From 45806330c909b6acaf9b9bc827c2a33848de716f Mon Sep 17 00:00:00 2001
From: Dannes Wessels <dizzzz@users.noreply.github.com>
Date: Mon, 11 Sep 2023 20:39:33 +0200
Subject: [PATCH] [bugfix] update settings for dependency-check-maven

Synced from develop
---
 exist-parent/pom.xml | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/exist-parent/pom.xml b/exist-parent/pom.xml
index e35ea3aaccd..4d282284aae 100644
--- a/exist-parent/pom.xml
+++ b/exist-parent/pom.xml
@@ -548,11 +548,10 @@
                 <plugin>
                     <groupId>org.owasp</groupId>
                     <artifactId>dependency-check-maven</artifactId>
-                    <version>6.5.3</version>
+                    <version>8.4.0</version>
                     <configuration>
-                        <!-- Use Evolved Binary's mirror of nvd.nist.gov -->
-                        <cveUrlModified>https://nvd.mirror.evolvedbinary.com/feeds/json/cve/1.1/nvdcve-1.1-modified.json.gz</cveUrlModified>
-                        <cveUrlBase>https://nvd.mirror.evolvedbinary.com/feeds/json/cve/1.1/nvdcve-1.1-%d.json.gz</cveUrlBase>
+                        <!-- The OSS Index Server (https://ossindex.sonatype.org) can sometimes be flaky -->
+                        <ossIndexWarnOnlyOnRemoteErrors>true</ossIndexWarnOnlyOnRemoteErrors>
 
                         <archiveAnalyzerEnabled>false</archiveAnalyzerEnabled>
                         <assemblyAnalyzerEnabled>false</assemblyAnalyzerEnabled>