Tom Kuipers

Dependency-Track NVD API mirroring for Dependency-Check

26

### Current Behavior Previously I used the NVD mirroring feature to speed up dependency-check using parameters `-DcveUrlModified=https://my.dependency-track.host/mirror/nvd/nvdcve-1.1-modified.json.gz -DcveUrlBase=https://my.dependency-track.host/mirror/nvd/nvdcve-1.1-%d.json.gz`. Using dependency-check parameter `nvdDatafeedUrl` results in error `[ERROR] Unable to download the...

Missing version in release artifact filename

6

In previous releases version information was always included in the artifact filename. This is standard for sonar plugins (also other than findbugs): https://github.com/spotbugs/sonar-findbugs/releases/download/4.4.2/sonar-findbugs-plugin-4.4.2.jar https://github.com/spotbugs/sonar-findbugs/releases/download/4.4.1/sonar-findbugs-plugin-4.4.1.jar https://github.com/spotbugs/sonar-findbugs/releases/download/4.4.0/sonar-findbugs-plugin-4.4.0.jar https://github.com/spotbugs/sonar-findbugs/releases/download/v4.3.0/sonar-findbugs-plugin-4.3.0.jar https://github.com/spotbugs/sonar-findbugs/releases/download/4.2.10/sonar-findbugs-plugin-4.2.10.jar [...] Since 4.5.0...

Parent project name is not respected

2

### Current Behavior To keep track of deployed containers we created namespaces as parent projects (e.g. `deptrack-dev` and `deptrack-prd`). Namespaces can contain multiple projects - which are containers running inside...