File tree Expand file tree Collapse file tree 4 files changed +13
-4
lines changed
Expand file tree Collapse file tree 4 files changed +13
-4
lines changed Original file line number Diff line number Diff line change @@ -35,7 +35,10 @@ Installation
3535
3636It is important to understand that the first time this task is executed it may
3737take 10 minutes or more as it downloads and processes the data from the National
38- Vulnerability Database (NVD) hosted by NIST: https://nvd.nist.gov
38+ Vulnerability Database (NVD) hosted by NIST: https://nvd.nist.gov.
3939
4040After the first batch download, as long as the task is executed at least once every
4141seven days the update will only take a few seconds.
42+
43+ The Dependency-Check team strongly recommends to [mirror the NVD database](../data/mirrornvd.html) for any operational
44+ integration. If not done, any service disruption of the NVD database will make the usage of Dependency-Check difficult.
Original file line number Diff line number Diff line change @@ -5,11 +5,14 @@ plug-in or as part of the site plug-in. The plug-in requires Maven 3.6.3 or high
55
66It is important to understand that the first time this task is executed it may
77take 20 minutes or more as it downloads and processes the data from the National
8- Vulnerability Database (NVD) hosted by NIST: https://nvd.nist.gov
8+ Vulnerability Database (NVD) hosted by NIST: https://nvd.nist.gov.
99
1010After the first batch download, as long as the plug-in is executed at least once every
1111seven days the update will only take a few seconds.
1212
13+ The Dependency-Check team strongly recommends to [mirror the NVD database](../data/mirrornvd.html) for any operational
14+ integration. If not done, any service disruption of the NVD database will make the usage of Dependency-Check difficult.
15+
1316### Default Phase
1417The dependency-check plugin is, by default, tied to the `verify` or `site` phase
1518depending on if it is configured as a build or reporting plugin. The examples
Original file line number Diff line number Diff line change @@ -7,7 +7,7 @@ The NVD API and the Retire JS repository.
77Creating an offline cache for the NVD API
88------------------------------------------------------------
99
10- The Open Vulnerability Project's [ vuln CLI] ( https://github.com/dependency-check/Open-Vulnerability-Project/tree /main/vulnz#caching-the-nvd-cve-data )
10+ The Open Vulnerability Project's [ vuln CLI] ( https://github.com/jeremylong/open-vulnerability-cli/blob /main/README.md )
1111can be used to create an offline copy of the data obtained from the NVD API.
1212Then configure dependency-check to use the NVD Datafeed URL.
1313
Original file line number Diff line number Diff line change @@ -5,11 +5,14 @@ libraries; creating a report of known vulnerable components that are included in
55
66It is important to understand that the first time this task is executed it may
77take 5-20 minutes as it downloads and processes the data from the National
8- Vulnerability Database (NVD) hosted by NIST: https://nvd.nist.gov
8+ Vulnerability Database (NVD) hosted by NIST: https://nvd.nist.gov.
99
1010After the first batch download, as long as the plugin is executed at least once every
1111seven days the update will only take a few seconds.
1212
13+ The Dependency-Check team strongly recommends to [mirror the NVD database](../data/mirrornvd.html) for any operational
14+ integration. If not done, any service disruption of the NVD database will make the usage of Dependency-Check difficult.
15+
1316#set( $H = '#' )
1417
1518$H$H Quick Start
You can’t perform that action at this time.
0 commit comments