Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

A lot of erors appears using dependency check in gitlab ci #6650

Open
yahia20456 opened this issue May 7, 2024 · 2 comments
Open

A lot of erors appears using dependency check in gitlab ci #6650

yahia20456 opened this issue May 7, 2024 · 2 comments
Labels

Comments

@yahia20456
Copy link

I'm trying to integrate dependency_check with gitlab ci , when i run the command directly in the vm it works properly , but using the gitlab ci much erors encountered , please any help ?
$ mkdir -p Dependency_check_reports/
$ dependency-check.sh --scan $CI_PROJECT_DIR --project ****** --out Dependency_check_reports/ --failOnCVSS 7 --format JSON --log verbose
[WARN] Unable to update 1 or more Cached Web DataSource, using local data instead. Results may not include recent vulnerabilities.
[ERROR] Unable to continue dependency-check analysis.
[ERROR] One or more fatal errors occurred
[ERROR] Unable to obtain an exclusive lock on the H2 database to perform updates
[ERROR] No documents exist
Uploading artifacts for failed job

@yahia20456 yahia20456 changed the title A lot of erors appears usig dependency check in gitlab ci A lot of erors appears using dependency check in gitlab ci May 7, 2024
@jeremylong
Copy link
Owner

You likely should use an API Key from the NVD and take a look at https://jeremylong.github.io/DependencyCheck/data/cacheh2.html

@yahia20456
Copy link
Author

@jeremylong im using this config but im always encountering the same error which is unable to Unable to obtain an exclusive lock on the H2 database to perform updates
$ dependency-check.sh --nvdApiKey $NVD_API_KEY --scan $CI_PROJECT_DIR/requirements.txt --out Dependency_check_reports/azue_report.json --failOnCVSS 7 --format JSON --data /opt/dependency-check/data --noupdate

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants