DependencyCheck icon indicating copy to clipboard operation
DependencyCheck copied to clipboard

override central.content.url and analyzer.central.retry.count

Open tadlakha9 opened this issue 10 months ago • 6 comments

Is there any way we can override the central.content.url and analyzer.central.retry.count variables.

Didn't find these variables in https://jeremylong.github.io/DependencyCheck/dependency-check-gradle/configuration-aggregate.html

tadlakha9 avatar May 01 '24 17:05 tadlakha9

You should be able to override them with -Danalyzer.central.retry.count=1.

jeremylong avatar May 03 '24 21:05 jeremylong

not sure you can actually use a different central.content.url though... You may have to use the nexus analyzer instead.

jeremylong avatar May 03 '24 21:05 jeremylong

we would like to point to 'https://repo1.maven.org/maven2/' instead of default 'https://search.maven.org/' while executing the dependencyCheckAggregate task. To use the nexus analyzer it should be pro version right?

tadlakha9 avatar May 04 '24 03:05 tadlakha9

Not sure if https://repo1.maven.org/maven2/ has the same API endpoints as search.maven.org. Regarding nexus - I'm not sure, I didn't right the integration and I haven't tested it. it might work with the free version.

jeremylong avatar May 05 '24 12:05 jeremylong

i have tried updating the repository url from 'https://search.maven.org/' to 'https://repo1.maven.org/maven2/' while executing the dependencyCheckAggregate task as dependencyCheckAggregate -Dcentral.content.url=http://testing but still it is reaching the https://search.maven.org/, any other way to update the repository url.

tadlakha9 avatar May 08 '24 15:05 tadlakha9

@tadlakha9 The central.content.url is the base URL for the central search API to deliver content pointed to by a file path as obtained from central search search-by-sha API. It should not be exchanged for the base URL for maven central repository itself.

aikebah avatar May 15 '24 14:05 aikebah