DependencyTrack / DependencyTrack/dependency-track

Dependency Track Api Repeated Crashes on startup

Open
#1,371 1 comment 0 reactions 0 assignees View on GitHub
in triage
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

The defect may already be reported! Please search for the defect before creating one.

### Current Behavior:

The api server startups up, executes a failed sql statement, retrieves NPM advisories, and then restarts. The api goes through this loop endlessly making it impossible to login through the frontend server or use the rest api.

### Steps to Reproduce:
Use Docker Desktop 3.7
Download a clean version of Dependency Track using docker compose

curl -LO https://dependencytrack.org/docker-compose.yml
docker-compose up -d

The only change inside the docker compose is on the resources key so I can try dependency track on a local machine

resources:
limits:
memory: 5288m
reservations:
memory: 3192m

### Expected Behavior:
The server starts up and stays active.

### Environment:

- Dependency-Track Version: 4.3.6 Built-on: 2021-09-20T14:53:35Z
- Distribution: Docker
- BOM Format & Version:
- Database Server: Default H2
- Browser: FireFox
- Docker Desktop Resources is set so 6GB of memory

### Additional Details:
There is the stacktrace for the database error:

15:22:31.789 INFO [MetricsUpdateTask] Completed metrics update for project: 3baffd28-5679-4427-8cb6-379d2674d025

15:22:31.809 INFO [MetricsUpdateTask] Completed portfolio metrics update

15:22:32.481 ERROR [MetricsUpdateTask] An unknown error occurred while updating metrics

javax.jdo.JDOException: Exception thrown when executing query : SELECT 'org.dependencytrack.model.Vulnerability' AS DN_TYPE,A0.CREATED,A0.CREDITS,A0.CVSSV2BASESCORE,A0.CVSSV2EXPLOITSCORE,A0.CVSSV2IMPACTSCORE,A0.CVSSV2VECTOR,A0.CVSSV3BASESCORE,A0.CVSSV3EXPLOITSCORE,A0.CVSSV3IMPACTSCORE,A0.CVSSV3VECTOR,B0.CWEID,B0.ID,B0."NAME",A0.DESCRIPTION,A0.FRIENDLYVULNID,A0.ID AS NUCORDER0,A0.PATCHEDVERSIONS,A0.PUBLISHED,A0.RECOMMENDATION,A0."REFERENCES",A0.SEVERITY,A0.SOURCE,A0.SUBTITLE,A0.TITLE,A0.UPDATED,A0.UUID,A0.VULNID,A0.VULNERABLEVERSIONS FROM VULNERABILITY A0 LEFT OUTER JOIN CWE B0 ON A0.CWE = B0.ID ORDER BY NUCORDER0

at org.datanucleus.api.jdo.NucleusJDOHelper.getJDOExceptionForNucleusException(NucleusJDOHelper.java:676)

at org.datanucleus.api.jdo.JDOQuery.executeInternal(JDOQuery.java:456)

at org.datanucleus.api.jdo.JDOQuery.execute(JDOQuery.java:263)

at alpine.persistence.AbstractAlpineQueryManager.execute(AbstractAlpineQueryManager.java:148)

at org.dependencytrack.persistence.VulnerabilityQueryManager.getVulnerabilities(VulnerabilityQueryManager.java:284)

at org.dependencytrack.persistence.QueryManager.getVulnerabilities(QueryManager.java:734)

at org.dependencytrack.tasks.MetricsUpdateTask.updateVulnerabilitiesMetrics(MetricsUpdateTask.java:560)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.