Merge pull request #5055 from eXist-db/bugfix/dependency-check-maven

[5.x.x] update settings for dependency-check-maven
eXist-db · Sep 13, 2023 · 1d3419c · 1d3419c
2 parents fadddc3 + 4580633
commit 1d3419c
Showing 1 changed file with 3 additions and 4 deletions.
diff --git a/exist-parent/pom.xml b/exist-parent/pom.xml
@@ -548,11 +548,10 @@
                 <plugin>
                     <groupId>org.owasp</groupId>
                     <artifactId>dependency-check-maven</artifactId>
-                    <version>6.5.3</version>
+                    <version>8.4.0</version>
                     <configuration>
-                        <!-- Use Evolved Binary's mirror of nvd.nist.gov -->
-                        <cveUrlModified>https://nvd.mirror.evolvedbinary.com/feeds/json/cve/1.1/nvdcve-1.1-modified.json.gz</cveUrlModified>
-                        <cveUrlBase>https://nvd.mirror.evolvedbinary.com/feeds/json/cve/1.1/nvdcve-1.1-%d.json.gz</cveUrlBase>
+                        <!-- The OSS Index Server (https://ossindex.sonatype.org) can sometimes be flaky -->
+                        <ossIndexWarnOnlyOnRemoteErrors>true</ossIndexWarnOnlyOnRemoteErrors>
 
                         <archiveAnalyzerEnabled>false</archiveAnalyzerEnabled>
                         <assemblyAnalyzerEnabled>false</assemblyAnalyzerEnabled>