Further details for offline environments (#955) #960
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
terriko
reviewed
Nov 9, 2020
doc/how_to_guides/offline.md
Outdated
| ## Run cve-bin-tool with --update never option | ||
| In an offline environment, when running a scan specify `--update never` so that cve-bin-tool doesn't attempt to download the latest database files. | ||
| ## Create configuration file | ||
| A configuration file is used to specify default behaviour for the cve-bin-tool. When running in an offline environment the `disable_version_check` option should be set to `false` to prevent the tool checking for a newer version of the tool. |
There was a problem hiding this comment.
Wait, should disable_version_check be false or true? I'd have assumed that disable_version_check would be true to disable the version check. Is the logic here backwards in the doc or the tool?
|
Terri
Let me check again. I just copied the value out of the test file.
However I have only just noticed that it is also a command line option so
you can just specify --disable-version-check and then no config file is
required. This is much easier and no boolean parameter needed!
Anthony
…On Mon, 9 Nov 2020, 22:02 Terri Oda, ***@***.***> wrote:
***@***.**** commented on this pull request.
------------------------------
In doc/how_to_guides/offline.md
<#960 (comment)>:
> @@ -16,8 +16,13 @@ The way of transfer depends on the environment. The files to be transferred are
## Import the vulnerability database file on the offline system
The vulnerability database should be copied into ~/.cache/cve-bin-tool
-## Run cve-bin-tool with --update never option
-In an offline environment, when running a scan specify `--update never` so that cve-bin-tool doesn't attempt to download the latest database files.
+## Create configuration file
+A configuration file is used to specify default behaviour for the cve-bin-tool. When running in an offline environment the `disable_version_check` option should be set to `false` to prevent the tool checking for a newer version of the tool.
Wait, should disable_version_check be false or true? I'd have assumed
that disable_version_check would be true to disable the version check. Is
the logic here backwards in the doc or the tool?
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
<#960 (review)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/ACAID277RDSAY5FAV7Z3OKTSPBRIZANCNFSM4TP4RGBQ>
.
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
No description provided.