RunFox

grype db update error

1

Hello. Sometimes command: _grype db update_ return such error: "unable to update vulnerability database: unable to update vulnerability database: unable to download db: stream error: stream ID 1; INTERNAL_ERROR; received...

Sonarqube + dependency-check plugin for dotnet

4

Hello, I am use Sonarqube EE 8.4.2 with Dependency-Check plugin v 2.0.6 SonarQube parse json-report. But in logs for dotnet-project i see such info warning: “INFO: No project configuration file,...

Nginx+libmodsecurity and work with gzip

8

Hello. I use Nginx 1.20.1 + libmodsecurity-3.0.4-4.el8 as reverse proxy. When we receive request with Content-Encoding: gzip and Content-Type: application/json - activate rule from default modsecurity.conf: ``` SecRule REQBODY_ERROR "!@eq...

DC ignore nonProxyHosts

2

Version of dependency-check-gradle: 7.1.2 Hello! I try to configure dc-gradle in build.gradle file and specify some host with no proxy like: ` dependencyCheck{ proxy { nonProxyHosts=['my-host.com'] } } ` But...

CVE-2022-41852 in commons-jxpath-1.3

3

Hello. There is CVE-2022-41852 with high level risk in commons-jxpath-1.3. This library is transitive for com.netflix.eureka:eureka-client:1.10.17 Any patch?

Equivalent parameters for setting CVEs mirror links in DC versions above 9.x.x

1

Hello, In DC versions up to 9.x.x, it was possible to specify mirror links for Gradle and Maven tasks when launching them using parameters in the form of links to...

How to work with custom rule file?

4

Sonar version: 9.9.1 EE Checkstyle sonar plugin version: 10.17.0 Hello! I installed Checkstyle-Plugin on my SQ server, I see it in Marketplase as "Installed" Also I have xml-file with my...