Michael Wellendorf

I'm also facing this freeze issue when using clearlyDefined as storageReader. ``` ... storageReaders = [ fileBasedStorage, clearlyDefined ] storageWriters = [ fileBasedStorage ] ... ``` ``` root@2af0304336d8:/# ps aux...

I'll give it a try within the next days. With this configuration: ``` storageReaders = [ fileBasedStorage, clearlyDefined ] storageWriters = [ fileBasedStorage ] ```

Hmm. It's still freezing. I'm on commit main/ddfbf6289b4aef2b5acaf29dee6dd0718b27b52a and running the scanner locally (after `./gradlew installDist`). Config is ``` storageReaders = [ clearlyDefined, fileBasedStorage ] ``` So `clearlyDefined` is used...

Yes, the download link shown in Artifactory's native file browser matches the one used by ORT. This link was used in my cURL test. I tried both username / token...

I did some more investigation and found out, that the download requests performed by ORT do not reach Artifactory at all. The access log of Artifactory does not show any...

Meanwhile we tried some configuration on the loadbalancer. But without effect. The credentials used for these type of downloads (executed by MavenSupport class) are taken either from `.netrc` or ENV...

Might our issues be related to this? https://github.com/oss-review-toolkit/ort/blob/main/analyzer/src/main/kotlin/managers/Gradle.kt#L225 Because we are only having authentication errors with Gradle builds. And Artifactory says `non_authenticated_user` is requesting files.

I'm also facing this issue. My use case is scanning a Helm chart repository, and I want to scan all images defined by the chart. ``` helm template . \...

What I also checked after merging several files into one BOM: ``` $ cyclonedx-cli validate --input-file bom/final.bom.cdx.json BOM validated successfully. ``` I changed the log level to DEBUG. Here are...

Hi @nscuro thank you for your support. :-) I will test again with your BOM files, and report asap. Regards, Michael