Niklas

Is this happening consistently, and is reproducible, or was this a one-time occurrence? Unless the metrics update is putting your database under heavy stress, it should not have caused the...

So few things I am looking at here: * The OSS Index analyzer doesn't seem to differentiate between errors that are fatal (not retryable, e.g. `HTTP 500`), and errors that...

@Jasper-Ben Yeah that's entirely too long. Do you have Prometheus monitoring set up? As of 4.10 (I believe) we expose metrics as to how long processing of certain events takes:...

Forgot to link it, but this issue seems at least partially related to https://github.com/DependencyTrack/dependency-track/issues/3454, which will impact large(r) portfolios more than smaller ones.

Thanks for the update @Jasper-Ben! But I don't think we (knowingly) changed anything in that version that could be related. But hopefully the next time it appears, you'll be able...

I am optimistic that https://github.com/DependencyTrack/dependency-track/pull/3357 will resolve this, but without reproducer I have no way to verify. The instructions are helpful, but I am unable to reproduce this issue with...

This usually happens when requests are being made to endpoints that are not covered by any handlers (for lack of better words). So you're hitting the HTTP server, but there's...

> @valentijnscholten Could/should it be a background job that gathers the metrics for each users? I fear that would not scale well. Metrics are already one of the main bottlenecks...

As @valentijnscholten said, OSS Index does not support Debian (see https://ossindex.sonatype.org/ecosystems). For the NVD, we can only match against its data when the components in the SBOM have a CPE....

@amergey Trivy 0.54.0 introduced a breaking change to their server API, please make sure you're using a verion lower than that. See #4021.