Giters

albuch / sbt-dependency-check

SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs). :rainbow:

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Speciying CveURLs

abdulahjamak-abh opened this issue · comments

commented

Hi,

I am trying to set up the plugin as global, with local NIST mirror. I am having problems specifying the CveURLs in the global.sbt. I've tried several options, and always got errors (in similar format):

General approach:
net.vonbuchholtz.sbt.dependencycheck.DependencyCheckPlugin.autoImport.dependencyCheckCveUrlModified := "https://..urlof-modified.json.gz"
and god the error as
found : String("...") required: Option[sbt.URL] (which expands to) Option[java.net.URL] net.vonbuchholtz.sbt.dependencycheck.DependencyCheckPlugin.autoImport.dependencyCheckCveUrlModified := "..."
I've also tried setting the url as url(s"..."), url("..."), Some(url(s"...")), Some(url("...")), Optinos[url(s"...")].

Can you please tell me how to specify the url?

P.S I am specifying both the dependencyCheckCveUrlModified and dependencyCheckCveUrlBase in the same way just different links.

commented

Not sure if this helps you, but I specify as such (in build.sbt);

dependencyCheckCveUrlModified := Some(url("https://mymirror.local/nvdcve-1.0-modified.json.gz"))
dependencyCheckCveUrlBase := Some("https://mymirror.local/nvdcve-1.0-%d.json.gz")