nvd-clojure

nvd-clojure copied to clipboard

Idea: also emit edn/xml files if not provided

vemv

* Semver / policy * How to remediate? Is it a good idea to automate remediation?

vemv

It would be nice to leave example CI files for Circle and GH Actions alike, particularly including artifact caching.

vemv

Update stale dependencies

1

Automated changes by [create-pull-request](https://github.com/peter-evans/create-pull-request) GitHub action

github-actions[bot]

`NVD_API_TOKEN` environment variable does not work

13

### Description I am using the `NVD_API_TOKEN` environment variable to provide nvd-clojure with my NVD API key, and it does not work. Using the Clojure Tools method, I should have...

kelvinqian00

Fix a typo in the CHANGELOG

1

vemv

Calculate classpath using tools.deps and provide nvd-clojure as a regular -X function?

4

Hi @vemv (and others) And thanks for a great project! I'm wondering if it is worthwhile to support calculating the classpath using tools.deps, thus avoiding the need for an extra...

ivarref

This would help authoring nicely cacheable CI integrations, that cache the DB even if the run will fail. The progam should exit with non-zero code if any http call failed...

vemv

Add support for multiple nvd suppression files

1

### Description Adding support for multiple suppression files would help in build runs where having a base suppression and any additional suppressions are merged or used. This is a feature...

luxcodes

Scan failing after 6 hours

16

### Description I use nvd-clojure on CI on a [clj-yaml](https://github.com/clj-commons/clj-yaml) and [pomegranate](https://github.com/clj-commons/pomegranate). Since June 28th, these nvd scans are failing after 6h or so. In nvd-clojure logs I see plenty...

lread