You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by "lhotari (via GitHub)" <gi...@apache.org> on 2025/02/12 14:31:06 UTC

[PR] [improve][ci] Skip "OWASP dependency check" when data wasn't found in cache [pulsar]

lhotari opened a new pull request, #23970:
URL: https://github.com/apache/pulsar/pull/23970

   ### Motivation
   
   Pulsar CI runs an "OWASP dependency check" build as part of the CI workflow when a dependency is updated.
   This can take very long for Pull Request builds when the dependency check data isn't found in the cache.
   
   ```
   Warning:  An NVD API Key was not provided - it is highly recommended to use an NVD API key as the update can take a VERY long time without an API Key
   [INFO] NVD API has 280,989 records in this update
   [INFO] Downloaded 10,000/280,989 (4%)
   [INFO] Downloaded 20,000/280,989 (7%)
   [INFO] Downloaded 30,000/280,989 (11%)
   [INFO] Downloaded 40,000/280,989 (14%)
   [INFO] Downloaded 50,000/280,989 (18%)
   [INFO] Downloaded 60,000/280,989 (21%)
   [INFO] Downloaded 70,000/280,989 (25%)
   [INFO] Downloaded 80,000/280,989 (28%)
   [INFO] Downloaded 90,000/280,989 (32%)
   [INFO] Downloaded 100,000/280,989 (36%)
   [INFO] Downloaded 110,000/280,989 (39%)
   [INFO] Downloaded 120,000/280,989 (43%)
   [INFO] Downloaded 130,000/280,989 (46%)
   [INFO] Downloaded 140,000/281,043 (50%)
   [INFO] Downloaded 150,000/281,043 (53%)
   [INFO] Downloaded 160,000/281,043 (57%)
   [INFO] Downloaded 170,000/281,043 (60%)
   ```
   
   ### Modifications
   
   Skip running "OWASP dependency check" when the dependency check data isn't found in the cache.
   
   ### Documentation
   
   <!-- DO NOT REMOVE THIS SECTION. CHECK THE PROPER BOX ONLY. -->
   
   - [ ] `doc` <!-- Your PR contains doc changes. -->
   - [ ] `doc-required` <!-- Your PR changes impact docs and you will update later -->
   - [x] `doc-not-needed` <!-- Your PR changes do not impact docs -->
   - [ ] `doc-complete` <!-- Docs have been already added -->


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [PR] [improve][ci] Skip "OWASP dependency check" when data wasn't found in cache [pulsar]

Posted by "lhotari (via GitHub)" <gi...@apache.org>.
lhotari closed pull request #23970: [improve][ci] Skip "OWASP dependency check" when data wasn't found in cache
URL: https://github.com/apache/pulsar/pull/23970


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [PR] [improve][ci] Skip "OWASP dependency check" when data wasn't found in cache [pulsar]

Posted by "lhotari (via GitHub)" <gi...@apache.org>.
lhotari merged PR #23970:
URL: https://github.com/apache/pulsar/pull/23970


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org