nvd.nist.gov.
3939

4040
After the first batch download, as long as the task is executed at least once every
4141
seven days the update will only take a few seconds.
42+
43+
The Dependency-Check team strongly recommends to [mirror the NVD database](../data/mirrornvd.html) for any operational
44+
integration. If not done, any service disruption of the NVD database will make the usage of Dependency-Check difficult.

maven/src/site/markdown/index.md.vm

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,11 +5,14 @@ plug-in or as part of the site plug-in. The plug-in requires Maven 3.6.3 or high
55

66
It is important to understand that the first time this task is executed it may
77
take 20 minutes or more as it downloads and processes the data from the National
8-
Vulnerability Database (NVD) hosted by NIST: https://nvd.nist.gov
8+
Vulnerability Database (NVD) hosted by NIST: https://nvd.nist.gov.
99

1010
After the first batch download, as long as the plug-in is executed at least once every
1111
seven days the update will only take a few seconds.
1212

13+
The Dependency-Check team strongly recommends to [mirror the NVD database](../data/mirrornvd.html) for any operational
14+
integration. If not done, any service disruption of the NVD database will make the usage of Dependency-Check difficult.
15+
1316
### Default Phase
1417
The dependency-check plugin is, by default, tied to the `verify` or `site` phase
1518
depending on if it is configured as a build or reporting plugin. The examples

src/site/markdown/dependency-check-gradle/index.md.vm

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,11 +5,14 @@ libraries; creating a report of known vulnerable components that are included in
55

66
It is important to understand that the first time this task is executed it may
77
take 5-20 minutes as it downloads and processes the data from the National
8-
Vulnerability Database (NVD) hosted by NIST: https://nvd.nist.gov
8+
Vulnerability Database (NVD) hosted by NIST: https://nvd.nist.gov.
99

1010
After the first batch download, as long as the plugin is executed at least once every
1111
seven days the update will only take a few seconds.
1212

13+
The Dependency-Check team strongly recommends to [mirror the NVD database](../data/mirrornvd.html) for any operational
14+
integration. If not done, any service disruption of the NVD database will make the usage of Dependency-Check difficult.
15+
1316
#set( $H = '#' )
1417

1518
$H$H Quick Start

0 commit comments

Comments
 (0)