无法使用jenkins或maven连接到依赖项检查数据库

无法使用jenkins或maven连接到依赖项检查数据库,maven,jenkins,owasp,Maven,Jenkins,Owasp,当我使用Maven运行干净安装时,会出现以下错误: ... [DependencyCheck] [INFO] Processing Complete for NVD CVE - 2019 (11020 ms) [DependencyCheck] [INFO] Processing Complete for NVD CVE - 2017 (28415 ms) [DependencyCheck] [INFO] Processing Complete for NVD CVE -

当我使用Maven运行干净安装时,会出现以下错误:

...   
  [DependencyCheck] [INFO] Processing Complete for NVD CVE - 2019  (11020 ms)
  [DependencyCheck] [INFO] Processing Complete for NVD CVE - 2017  (28415 ms)
  [DependencyCheck] [INFO] Processing Complete for NVD CVE - 2018  (16658 ms)
  [DependencyCheck] [INFO] Download Started for NVD CVE - Modified
  [DependencyCheck] [INFO] Download Complete for NVD CVE - Modified  (854 ms)
  [DependencyCheck] [INFO] Processing Started for NVD CVE - Modified
  [DependencyCheck] [INFO] Processing Complete for NVD CVE - Modified  (7572 ms)
  [DependencyCheck] [INFO] Begin database maintenance
  [DependencyCheck] [INFO] End database maintenance (41820 ms)
  [DependencyCheck] [INFO] Skipping RetireJS update since last update was within 24 hours.
  [DependencyCheck] [INFO] Begin database defrag
  [DependencyCheck] [INFO] End database defrag (9641 ms)
  [DependencyCheck] [INFO] Check for updates complete (205910 ms)
  [DependencyCheck] [ERROR] One or more fatal errors occurred
  [DependencyCheck] [ERROR] Unable to connect to the dependency-check database
下面是我为maven的依赖项检查插件pom.xml的配置

    <plugins>
      <plugin>
        <groupId>org.owasp</groupId>
        <artifactId>dependency-check-maven</artifactId>
        <version>5.2.1</version>
        <executions>
          <execution>
            <goals>
              <goal>check</goal>
            </goals>
          </execution>
        </executions>
      </plugin>
    </plugins>

org.owasp
依赖性检查maven
5.2.1
检查
Jenkins的依赖性检查插件也有同样的问题


我已尝试删除本地存储库中的
org/owasp/dependency check data
文件夹,但仍然存在问题。

我找到了解决方法

例如,在maven项目中复制位于
org/owasp/dependency check data
中的
odc.mv.db
文件

然后像那样改变你的插件配置

    <plugin>
      <groupId>org.owasp</groupId>
      <artifactId>dependency-check-maven</artifactId>
      <version>5.2.1</version>
      <executions>
        <execution>
          <goals>
            <goal>check</goal>
          </goals>
        </execution>
      </executions>
      <configuration>
        <connectionString>jdbc:h2:file:/path-of/your/project/odc</connectionString>
      </configuration>
    </plugin>

org.owasp
依赖性检查maven
5.2.1
检查
jdbc:h2:file:/path of/your/project/odc

它应该能用

我找到了一个解决办法

例如,在maven项目中复制位于
org/owasp/dependency check data
中的
odc.mv.db
文件

然后像那样改变你的插件配置

    <plugin>
      <groupId>org.owasp</groupId>
      <artifactId>dependency-check-maven</artifactId>
      <version>5.2.1</version>
      <executions>
        <execution>
          <goals>
            <goal>check</goal>
          </goals>
        </execution>
      </executions>
      <configuration>
        <connectionString>jdbc:h2:file:/path-of/your/project/odc</connectionString>
      </configuration>
    </plugin>

org.owasp
依赖性检查maven
5.2.1
检查
jdbc:h2:file:/path of/your/project/odc
应该行得通