Skip to content

NIFI-13493 Remove dependency-check GitHub workflow#9037

Closed
exceptionfactory wants to merge 1 commit intoapache:mainfrom
exceptionfactory:NIFI-13493
Closed

NIFI-13493 Remove dependency-check GitHub workflow#9037
exceptionfactory wants to merge 1 commit intoapache:mainfrom
exceptionfactory:NIFI-13493

Conversation

@exceptionfactory
Copy link
Contributor

Summary

NIFI-13493 Removes the dependency-check automated GitHub workflow to avoid repeated failures following changes in version 9 of the plugin. The OWASP Dependency Check plugin supports a configurable API Key for the NVD database, but without the key, database downloading has significant rate limits. The automated workflow could be reintroduced after evaluating a caching strategy and potential registration of a project-based NVD API Key. The dependency-check profile remains available for local evaluation.

Tracking

Please complete the following tracking steps prior to pull request creation.

Issue Tracking

Pull Request Tracking

  • Pull Request title starts with Apache NiFi Jira issue number, such as NIFI-00000
  • Pull Request commit message starts with Apache NiFi Jira issue number, as such NIFI-00000

Pull Request Formatting

  • Pull Request based on current revision of the main branch
  • Pull Request refers to a feature branch with one commit containing changes

Verification

Please indicate the verification steps performed prior to pull request creation.

Build

  • Build completed using mvn clean install -P contrib-check
    • JDK 21

Licensing

  • New dependencies are compatible with the Apache License 2.0 according to the License Policy
  • New dependencies are documented in applicable LICENSE and NOTICE files

Documentation

  • Documentation formatting appears as expected in rendered files

- Upgraded dependency-check plugin from 9.1.0 to 10.0.1
@exceptionfactory
Copy link
Contributor Author

Recent executions of the dependency-check workflow from the last several days have failed to complete within the one hour limit configured.

https://github.com/apache/nifi/actions/workflows/dependency-check.yml

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant