Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Missing hosted suppression and empty Retire JS reported inccorectly #5946

Closed
ptecihner opened this issue Sep 20, 2023 · 2 comments
Closed

Missing hosted suppression and empty Retire JS reported inccorectly #5946

ptecihner opened this issue Sep 20, 2023 · 2 comments

Comments

@ptecihner
Copy link

Describe the bug
Using the CLI with the self-hosted JS file and self-hosted suppression files configured the analyzer gives an incorrect warning of those components empty or missing.

It feels the analyzer takes too long as well, last run was 591 seconds.

Version of dependency-check used
8.2.1 and retested on 8.4.0 with the same result

Log file
Nothing to mention

To Reproduce
Steps to reproduce the behavior:

  1. configure the config file
  2. checkout a node project
  3. Run analysis using CLI

Expected behavior
Considering the config file has both of these values configured it shouldn't be reporting them as missing. Also the analyzer should take a lot less time

Additional context
Add any other context about the problem here.

@ptecihner ptecihner added the bug label Sep 20, 2023
@aikebah
Copy link
Collaborator

aikebah commented Sep 24, 2023

Sounds to me like there are timeouts attempting to download your self-hosted resources. Enable debug logging and closely verify your log file for issues.

@ptecihner
Copy link
Author

I have and the parameters on the cli are passed in - according to the log files as well. However the log file still gives WARN for both the suppression and the retire JS files.

@aikebah aikebah closed this as not planned Won't fix, can't repro, duplicate, stale Oct 20, 2024
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Dec 5, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

2 participants